Windows

General discussion

Gravatar
Locked

w32.hllw.gaobot.ao virus hidden files

By Casemaker ·
Hi,
My Norton detected 4 files infected with this virus w32.hllw.gaobot.ao and 2 other variations az,ae,. I have disabled XP restore and when I scan it finds 4 files in this location that I cannot find. I have gone into explorer properties and said to show all files. The files are in
C:\system volume information\_restore{B44OEE4-94D5-B676-2E3A6F002405}\RP128\A0014013.EXE is infected with w32.hllw.gaobot.az It list the same location for all 4 files and variants as well. I did a registry search and it found A0014013.exe only. How do I delete these so I can reactivate XP restore?
Thank

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
+ Follow this Discussion ·
| Thread display: Collapse - | Expand +

All Comments

gravatar
Collapse -

by carlos.nino In reply to w32.hllw.gaobot.ao virus ...

I'm not sure, but I think that if you disable restore, you won't be able to find the folder. If you have it enabled and, in explorer, you also enabled viewing hidden and system files and folders, you should be able to find it in your root directory.

gravatar
Collapse -

by Casemaker In reply to

Thank You!

gravatar
Collapse -

by Joseph Moore In reply to w32.hllw.gaobot.ao virus ...

When you start the Disk Cleanup utility (Start -> All Programs -> Accessories -> System Tools -> Disk Cleanup), click the More Options tab, and then click Clean up under System Restore, all restore points (except the most recent one) are purged.
That should do it.

gravatar
Collapse -

by Casemaker In reply to

Thank You!

gravatar
Collapse -

by Casemaker In reply to w32.hllw.gaobot.ao virus ...

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Start or search

Related Discussions

Related Forums