General discussion

  • Creator
    Topic
  • #2297781

    w32.hllw.gaobot.ao virus hidden files

    Locked

    by casemaker ·

    Hi,
    My Norton detected 4 files infected with this virus w32.hllw.gaobot.ao and 2 other variations az,ae,. I have disabled XP restore and when I scan it finds 4 files in this location that I cannot find. I have gone into explorer properties and said to show all files. The files are in
    C:\system volume information\_restore{B44OEE4-94D5-B676-2E3A6F002405}\RP128\A0014013.EXE is infected with w32.hllw.gaobot.az It list the same location for all 4 files and variants as well. I did a registry search and it found A0014013.exe only. How do I delete these so I can reactivate XP restore?
    Thank

All Comments

  • Author
    Replies
    • #2670684

      Reply To: w32.hllw.gaobot.ao virus hidden files

      by carlos.nino ·

      In reply to w32.hllw.gaobot.ao virus hidden files

      I’m not sure, but I think that if you disable restore, you won’t be able to find the folder. If you have it enabled and, in explorer, you also enabled viewing hidden and system files and folders, you should be able to find it in your root directory.

    • #2672251

      Reply To: w32.hllw.gaobot.ao virus hidden files

      by joseph moore ·

      In reply to w32.hllw.gaobot.ao virus hidden files

      When you start the Disk Cleanup utility (Start -> All Programs -> Accessories -> System Tools -> Disk Cleanup), click the More Options tab, and then click Clean up under System Restore, all restore points (except the most recent one) are purged.
      That should do it.

    • #2672183

      Reply To: w32.hllw.gaobot.ao virus hidden files

      by casemaker ·

      In reply to w32.hllw.gaobot.ao virus hidden files

      This question was closed by the author

Viewing 2 reply threads