Recurring Trojan Find by Deep Scan

[BillFromDallas]

I have SAS Application Version : 4.47.1000

Core Rules Database Version : 6069

Trace Rules Database Version: 3881

I run Complete Scan and get:

Trojan.Agent/Gen-BanLoad

C:\SYSTEM VOLUME INFORMATION\_RESTORE{3DBD88D2-9FFC-498B-A689-A4771362F918}\RP30\A0023646.EXE

Told it to Quarantine & Remove.

But, when a repeat the Complete Scan, it is always there. Is it really a harmful file? Has it really been removed and come back immediately?

Thanks, Bill

[Seth]

Welcome to the SAS forum Bill.

It's an infected file, but infected files in System Restore can be hard to remove.

I suggest purging the restore points by disabling system restore, restarting, then enable it again.

[BillFromDallas]

Welcome to the SAS forum Bill.

It's an infected file, but infected files in System Restore can be hard to remove.

I suggest purging the restore points by disabling system restore, restarting, then enable it again.

Thanks, Seth. That worked. Good job. Bill

[Seth]

You're welcome.

Thanks for posting back with the results.