BillFromDallas Posted December 26, 2010 I have SAS Application Version : 4.47.1000 Core Rules Database Version : 6069 Trace Rules Database Version: 3881 I run Complete Scan and get: Trojan.Agent/Gen-BanLoad C:\SYSTEM VOLUME INFORMATION\_RESTORE{3DBD88D2-9FFC-498B-A689-A4771362F918}\RP30\A0023646.EXE Told it to Quarantine & Remove. But, when a repeat the Complete Scan, it is always there. Is it really a harmful file? Has it really been removed and come back immediately? Thanks, Bill Share this post Link to post Share on other sites
Seth Posted December 26, 2010 Welcome to the SAS forum Bill. It's an infected file, but infected files in System Restore can be hard to remove. I suggest purging the restore points by disabling system restore, restarting, then enable it again. Share this post Link to post Share on other sites
BillFromDallas Posted December 26, 2010 Welcome to the SAS forum Bill. It's an infected file, but infected files in System Restore can be hard to remove. I suggest purging the restore points by disabling system restore, restarting, then enable it again. Thanks, Seth. That worked. Good job. Bill Share this post Link to post Share on other sites
Seth Posted December 27, 2010 You're welcome. Thanks for posting back with the results. Share this post Link to post Share on other sites