I have a Trojan which has nestled itself in my WinME restore folder, in a place which appears locked down, so I can't access or delete it.
> the name of the virus is "TROJ_GNUTELLAMAN.A".
>
> http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=T
> ROJ_GNUTELMAN.A
>
> The above link describes this trojan horse. It is a low risk virus.
>
> According to antivirus.com:
> "If the user is running a Windows 9x/Me machine the Trojan attempts to
> install itself in the "Startup" folder"
> It inserts itself as gspot.exe and can be removed easily.
> However, in my case the trojan has inserted itself into
> "C:\_RESTORE\ARCHIVE\FS121.CAB". The directory has a string concatenated
> to it called: *A0003864.CPY" I don't know what that is, but it is part
> of the path that Trend Antivirus finds.
>
> Any info you could provide on how to get this thing removed would be
> greatly appreciated.
> the name of the virus is "TROJ_GNUTELLAMAN.A".
>
> http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=T
> ROJ_GNUTELMAN.A
>
> The above link describes this trojan horse. It is a low risk virus.
>
> According to antivirus.com:
> "If the user is running a Windows 9x/Me machine the Trojan attempts to
> install itself in the "Startup" folder"
> It inserts itself as gspot.exe and can be removed easily.
> However, in my case the trojan has inserted itself into
> "C:\_RESTORE\ARCHIVE\FS121.CAB". The directory has a string concatenated
> to it called: *A0003864.CPY" I don't know what that is, but it is part
> of the path that Trend Antivirus finds.
>
> Any info you could provide on how to get this thing removed would be
> greatly appreciated.