We have seen a number of Trojans in the last couple weeks that were being detected and quarantined but not being deleted. I think the issue we are seeing has to do with a backup restore option that exists within XP that backs these Trojans up somehow or the related files and then installs the Trojan again. LANDesk support was aware of this and gave us a suggestion. I would call support and open ticket if you have not already done so. Also, there is a virus alert process that LANDesk has to report new or undiscovered virus's/
1 of 1 people found this helpful
Indeed - Microsoft's concept of restore points - while "very nice" for most users, is horrible for AV solutions if an infected file is in one of those restore points.
This is not just limited to us, pretty much all AV-vendors have this problem.
As has been suggested by Russel, try disabling it - depending on where they're hiding (and how sophisticated they are), there may be more hoops to jump through in some cases. Generally, AV solutions can clean out most things without major intervention, in some cases it's still needed though to boot into safe mode and such things.
This may also help you along the way:
If there's real problems getting rid of this, it'd be possible to make a virtual image of an affected system and send it to us as a support ticket - we may be able to help potentially.
LANDesk EMEA Technical Lead.
Thanks all for the help. Disabling system restore helped to prevent further reinfection.
Thanks we will test this procedure to see if it works
Great information, I will pass this on to my team to see if we can use this. Great stuff...