Thanks for the help. I thought this would have been the case, as the trojan originally resided in an executable found in the program files directory, which, I believe, system restore backs up. I will show her how to do that when I visit her in December. Thanks again. On Mon, 27 Nov 2006 09:10:51 -0000, "Malcolm Parfitt" <malcolm@xxxxxxxxxxxxxxx> said: > Yes, System Restore is quite capable of doing this. It is a good idea to > disable System Restore delete any restore points, clean the machine and > enable it again. > ----- Original Message ----- > From: "Christopher Hallsworth" <chrishallsworth@xxxxxxxxxxxxxx> > To: <access-uk@xxxxxxxxxxxxx> > Sent: Monday, November 27, 2006 8:48 AM > Subject: [access-uk] Trojan horse coming back > > Hi all, > A few weeks ago Hannah and I managed to remove a trojan horse from her > Toshiba laptop. Now, despite it being vanished from her laptop, it's > decided to come back again. I am wondering, since she has system restore > enabled, could that have backed up the virus and thus reinfect her > system? She is using AVG Free 7.1 and she has not downloaded anything > recently to cause the trojan to reappear. > Thanks, and I look forward to hearing from you. > Christopher Hallsworth > Skype name chrishallsworth7266 > > ** To leave the list, click on the immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe] > ** If this link doesn't work then send a message to: > ** access-uk-request@xxxxxxxxxxxxx > ** and in the Subject line type > ** unsubscribe > ** For other list commands such as vacation mode, click on the > ** immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq] > ** or send a message, to > ** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq > > > __________ NOD32 1884 (20061127) Information __________ > > This message was checked by NOD32 antivirus system. > http://www.eset.com > > > > > ** To leave the list, click on the immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe] > ** If this link doesn't work then send a message to: > ** access-uk-request@xxxxxxxxxxxxx > ** and in the Subject line type > ** unsubscribe > ** For other list commands such as vacation mode, click on the > ** immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq] > ** or send a message, to > ** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq > Christopher Hallsworth Skype name chrishallsworth7266 ** To leave the list, click on the immediately-following link:- ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe] ** If this link doesn't work then send a message to: ** access-uk-request@xxxxxxxxxxxxx ** and in the Subject line type ** unsubscribe ** For other list commands such as vacation mode, click on the ** immediately-following link:- ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq] ** or send a message, to ** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq