Using McAfee Internet Security Suite v11.6, Win7 64Bit & Windows B/U.
About 1/2 way thru b/u get message that the trojan is in a shared folder & can't be removed. It does NOT show up when drive scanned.
Message:
Detected Artemis!35522713A9DE (Trojan)
Quarantined from \Device\HarddiskVolumeShadowCopy32\Users\***\Downloads\setup (1).exe (Which BTW, was downloaded late last year & I have since deleted).
I know how to change read only in Users\***\Downloads folder but have no idea how to find ShadowCopy32! A scan of my portable harddrive does not show the trojan nor can I find "ShadowCopy32." In the meantime I am unable to complete a backup as this error keeps occuring..
All ideas appreciated.
Pjcal,
Make sure all the files & folders are hidden How to enable hidden files & folders
Open McAfee Console and click on Navigation
Go to Security History and also go to quarantined items to confirm the location of the detected file
Go to the location and check the detected file, if present delete it manually
Perform a Quick Clean in McAfee and then run a McAfee Quick Scan to check the issue status
Thanks for quick response but --
I do not have a problem accessing the quaranteed section of McAfee and could easily delete the problem file BUT I still do not know where "Device\HarddiskVolumeShadowCopy32\Users\***\Downloads\setup (1).exe" can be found, a search has not located this. As mentioned above, I know how to access the "users" etc & already deleted the offending file. This did not solve the problem.
So I still can't b/u my computer.
Suggested solution 1:
Add the detected file in the McAfee scan exclusion list
Restart the computer
Check you are getting the error
Suggested solution 2:
Open Run box and type services.msc and click on OK
In the Services windows check for volume shadow copy then check it is started and automatic
If not, then make it start and automatic
Restart the PC
Check with the issue
Suggested solution 3:
Perform a Clean Boot by following the steps given in the below Microsoft link
http://support.microsoft.com/kb/929135
check with the issue
Still no joy.
Suggested Solution1: I could not exclude the file as this only exists in the shadow copy; I deleted the file when this error originally occurred.
Suggested Solution 2: Indeed the shadow copy was set to manual; I changed this to automatic & it was already set to start. Restarted pc, ran backup & got same error message.
Suggested Solution 3: I did a clean boot, tried backup & got a different error message:
"Windows Backup failed while trying to read from the shadow copy on one of the volumes being backed up. Please check in the event logs for any relevant errors."
I am really frustrated but do appreciate your assistance.
Thanks for the links. I read through & tried several ideas finally giving up & suspending file scanning during backup. That worked & I completed a backup. In the meantime I have purchased an imaging product & plan to install & use it this evening.
Pjcal,
Thanks for the information !! kindly post back if any issues
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: