Member Avatar for chris878758

Renos.y is the name of the trojan that my AV software picked up (trend micro antivirus), but it's unable to delete the Trojan and I can’t open the drive D, E, F. so what do i do now?

Maybe I should reinstall my computer and restore the data with EASEUS data recovery wizard or other data recovery programs.

  • 5 Contributors
  • 4 Replies
  • 135 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by gaurav_indian

Dani AI

Generated

Quick summary and a safe, practical plan: reported Trend detecting Renos.y and being unable to delete it plus drives D/E/F not opening. That behavior often means the malware is persisting and hiding files or blocking access. Advice from , and is sensible — isolate the machine, secure your data, then perform offline/rootkit-aware cleaning — below are concrete, low-risk steps.

Immediate steps and safe backup: unplug the PC from the network and any removable media. Do NOT run files from the infected drives. Use a clean boot environment (a Linux live USB or Windows PE created on another clean machine) to mount the infected drive and copy only personal data files (documents, photos, videos, archives). Do not copy executables, installers, shortcut files, or scripts (.exe, .scr, .lnk, .bat, .cmd, .pif). Once files are copied, scan them on a different, known-clean PC with up-to-date anti-virus and an anti-rootkit scanner before restoring.

Reveal and remove common hide/autorun artifacts (do this from a clean command prompt or rescue media; replace X: with the drive letter):

attrib -h -r -s X:\autorun.inf
del X:\autorun.inf
dir X:\ /a

Do not execute unfamiliar files you find. If files remain hidden or locked, use a trusted bootable rescue environment or a dedicated rootkit removal tool run from clean media — ’s note about rootkit-like behavior is consistent with tools missing stealth components.

Final recovery and hard choices: disable and clear System Restore (System -> System Restore -> Turn off System Restore on all drives in XP) before cleaning so snapshots can’t reintroduce the malware, as warned. If offline scans and rootkit removers cannot guarantee a clean system, reformat and reinstall Windows. Only restore verified-clean backups. After recovery, fully patch the OS, reinstall reputable AV, and change all passwords.

Recommended Answers

All 4 Replies

Member Avatar for cracker

Hie, please back up your files first and try cleaning your machine usig another antivirus software. If all these alternatives fail, format the Hard drive.

Member Avatar for caperjack

Give trojan Hunter a go its fully working 30 day trial ,with updates ,you need to do the updates manually ,i will supply 2 links one for the program and one for the updates ,install the updates before you use the program .

trojab hunter= http://www.misec.net/

updates =

Member Avatar for 3lefty

dont forget to disable system restore before cleaning your computer...that may also be the reason you cannot delete the trojan. If you don't disable system restore, the trojan will just come back.

Member Avatar for gaurav_indian

My friend got the same trojan and he also wasnt able to open his drives.
Virus name

amvo.exe
hacktool.rootkit


search for more info on these trojans.


Interestingly this amvo.exe or hacktool doesnt show in hijacklog.

http://answers.yahoo.com/question/index?qid=20071209090723AAC07Mr

http://www.techspot.com/vb/topic34006.html

this will be useful if your trojan is the one which i have mentioned above.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.