If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
Say does anyone know how one can get rid of a W32-Trojan-Delphi from the
above and replace the files without visiting your local shop and re-installing. |
#2
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
Did you try to go to http://www.symantec.com/downloads/
and search for the particular virus and the cure "David Oltmann" wrote in message . .. Say does anyone know how one can get rid of a W32-Trojan-Delphi from the above and replace the files without visiting your local shop and re-installing. |
#3
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
Replace which file? Are you asking about a file in the system restore
archive? If so these files aren't currently part of the operating system and not required for the operation of Win Me. There is no need to be concerned about any virus or trojan in the _RESTORE archive as they are harmless there and can only cause problems if you later choose to restore to a checkpoint created AFTER infection and BEFORE you cleaned your system. Something I hope you won't be doing after reading this post. Any worms, trojans and viruses in the _restore archive will automatically be discarded in time as newer data is archived and older files discarded The problem with disabling system restore is that it flushes the _restore archive and whilst that removes any virus remnants it also removes any good usable checkpoints you might have and you never know when you might want to use that lifebelt. If you do want to clear this folder I wouldn't advise doing so until _after_ you have thoroughly cleaned your system and got it working again just in case you need to use system restore to get a working system as a result of damage caused by the infection. Once your system is clean and fully functional you can clear the folder. However If you are worried about this, then there are two approaches to resolving your problem: Firstly try reducing the space allocated to the System Restore archive as this could flush out these unwanted files. Do this using the slider found at System | Performance | File System | Hard Disk and reduce the allocated space until you flush out the unwanted files. If that fails, reset System Resto System | Performance | File System | Troubleshooting and check "Disable System Restore", Apply and IMMEDIATELY reboot. This will flush you restore folder and erase all checkpoints, then, System | Performance | File System | Troubleshooting and uncheck "Disable System Restore", Apply and again IMMEDIATELY reboot. This should now automatically create a new checkpoint immediately following the restart. Finally adjust the space allocated to the restore folder, System | Performance | File System | Hard Disk and adjust the restore slider to your preferred setting. A figure of 200MB is normally more than adequate for day to day use allowing perhaps a week of checkpoints to be available although increasing this to perhaps 400-500MB for a few days during periods of large installs such Microsoft Office is advisable. See also MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder" (http://support.microsoft.com?kbid=263455). -- Mike Maltby MS-MVP David Oltmann wrote: Say does anyone know how one can get rid of a W32-Trojan-Delphi from the above and replace the files without visiting your local shop and re-installing. |
#4
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
Dear Mike,
Thanks. That seems to be the case. But access is denied to the anti-virus repair tools. c:\_RESTORE\TEMP\A0091345.CPY c:\_RESTORE\TEMP\A0091346.CPY c:\_RESTORE\TEMP\A0091354.CPY c:\_RESTORE\TEMP\A0091359.CPY Win32:Trojan-gen. {Delphi} Sincerely, davyjones "Mike M" wrote in message ... Replace which file? Are you asking about a file in the system restore archive? If so these files aren't currently part of the operating system and not required for the operation of Win Me. There is no need to be concerned about any virus or trojan in the _RESTORE archive as they are harmless there and can only cause problems if you later choose to restore to a checkpoint created AFTER infection and BEFORE you cleaned your system. Something I hope you won't be doing after reading this post. Any worms, trojans and viruses in the _restore archive will automatically be discarded in time as newer data is archived and older files discarded The problem with disabling system restore is that it flushes the _restore archive and whilst that removes any virus remnants it also removes any good usable checkpoints you might have and you never know when you might want to use that lifebelt. If you do want to clear this folder I wouldn't advise doing so until _after_ you have thoroughly cleaned your system and got it working again just in case you need to use system restore to get a working system as a result of damage caused by the infection. Once your system is clean and fully functional you can clear the folder. However If you are worried about this, then there are two approaches to resolving your problem: Firstly try reducing the space allocated to the System Restore archive as this could flush out these unwanted files. Do this using the slider found at System | Performance | File System | Hard Disk and reduce the allocated space until you flush out the unwanted files. If that fails, reset System Resto System | Performance | File System | Troubleshooting and check "Disable System Restore", Apply and IMMEDIATELY reboot. This will flush you restore folder and erase all checkpoints, then, System | Performance | File System | Troubleshooting and uncheck "Disable System Restore", Apply and again IMMEDIATELY reboot. This should now automatically create a new checkpoint immediately following the restart. Finally adjust the space allocated to the restore folder, System | Performance | File System | Hard Disk and adjust the restore slider to your preferred setting. A figure of 200MB is normally more than adequate for day to day use allowing perhaps a week of checkpoints to be available although increasing this to perhaps 400-500MB for a few days during periods of large installs such Microsoft Office is advisable. See also MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder" (http://support.microsoft.com?kbid=263455). -- Mike Maltby MS-MVP David Oltmann wrote: Say does anyone know how one can get rid of a W32-Trojan-Delphi from the above and replace the files without visiting your local shop and re-installing. |
#5
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
David,
Now that's a surprise. vbg Personally I'd hope your AV didn't touch these files otherwise your AV would have destroyed system restore. Did you read my post which explained how to deal with this if you find it a problem (the files are basically harmless where they are) and also gave a reference to a Microsoft Knowledge Base article that covered the situation. See MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder" (http://support.microsoft.com?kbid=263455). -- Mike Maltby MS-MVP David Oltmann wrote: Dear Mike, Thanks. That seems to be the case. But access is denied to the anti-virus repair tools. c:\_RESTORE\TEMP\A0091345.CPY c:\_RESTORE\TEMP\A0091346.CPY c:\_RESTORE\TEMP\A0091354.CPY c:\_RESTORE\TEMP\A0091359.CPY Win32:Trojan-gen. {Delphi} |
#6
|
|||
|
|||
"Restore/Temp......."Virus OEM Me
Dear Mike et al,
Yup! I read 'em and thanks. Sincerely, davyjones "Mike M" wrote in message ... David, Now that's a surprise. vbg Personally I'd hope your AV didn't touch these files otherwise your AV would have destroyed system restore. Did you read my post which explained how to deal with this if you find it a problem (the files are basically harmless where they are) and also gave a reference to a Microsoft Knowledge Base article that covered the situation. See MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder" (http://support.microsoft.com?kbid=263455). -- Mike Maltby MS-MVP David Oltmann wrote: Dear Mike, Thanks. That seems to be the case. But access is denied to the anti-virus repair tools. c:\_RESTORE\TEMP\A0091345.CPY c:\_RESTORE\TEMP\A0091346.CPY c:\_RESTORE\TEMP\A0091354.CPY c:\_RESTORE\TEMP\A0091359.CPY Win32:Trojan-gen. {Delphi} |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
virus vs. hardware | Tracy Poole | Software & Applications | 1 | July 1st 04 04:15 PM |
virus vs, hardware | Tracy Poole | General | 1 | July 1st 04 12:32 PM |
Virus?? | General | 4 | June 30th 04 10:27 PM | |
Found Virus | JUSTIN | General | 2 | May 28th 04 12:14 AM |