A Windows 98 & ME forum. Win98banter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » Win98banter forum » Windows ME » General
Site Map Home Authors List Search Today's Posts Mark Forums Read Web Partners

"Restore/Temp......."Virus OEM Me



 
 
Thread Tools Display Modes
  #1  
Old June 8th 04, 01:29 AM
David Oltmann
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

Say does anyone know how one can get rid of a W32-Trojan-Delphi from the
above and replace the files without visiting your local shop and
re-installing.


  #2  
Old June 8th 04, 01:54 AM
Brucefl
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

Did you try to go to http://www.symantec.com/downloads/
and search for the particular virus and the cure


"David Oltmann" wrote in message
. ..
Say does anyone know how one can get rid of a W32-Trojan-Delphi from the
above and replace the files without visiting your local shop and
re-installing.




  #3  
Old June 8th 04, 01:55 AM
Mike M
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

Replace which file? Are you asking about a file in the system restore
archive? If so these files aren't currently part of the operating system and
not required for the operation of Win Me.

There is no need to be concerned about any virus or trojan in the _RESTORE
archive as they are harmless there and can only cause problems if you later
choose to restore to a checkpoint created AFTER infection and BEFORE you
cleaned your system. Something I hope you won't be doing after reading this
post. Any worms, trojans and viruses in the _restore archive will
automatically be discarded in time as newer data is archived and older files
discarded The problem with disabling system restore is that it flushes the
_restore archive and whilst that removes any virus remnants it also removes
any good usable checkpoints you might have and you never know when you might
want to use that lifebelt. If you do want to clear this folder I wouldn't
advise doing so until _after_ you have thoroughly cleaned your system and got
it working again just in case you need to use system restore to get a working
system as a result of damage caused by the infection. Once your system is
clean and fully functional you can clear the folder.

However If you are worried about this, then there are two approaches to
resolving your problem:
Firstly try reducing the space allocated to the System Restore archive as this
could flush out these unwanted files. Do this using the slider found at
System | Performance | File System | Hard Disk and reduce the allocated space
until you flush out the unwanted files.

If that fails, reset System Resto
System | Performance | File System | Troubleshooting and check "Disable
System Restore", Apply and IMMEDIATELY reboot. This will flush you restore
folder and erase all checkpoints, then,
System | Performance | File System | Troubleshooting and uncheck "Disable
System Restore", Apply and again IMMEDIATELY reboot. This should now
automatically create a new checkpoint immediately following the restart.
Finally adjust the space allocated to the restore folder,
System | Performance | File System | Hard Disk and adjust the restore slider
to your preferred setting. A figure of 200MB is normally more than adequate
for day to day use allowing perhaps a week of checkpoints to be available
although increasing this to perhaps 400-500MB for a few days during periods of
large installs such Microsoft Office is advisable.

See also MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the
_Restore Folder" (http://support.microsoft.com?kbid=263455).
--
Mike Maltby MS-MVP



David Oltmann wrote:

Say does anyone know how one can get rid of a W32-Trojan-Delphi from the
above and replace the files without visiting your local shop and
re-installing.



  #4  
Old June 8th 04, 10:40 AM
David Oltmann
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

Dear Mike,
Thanks. That seems to be the case. But access is denied to the
anti-virus repair tools.
c:\_RESTORE\TEMP\A0091345.CPY
c:\_RESTORE\TEMP\A0091346.CPY
c:\_RESTORE\TEMP\A0091354.CPY
c:\_RESTORE\TEMP\A0091359.CPY
Win32:Trojan-gen. {Delphi}

Sincerely,
davyjones




"Mike M" wrote in message
...
Replace which file? Are you asking about a file in the system restore
archive? If so these files aren't currently part of the operating system

and
not required for the operation of Win Me.

There is no need to be concerned about any virus or trojan in the _RESTORE
archive as they are harmless there and can only cause problems if you

later
choose to restore to a checkpoint created AFTER infection and BEFORE you
cleaned your system. Something I hope you won't be doing after reading

this
post. Any worms, trojans and viruses in the _restore archive will
automatically be discarded in time as newer data is archived and older

files
discarded The problem with disabling system restore is that it flushes

the
_restore archive and whilst that removes any virus remnants it also

removes
any good usable checkpoints you might have and you never know when you

might
want to use that lifebelt. If you do want to clear this folder I wouldn't
advise doing so until _after_ you have thoroughly cleaned your system and

got
it working again just in case you need to use system restore to get a

working
system as a result of damage caused by the infection. Once your system is
clean and fully functional you can clear the folder.

However If you are worried about this, then there are two approaches to
resolving your problem:
Firstly try reducing the space allocated to the System Restore archive as

this
could flush out these unwanted files. Do this using the slider found at
System | Performance | File System | Hard Disk and reduce the allocated

space
until you flush out the unwanted files.

If that fails, reset System Resto
System | Performance | File System | Troubleshooting and check "Disable
System Restore", Apply and IMMEDIATELY reboot. This will flush you

restore
folder and erase all checkpoints, then,
System | Performance | File System | Troubleshooting and uncheck "Disable
System Restore", Apply and again IMMEDIATELY reboot. This should now
automatically create a new checkpoint immediately following the restart.
Finally adjust the space allocated to the restore folder,
System | Performance | File System | Hard Disk and adjust the restore

slider
to your preferred setting. A figure of 200MB is normally more than

adequate
for day to day use allowing perhaps a week of checkpoints to be available
although increasing this to perhaps 400-500MB for a few days during

periods of
large installs such Microsoft Office is advisable.

See also MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in

the
_Restore Folder" (http://support.microsoft.com?kbid=263455).
--
Mike Maltby MS-MVP



David Oltmann wrote:

Say does anyone know how one can get rid of a W32-Trojan-Delphi from the
above and replace the files without visiting your local shop and
re-installing.





  #5  
Old June 8th 04, 11:23 AM
Mike M
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

David,

Now that's a surprise. vbg Personally I'd hope your AV didn't touch these
files otherwise your AV would have destroyed system restore. Did you read my
post which explained how to deal with this if you find it a problem (the files
are basically harmless where they are) and also gave a reference to a
Microsoft Knowledge Base article that covered the situation.

See MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the
_Restore Folder" (http://support.microsoft.com?kbid=263455).
--
Mike Maltby MS-MVP



David Oltmann wrote:

Dear Mike,
Thanks. That seems to be the case. But access is denied to the
anti-virus repair tools.
c:\_RESTORE\TEMP\A0091345.CPY
c:\_RESTORE\TEMP\A0091346.CPY
c:\_RESTORE\TEMP\A0091354.CPY
c:\_RESTORE\TEMP\A0091359.CPY
Win32:Trojan-gen. {Delphi}



  #6  
Old June 8th 04, 09:25 PM
David Oltmann
external usenet poster
 
Posts: n/a
Default "Restore/Temp......."Virus OEM Me

Dear Mike et al,
Yup! I read 'em and thanks.
Sincerely,
davyjones


"Mike M" wrote in message
...
David,

Now that's a surprise. vbg Personally I'd hope your AV didn't touch

these
files otherwise your AV would have destroyed system restore. Did you read

my
post which explained how to deal with this if you find it a problem (the

files
are basically harmless where they are) and also gave a reference to a
Microsoft Knowledge Base article that covered the situation.

See MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in the
_Restore Folder" (http://support.microsoft.com?kbid=263455).
--
Mike Maltby MS-MVP



David Oltmann wrote:

Dear Mike,
Thanks. That seems to be the case. But access is denied to the
anti-virus repair tools.
c:\_RESTORE\TEMP\A0091345.CPY
c:\_RESTORE\TEMP\A0091346.CPY
c:\_RESTORE\TEMP\A0091354.CPY
c:\_RESTORE\TEMP\A0091359.CPY
Win32:Trojan-gen. {Delphi}





 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
virus vs. hardware Tracy Poole Software & Applications 1 July 1st 04 04:15 PM
virus vs, hardware Tracy Poole General 1 July 1st 04 12:32 PM
Virus?? General 4 June 30th 04 10:27 PM
Found Virus JUSTIN General 2 May 28th 04 12:14 AM


All times are GMT +1. The time now is 12:02 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 Win98banter.
The comments are property of their posters.