ControlX

I had a virus: WIN32:CTX in file: C\Window\System\ActiveScan\pskavs.dll as
well as 2 infected files in my C:\_Restore\temp...etc.

The Avast Virus Scan got rid of the virus, but not the 2 Temp files.
Since those two were traced to early March, I did a System Restore for last
Saturday (I have to make them manually every odd day, Avast doesnt make them,
bit of a nuisance, but I like it better then NIS, much faster loading and
much less resources used). But the restore didnt work, so I chose the one I
had made yesterday and it worked: final result: the two infected files are
gone. Note that all the archives for SR dated before yesterday are gone. I
have the feeling that either Avast or the FIFO of the SR doesnt work?? Q: is
this possible?
Tks in advance, Paul
--
cogito ergo sum

Edit: the title should have been ActiveX Control g
--
cogito ergo sum


"PAT (Paul)" wrote:

I had a virus: WIN32:CTX in file: C\Window\System\ActiveScan\pskavs.dll as
well as 2 infected files in my C:\_Restore\temp...etc.

The Avast Virus Scan got rid of the virus, but not the 2 Temp files.
Since those two were traced to early March, I did a System Restore for last
Saturday (I have to make them manually every odd day, Avast doesnt make them,
bit of a nuisance, but I like it better then NIS, much faster loading and
much less resources used). But the restore didnt work, so I chose the one I
had made yesterday and it worked: final result: the two infected files are
gone. Note that all the archives for SR dated before yesterday are gone. I
have the feeling that either Avast or the FIFO of the SR doesnt work?? Q: is
this possible?
Tks in advance, Paul
--
cogito ergo sum

Paul
I suspect that either you reset System Restore at some point, or that
something broke it somehow - you don't get rid of infected restore points by
restoring back anyhow, but by resetting SR to clear the infected points (or
reducing the allocation until the infected points disappear)
How much space is use by the _Restore folder, when you look at it's
Properties??

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"PAT (Paul)" wrote in message
...
I had a virus: WIN32:CTX in file: C\Window\System\ActiveScan\pskavs.dll as
well as 2 infected files in my C:\_Restore\temp...etc.

The Avast Virus Scan got rid of the virus, but not the 2 Temp files.
Since those two were traced to early March, I did a System Restore for
last
Saturday (I have to make them manually every odd day, Avast doesnt make
them,
bit of a nuisance, but I like it better then NIS, much faster loading and
much less resources used). But the restore didnt work, so I chose the one
I
had made yesterday and it worked: final result: the two infected files are
gone. Note that all the archives for SR dated before yesterday are gone.
I
have the feeling that either Avast or the FIFO of the SR doesnt work?? Q:
is
this possible?
Tks in advance, Paul
--
cogito ergo sum

Noel,
My question was does Avast make SR check points? The FIFO does not seem
to work (my setting is minimum 200MB). When I restored to an earlier point,
it did not succeed, waited for an hour for it to finish (was 98% complete)
but had to end the process and tryed the only SR point I had made earlier
that morning, this resulted in all my restore folder gone, and he only one I
have now is the SR point made after the successful restoration made.
Right now my _Restore folder has 114 files, 5 folders, 139 MB (Archive:
48 files 134 MB; Temp: 56 files 2.19 MB).
As you say the System Restore must have been broken long ago, as the
same files at the top of the list have been there for ages.
I'll see if with a complete new Restore folder, the FIFO will work.
Will let you know.

--
cogito ergo sum


"Noel Paton" wrote:

Paul
I suspect that either you reset System Restore at some point, or that
something broke it somehow - you don't get rid of infected restore points by
restoring back anyhow, but by resetting SR to clear the infected points (or
reducing the allocation until the infected points disappear)
How much space is use by the _Restore folder, when you look at it's
Properties??

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"PAT (Paul)" wrote in message
...
I had a virus: WIN32:CTX in file: C\Window\System\ActiveScan\pskavs.dll as
well as 2 infected files in my C:\_Restore\temp...etc.

The Avast Virus Scan got rid of the virus, but not the 2 Temp files.
Since those two were traced to early March, I did a System Restore for
last
Saturday (I have to make them manually every odd day, Avast doesnt make
them,
bit of a nuisance, but I like it better then NIS, much faster loading and
much less resources used). But the restore didnt work, so I chose the one
I
had made yesterday and it worked: final result: the two infected files are
gone. Note that all the archives for SR dated before yesterday are gone.
I
have the feeling that either Avast or the FIFO of the SR doesnt work?? Q:
is
this possible?
Tks in advance, Paul
--
cogito ergo sum

Paul,

Avast doesn't make SR checkpoints, that's a job for the operating system
and certain installers. However as has been posted on numerous occasions
in this and other Win Me newsgroups, Avast inhibits Win Me from creating
automatic system checkpoints and that instead Avast users need to make
their own manual checkpoints.

Using SR should not remove the restore folder but instead on a successful
restore add a new checkpoint allowing the restore to be undone. That is
unless the space allocated to the archive is insufficient to provide the
necessary space.

Since you clearly have a populated restore folder (broken or not) I don't
understand why you say using SR removed the folder since with 48 files in
the archive sub-folder it can hardly have just been created.

Since it appears the restore archive is damaged I would strongly recommend
that you reset SR and if that doesn't clear the folder down then manually
delete the folder by booting to DOS and allow the state manager to rebuild
its control files.
--
Mike Maltby




PAT (Paul) wrote:

Noel,
My question was does Avast make SR check points? The FIFO does not
seem to work (my setting is minimum 200MB). When I restored to an
earlier point, it did not succeed, waited for an hour for it to
finish (was 98% complete) but had to end the process and tryed the
only SR point I had made earlier that morning, this resulted in all
my restore folder gone, and he only one I have now is the SR point
made after the successful restoration made. Right now my _Restore
folder has 114 files, 5 folders, 139 MB (Archive: 48 files 134 MB;
Temp: 56 files 2.19 MB). As you say the System Restore must have
been broken long ago, as the
same files at the top of the list have been there for ages.
I'll see if with a complete new Restore folder, the FIFO will work.
Will let you know.

Mike,
I followed your suggestion and the SR was restored, it made a SR check
point. Still wondering if the FIFO will work with Avast, will watch it.
When this problem occured, the first attempt at System Restore failed;
the second was successful. I was left with the Archive sub-folder with:
48 files of 134 MB. 38 were of the type FSxxx.CAB all dated April
4/06; 10 of the type RGxxxxx.CAB and whats puzzling me, its the first 3 were
March 27,28,30 and the rest April 4/06.
I cant give you an explanation but those are the facts. Tks for your
response and have a good day.
Paul
--
cogito ergo sum


"Mike M" wrote:

Paul,

Avast doesn't make SR checkpoints, that's a job for the operating system
and certain installers. However as has been posted on numerous occasions
in this and other Win Me newsgroups, Avast inhibits Win Me from creating
automatic system checkpoints and that instead Avast users need to make
their own manual checkpoints.

Using SR should not remove the restore folder but instead on a successful
restore add a new checkpoint allowing the restore to be undone. That is
unless the space allocated to the archive is insufficient to provide the
necessary space.

Since you clearly have a populated restore folder (broken or not) I don't
understand why you say using SR removed the folder since with 48 files in
the archive sub-folder it can hardly have just been created.

Since it appears the restore archive is damaged I would strongly recommend
that you reset SR and if that doesn't clear the folder down then manually
delete the folder by booting to DOS and allow the state manager to rebuild
its control files.
--
Mike Maltby




PAT (Paul) wrote:

Noel,
My question was does Avast make SR check points? The FIFO does not
seem to work (my setting is minimum 200MB). When I restored to an
earlier point, it did not succeed, waited for an hour for it to
finish (was 98% complete) but had to end the process and tryed the
only SR point I had made earlier that morning, this resulted in all
my restore folder gone, and he only one I have now is the SR point
made after the successful restoration made. Right now my _Restore
folder has 114 files, 5 folders, 139 MB (Archive: 48 files 134 MB;
Temp: 56 files 2.19 MB). As you say the System Restore must have
been broken long ago, as the
same files at the top of the list have been there for ages.
I'll see if with a complete new Restore folder, the FIFO will work.
Will let you know.

Paul,

Avast has nothing to do with FIFO, that is managed by the state manager.
As I said earlier Avast however will inhibit the creation of automatic
system restore checkpoints and you will have to make these manually.

I'm sorry but your posts are somewhat inconsistent. In one place you said
the restore folder was cleared ("this resulted in all my restore folder
gone") and then that it contains 134MB of files with 38 FS files in the
Archive folder, so which was it? I suspect the latter given the details
you provided. g In my earlier post I also suggested that you clear down
the archive. Have you done so? If not is there a reason for not doing so
as the files are probably useless? As for an explanation nothing is
required other than knowing that the archive appears to be damaged,
something that is easily fixed by resetting system restore.
--
Mike Maltby



PAT (Paul) wrote:

Mike,
I followed your suggestion and the SR was restored, it made a SR
check point. Still wondering if the FIFO will work with Avast, will
watch it. When this problem occured, the first attempt at System
Restore failed;
the second was successful. I was left with the Archive sub-folder
with: 48 files of 134 MB. 38 were of the type FSxxx.CAB all
dated April 4/06; 10 of the type RGxxxxx.CAB and whats puzzling me,
its the first 3 were March 27,28,30 and the rest April 4/06.
I cant give you an explanation but those are the facts. Tks for
your response and have a good day.

Mike,
Those figures pertained to the original problem. Going on, yes I
cleared down the Archives. A new SR point was made, and the System restore
looks ok. Sorry if I gave you wrong impression. Everything looks good.
Tks for your help, Paul
--
cogito ergo sum

PAT (Paul) wrote:

Those figures pertained to the original problem. Going on, yes I
cleared down the Archives. A new SR point was made, and the System
restore looks ok. Sorry if I gave you wrong impression. Everything
looks good. Tks for your help, Paul

That's great Paul.

Hopefully you should find that the state manager now maintains the size of
the archive within the limits you have set. I don't think you'll be
seeing any automatic checkpoints although you could get some created if
you download and install any patches from the Windows Update site or
install a new application that uses the windows installer. I'd suggest
therefore that you try and remember to make a manual checkpoint every so
often just in case you need to roll back the system.

You might be lucky of course and find that despite having Avast installed
you still get automatic checkpoints being created. If this does happen
I'm sure that there are posters here who would love to see you post
details.

Cheers,
--
Mike Maltby