oops, virus time again...

[caveman]

A friend of mine has these files infected on his machine, C:\_Restore\Temp A0033611.cpy, A0035614.cpy, A0047451.cpy and last but by no means least A0047452.cpy, now I know these files can be safely deleted but cannot for the life of me get rid of them cuz I get the infernal "cannot move the specified file blah blah blah!!" so come on NORM Or anyone else how do I do this again

THANX:D :D

[Norm]

Disable system restore, reboot.

Scan again for viruses (update your anti vi first)

When all clear of viruses, re-enable system restore (if you want it running)

[caveman]

Thanx once again Norm, I`ll give that a go 2 morro

Cheerz

[Norm]

I'm pretty sure that will work, but if not, there's always Dos :D

[caveman]

Yeah, it was the DOS route you talked me through last time which worked a treat, BTW how do I disable system restore in WinME?

thanx

[Norm]

I don't know, I would never put that POS WinME on my system :D

A quick search in the help files, or here at SG forums, or google should come up with your answer.

[snooksy]

This is the person who's comp has the infected files. I disabled system restore but the files were no longer there to delete.
How do i delete them in DOS mode?

thanx

[Norm]

If the files aren't there then they've been deleted by disabling system restore.

You can't delete files that are not there :D

[caveman]

Sounds straight forward enough but will they not return IF System restore is ever re-enabled??

Just wanna make sure his pooter is completely virus free

Thanx again Norm

Oh P.S. don`t suppose you could take me through removing file in DOS anyway just for future reference, and if it`s not too much trouble

:D :D

[Paft]

1.) Make boot disk

2.) Reboot into True DOS mode

3.) Navigate to wherever the system restore directory is (the directory just before it, like c:\windows)

4.) "deltree" <name of system restore folder>

5.) Say "Yes" to all prompts, or optionally add the /Y flag to "deltree" (deltree <sysrestore> /y)



At least that's how I'd do it. ;)

[Norm]

The infected files won't come back if you re-enable system restore. Unless of course you get infected with the virus again, by opening the same, or similar attachment you opened to get infected in the first place.
Don't laugh, people ARE that dumb.

Win98 bootdisk, add deltree.exe to it, and bootup.

Type:
attrib -r -a -s -h c:\_restore
deltree /y c:\_restore

Hit [enter] after each line.
Note: Make sure you type all spaces too.

That folder will reapear after a reboot to windows, because that's built in to the system called ME. The folder is a new one, and any files in it are new.

[caveman]

Whoa, thanx guys that`ll do the job nicely

:D :D

[TonyT]

Note: you say the files are not there, but they could be there IF you have "hide system files enabled". Set system to show all files.