Those .CPY files in C:|_Restore\Temp...

[YeOldeStonecat]

Safe to delete all of them? Working on an ME machine (yah, I know, I know, I try to stay away from them). Anyways, antivirus almost 2 years old, never updated, therefore it caught the Klez. Infected just about all the .CPY files in the above directory. Found they're related to the system restore, but, if I delete all of them, won't harm anything, right? Just get the machine clean, up to date, reinstall all infected apps, then create another restore point?

[Norm]

Not sure about the .cpy files, but if they're infected what else can you do?
Disable system restore.

Go to Nortons site and get the fixklez.com file. It not only removes klez and klern, but will also fix any infected files. Klez makes copies of the originals, so the fix tool knows where to find them, and replace them. (but not the system restore files)

With the fixklez.com file, you boot to safe mode, then run it.

Hope this helps.

[YeOldeStonecat]

Oh yeah I'm well versed in Klez and Elkern by now, have cleaned many networks of it already. I've been known to blurt out fixklez and quarantine utterances in my sleep, so my woman says.

Just curious about those CPY files. This machine, a cheap Gateway, has a 14 gig HD, came in with only a hundred megs free. The above directory had 9 gigs or so of CPY files, half of which were infected and deleted. I think the system restore got hosed and created a ton. Just wanted to blow them all away to gain her back freespace.

[Norm]

As far as I know those files are for restoring to earlier dates. hence thier huge size.
I'd blow them away and make a new restore point when you're done reinstalling all the apps that got hosed.

I believe if you disable the system restore, they get deleted, but ME is not one of my most worked on OS's.

[YeOldeStonecat]

Originally posted by Norm
As far as I know those files are for restoring to earlier dates. hence thier huge size.
I'd blow them away and make a new restore point when you're done reinstalling all the apps that got hosed.

I believe if you disable the system restore, they get deleted, but ME is not one of my most worked on OS's.

That was along the lines of what I was thinking...delete, make nicey nice, create a new restore point.

ME...second machine I've actually sat down and worked deeply on. Hopefully not many more.