Computer Hope
Software => Computer viruses and spyware => Topic started by: bpb on October 28, 2004, 12:48:39 PM
-
I just ran my virus software CA assoc. from Roadrunner and it detected Win95. Spaces in:
C:_restore\archive\fs397.cab>A0220679.cpy
it listed it as not cleaned/deleted/renamed
I tried to delete from the dos prompt in a DOS window
no luck..access denied
How do I remove this.
Thanks
bpb
-
Sorry forgot to add that I'm running Windows ME (yeah I know) on a DELL 4100 P3
bpb
-
Boot to Safe Mode. Run virus checker again.
-
Thanks Computer_Commando
I'll give ita go
BPB
-
Computer_commando
reran in safe mode
It once again detected the virus but did not remove it
I received the same prompt:
' not cleaned/deleted/renamed '
thanks for the post
-
Scan for spyware and use a Trojan Hunter as well.
-
Thanks Raptor
both Ad aware 6.0 and Trojan Remover come up clean
-
Does this file cause problems?
-
Hi Raptor
I believe the same virus that was cleaned from one of my active files was causing problems...specifically constant spontaneous reboots and extreme slowdowns.
So far I haven't had much of a problem with the remaining virus in the .cab file. Is it because this file is archival and therefore essentially quarantined from my system? The "_restore " folder is not visable to Windows Explorer though it is to my virus checker and I can see it in DOS..though not in the main directory unless I type in the address specifically. I assume it is because of the underscore preceding the folder name.
Are these files used for say "System Restore? Would "System Restore reactivate the virus?
Thanks for your help
Bryan
-
While in Safe Mode, delete the folder.
-
Merlin often recommends people to disable System Restore because it's prone to keep viruses around..
-
Thanks for the replies
I just reinstalled Windows ME and it seems to have got it. I hoped it would reset the restore files.
I'll reply with any additional problems with this bug
bb
-
is your isp..........freeserve/wanadoo.........and a way to cheat and re-install winme c:\windows\options\cabs folder next to the scanreg icon .....is one called setup..if you were to click this ..it will re-install winme back to the day it first booted....
-
Merlin
my isp is Roadrunner through the cable company.
I ran the setup file from my Dell reinstall disk...it went very smooth and preserved all my config setups and drivers. So i picked up right where I left off but with a clean windows setup. When desparate I have redone the whole computer from the ground up with a clean install on a reformatted and partioned drive and then reinstall all my software. I do this every year to clean out the system..thankfully not needed here ,it is time consuming. Appreciate the posts
Bpb
computer-commando
tried to delete the .cab file from safe mode..'access denied' still comes up.
-
Turning off system restore should remove all restore files. Turn it off, reboot, rescan. It should be gone. You can re-enable system restore if desired.
-
Thanks 2k dummy, a good tip to remember.
bpb