Virus chest

Viruses and worms
1

I have tried to remove the items in the virus chest so that I can run the virus cleaner. I have 22 files that are infected with the virus: WIN32:DCOM-F. I would like to have the files cleaned and I tried to follow the instructions and restore the files. I received a notice that stated the files were restored back onto my computer. The problem is that they are not being restored and remain in the chest.

What do I need to do to insure that the files will be restored back where they were before I ran a scan and moved them into the chest.

Thanks for your assistance.

CandyB32 - Windows XP/Avast 4 Professional Internet Security

2

It will be good to rescan the files into Chest and also submit files to www.virustotal.com
Be sure the files are clean.

Maybe you need to disable Hide protected operating system files and enable View hidden files and folders to manage the file(s).

The restored files are kept into the Chest, you need to manually exclude them.

3

Thanks for your reply. How do I ensure that the files are clean? One of the files is a systems file and the rest are in the system volume information_restore files. This is why I was trying to restore them so I could run the virus cleaner and clean them.

Any thoughts?

Thanks.

4

Check it with www.virustotal.com (uploading the file).

That folder is the System Restore folder. If a file is modified, all the restore point is broken and be unusable. So, cleaning (deleting) these infected restore points are a good way to get rid of these files. If they are false positives (clean but detected as infected), updating the virus database and waiting some days will remove the detection and let the restore points there. If you don’t need to restore, disable System Restore on Windows ME, XP or Vista. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After disabling you can enable it again.