Virus found

Viruses and worms
1

Hi
Avast found a virus in

C:\System Volume Information_restore{65CB372D-E45C-438A-8D1D-62BA9819FA04}\RP26\A0006750.exe

I sent it to chest. The computer is kind of slow now but I don’t know why. I want to send the infected file to virustotal.com to be scanned to be sure but I don’t know how to do it. Can anyone tell me the process to do that?
Thank you

2

You can’t send a file to virustotal when it is in the chest. I’m not sure if the file was in the original C:\System Volume Information\ location you could do it either as this is a windows protected area.

However, there should be no impact in moving a file from the C:\System Volume Information\ folder. These _restore points are inactive, just sitting there awaiting the use of system restore. The chances are this is the result of an infected file being previously deleted from one of the system folders, system restore creates a restore point just in case you made an error.

So what might be slowing your system is not likely to be that. What is it that you are doing when you feel the system is slow ?

3

If a virus is replicant (coming and coming again), you could follow the general cleaning procedure. Step one will deal with the System Restore folder that you’ve posted about. The other steps, well, are there to be sure you’re clean. I’ve posted before these procedures to you, if I’m not wrong, but you’re asking again…

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.

  2. Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.

  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  4. It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
    If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

  5. If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.

  6. Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

  7. After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

  8. Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.

4

Thanks a lot.
I will keep this reply at hand.
Thanks again.

My complements to all of you who have
so patiently and intelligently helped me .

5

Your welcome, what about the question.
“What is it that you are doing when you feel the system is slow ?”