XP restore fails after avast install/scan

Avast has found a virus & I have them in the chest (see below) I am now unable to run the XP restore. I get no error msg, just states it did not roll back the settings.

I am unable to restore the files below (option greyed out) I can extract them, but dont know where to extract them to? The virus is not on the list for the cleaner. Also I am now getting an error on power up from standby (get the blue screen) shows that my display driver maybe the problem (I think that is the optimize file below).

All of this started after I installed avast & ran the 1st scan. How can I restore the files or if I uninstall avast will I lose the files?
Thanks for any help.
Sony Vaio Laptop GR300. XP home. SP 1. Pentium 3. CPU 1200 MHZ.

1st file.
File name: A0058166.exe
Orig folder: c:\system volume info_restore-{0E4620DB-6A61-4E58-9C3D-01E873E51D23}\RP543
Virus Descrip: Win32:DyfucDldr-E [Trj]
Restore: No

2nd file.
File name: optimize.exe
Orig folder: c:\windows\stwsi
Virus Descrip: Win32:DyfucDldr-E [Trj]
Restore: No

Hi Sparkey,

From the location that you gave the file was in one of the folders used by System Restore to attempt roll back, etc. ‘C:\System Volume Information’ and the sub folder _restore, one of the restore points.

Anything removed from here, virus or otherwise could make this restore point invalid or possibly corrupt. Forcing you to go back to an earlier restore point.

When trying to delete a file that is in the Protected System Volume Information folder (system hiden folder) you have to disable System Restore, this effectively removes all restore points and you have to start afresh when you re-enable it.

I’m don’t have a great deal of confidence in System Restore and I certainly wouldn’t use it as my first or only line of defense to protect my system and settings, see below.

System Restore

There are many, many reasons why a System Restore may fail. For example, see "Why are previous restore points not working?" in the "Troubleshooting" section of this official Microsoft page: http://www.microsoft.com/technet/prodtechnol/winxppro/plan/faqsrwxp.mspx

There’s lots more on that page that’s worth reading too. Note especially the sections on “Does System Restore protect personal data files?” (the short answer: no); “What should I do if System Restore does not work?”; “Why are my restore points missing or deleted?”; “Why does the System Restore Wizard lockup?”; and so on. Just a few minutes on that page ought to convince just about anyone that System Restore is not intended for heavy-duty system protection!

More info:
http://www.kellys-korner-xp.com/xp_restore.htm
http://www.experts-exchange.com/Operating_Systems/WinME/Q_20718080.html
http://www.google.com/search?q=system+restore+fail

It is most likely that the second file, when it was deleted by avast it could have been saved into the restore point, because it was in the windows folder and this is one that system restore protects, sic.

You may have to bite the bullet and disable System Restore and reboot, then enable System Restore. After all avast was removing a virus that would re-infect your computer if system restore rolled back to that point.

HTH David

Typical virus behavior :frowning:

Quite probably, but I don’t think you have to restore that files… Maybe you could wait for a better user to guide you.

I think you will lose the files…
They were kept into the Avast4\DATA\chest folder. I never tried to ‘restore’ old chested files (backing up and restoring on a new installation of avast!). Maybe it works if you copy the index file too :-\

Hi sparkey7,
Welcome to the forums. You don’t want to restore either of the files.
1st do as DavidR says. check the turn off system restore function in the system properties (shortcut use your Winkey and Pause/Break Key and system properties will open for you.)
2 Reboot
3 Restore the system restore function ( uncheck the box)
4 Reboot but go into safe mode (F8)
Now do a scan and after the scan, if you have it, also run Adaware 6.181.
5 Reboot and enjoy safe computing and surfing again.
Have a nice evening. :slight_smile: