Re: Viruses in C:\Restore\Temp\*.cpy files that are write protected

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/16/03


Date: Mon, 15 Dec 2003 19:00:38 -0500

Please read the following URL:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

The objective:
------------------
- Turn off the System Restore function
- Reboot the PC
- Using your AV package, perform a full scan of all files on the platform and clean/delete
       infectors found
- Turn on the System Restore function
- Reboot the PC
- Create a new System Restore point.

If you have problems, it can be done manually....

Use the WinME floppy boot disk and boot from drive "A:"
When you get to a DOS prompt enter the following command

attrib -r -s -h c:\_RESTORE
rename c:\_RESTORE c:\RESTORE.old

Reboot the PC.

In Windows delete the folder; c:\RESTORE.old

Please report back your results.

Dave

"Paula" <anonymous@discussions.microsoft.com> wrote in message
news:047f01c3c367$128fd610$a401280a@phx.gbl...
| My McAfee antivirus software has isolated multiple viruses
| in my computer, but can't delete, clean or quarantine
| them, because they are write-protected by WindowsME.
| Anybody know how to manually take the write protection
| attribute off of these files so I can get rid of the
| viruses? Please advise.



Relevant Pages

  • Re: fs66.cab/generic dialer
    ... Turn off the System Restore function ... Reboot the PC ... The Cabs are archived files and I ...
    (microsoft.public.security.virus)
  • Re: Trojanhorse problem
    ... Turn off the System Restore function ... Reboot the PC ... Use the WinME floppy boot disk and boot from drive "A:" ...
    (microsoft.public.security.virus)
  • Re: Trojanhorse problem
    ... fix it so thanks. ... >- Turn off the System Restore function ... >- Reboot the PC ...
    (microsoft.public.security.virus)
  • Re: _restore
    ... Reboot the PC ... Turn on the System Restore function, and re-apply any System Restore preferences, ... | This message is virus free as far as I can tell. ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Invalid Procedure Call or Argument
    ... annoyances), cleaned infection (with System Restore turned off?), still had ... Boot into Safe Mode and use MS Config to go into Diagnostic Mode. ... note what Services and Startups AVG ... Reboot normally, ...
    (microsoft.public.windowsxp.help_and_support)