IBM Laptop System Restore

Hi,
In most cases when someone has a trojan and their virus protection will not remove it, disabling system restore and re-running the virus scan usually removes it. I have a friend who has Windows 98se, IBM laptop that has a trojan but because the usual location of "system restore" for windows 98 is not showing in the laptop I am unable to provide the steps to maybe find it. My question then is, do laptops have such and if so would it be named some thing else and that's why it can not be located ? Appreciate the help. Thanks

 

To my knowledge Win98 & 98SE do not have System Restore.

However they do make a Registry Backup in a file named RB00X.cab in the C:\Windows\Sysbckup folder.

Normally there are 5 of them. And they are only made if ScanRegistry is loading at bootup.

AFTER Checking to make sure ScanRegistry is loading, they can be deleted. Windows restarted and a new one will be made.

Or the Trojan could be in some other backup that has been made.

BillyBob

 

Hi,
Thanks for the correction, for some reason I keep getting Windows/Me which is what I have that does have "system restore" confused with Windows 98/se.
For now I will seek other ways to eliminate the trojan rather than go the root as you had made mention of and see if that works ...Thanks again

 

It is possible it is in the temporary files somewhere. These dos commands may help you, and will be helpful in any case. Restart in Dos Mode to do these. The first command will appear to do nothing, this is normal, and it speeds things up.
smartdrv
deltree c:\windows\cookies
deltree c:\windows\history
deltree c:\windows\temp
deltree c:\windows\tempor~1
deltree c:\temp
Type a Y that you want to delete, check for typos at this time.
When windows restarts, it will rebuild those folders, except for C:\Temp as it may not have existed in the first place. This is not window's default temp folder, was just trying to be a bit more thorough.
However, the reappearance of this in 98 maybe something else running and reinstalling it.
Maybe a HijackThis log posted here could help out?

 

Thanks..We sure can give that a consideration along with BillyBob suggestion. It's possible I might have to wait two weeks to get my hands on this laptop as the owner is back at College and due to the up coming Holidays the physical hands on thing won't be till then. For now I am trying the basic's by phone...Will keep you posted.