Anti-Virus Problem

About every twenty minutes, when my Win XP operated MicroFlex computer is idle, I get a pop-up dialog saying my anti-virus program, eTrust EZ AntiVirus, has found a Win32 Klez worm in c:\System Volume Information\-restore{FFCD5DE1-128A-4794-B4EB-817DA1E855D9}RP39\A0004833.exe. The anti-virus program seems unable to cure this file, and I can't find it even after trying to change System Volume Information properties so as not to be read only. Full system scans by the program fail to identify any problems. This dialog appears only outside of full or focussed scans. Ibelieve the System Volume... folder is probably protected to keep meddlers out, but I am fearful this worm may activate somehow. eTrust seems not to accept emails without a zipped copy of the file suspected to be infected. Catch 22. I'd appreciate any advice.

 

I'm not running XP, but from what I read on this board. You have to turn off the restore feature, do a full scan. Find the virus, fix/delete it. Then enable the restore feature again.

 

10-4 to Aleekat

No Virus scanner can get it untill you turn off restore and clear it if you want, because after clean you will need to create a new restore point.

So do it!

While restore is off run the virus scan get the baddie.

Then turn the restore back on and create a new restore point.

Mike

 

Thanks to you both. I'll do it & let you know results.

 

Hi Guys

I've never had the unfortunate experience of acquiring a truely nasty virus. If Norton (SW2002) would happen to intercept one.... would I also have to disable "GoBack" for Norton to clean it up? System Restore is disabled.

 

Not unless it gets in the restore files and it will find it there but will not clean it from there!

Mike

 

Thanks Mike.
With SR inactive, virus would have to target the file..(?)... hopefully this does NOT become a popular target for bug writers.

 

Dennis L.,
If your antivirus program intercepts a virus, then it never makes it to your restore or Goback files. You never got infected. If you fail to update your virus definitions regularly and get infected. Then the infection gets spread to your restore and Goback. So in order to clean the virus from your system, then you have to disable restore/Goback so it also can be cleaned from those files. Hope this clears it up.

 

Thanks aleekat...
ooops... Sometimes the obvious gets ahead of my eyes and bypasses my brain.

 

The remedy recommended by aleekat & mflyn proved completely effective after more than a day, plenty of time for the dialog to have reappeared. Heartfelt thanks to you both