Windows Forum

Ask something
Discussion Locked

Virus in Winme

0 helpful
9 replies

by bob_3rab

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hi,

i just want to ask some clarification regarding a virus infectionin windows ME in one of its folder especially in _restore folder. i'm using pccillin 2000 antivirus. the antivirus can detect that there is a virus but unable to clean it. its not inefcting any other files, its just sitting there.
im thinking to format my drive, but i will lose all my programs. can anyone give me some help on to do with this. thanks in advance.

9 replies

by timthetoolman

Hi,

If you cant delete the file in question, then your anti-virus software has most likely quarantined it.

Not being able to "clean" it almost certainly means that as far as the virus people are concerned, the file is beyond help and should bedeleted anyway.

You may be able to disable the virus software and then delete the file.

If you cant do that and you're uncomfortable with having it there, then you dont have a lot of choice but to reformat... Its always the safest way but as you say can be a real pain!

Cheers,
Tim.

by shanghai sam

Good day

You should only reformat your drive as a last resort. Start the anti-virus program and let it detect the infected file. Write down the path and filename displayed. Close the anti-virus program. Use My Computer or Windows Explorer to findthe file, using the info you wrote down, and try to delete it. If you can delete it, open Recycle bin and delete the file from there.

If you are unable to delete the file this way, use a file wiping utility such as BC Wipe or Eraser, both available from the web (and free), to wipe the file. These utilities actually overwrite the data contained within the file, permanently deleting it.

Another alternative is to visit an anti-virus web site such as Sophos or Symantec, search for the virus and see if there is a removal tool you can download which will automatically remove the virus, or see if there are instructions on how to manually remove it.

Good luck

by zalog

The _retore folder is part of Windows ME System Restore. The files in this folder are protected and cannot be deleted while running Windows. If you are not going to perform a system restore from past save points it should be ok to delete the file. To delete the file make a note of the full path and file name. Then start your PC using your Windows ME startup diskette (you can make one from the Add/Remove Programs, Startup Disk Tab in the control panel). Navigate to the folder by using the DOS CD path command. Use the ATTRIB -R filename command to turn off the read only status. Delete the file using the DEL filename command. Remove the diskette and reboot and rescan.

by cnlson

ok here is what you need to do. first right click on my computer and choose properties. the box that opens go to the performance tab and click on file system, then troubleshooting and put a check in disable system restore. click ok several times back to desktop. you may be prompted to reboot. say yes. or if not prompted reboot the computer on your own. after this is down run the virus scan if nothing found. go back and take the check out of disable system restore. and reboot again

This discussion is closed to new replies.