I'm Infected!

[HomeschoolrsRUs]

I was working away on some videos (working offline) when a pop-up appeared from my anti-virus/spyware that said I have an infected file asking for permission to delete it. I said yes, then the pop-up came back saying unable to delete it. Can anyone help me?

Here's what it said:

C:\System Volume Information\_restore{7F615750-12A6-470E-AC4D-5A8477E4272B}\RP457\A0154467.exe


I googled and tried to find something about it, but couldn't find anything.

Help!

[Trovalor]

I had that happen to me and I had to hack it out the hard way, but I believe Acronis Disk Detector Suite can delete your old system restore files and may be able to help get rid of that file.

Link for the 30-day Free Trial;
http://www.shareup.com/Acronis_Disk_Director_Suite-download-986.html

[DoctorDoom]

The file is in a Restore point. One certain way to eliminate it:

1. Reboot to be sure everything boots normally.
2. Right-click My Computer and select Properties (or hold the Windows logo key and hit the Pause Break key at the right end of the top row).
3. Click the System Restore tab.
4. Checkmark Turn off system restore on all drives
5. Click Apply and then OK. You'll probably get a warning from Windows. Ignore it.
6. The system will then erase ALL the Restore points, including the infected one.
7. Uncheck Turn off ....
8. While you're in there, highlight the C: drive, click Settings, and move the slider down from it's default 12% of the hard drive for restore points. No one needs restore points from months back. Anything from 500-1000 MB is adequate.
9. Click Apply and then OK. This reenables the System Restore with the new setting.
10. Go to Start > Help and Support, look for the System Restore option, and use it to create a new restore point.

The offending file will be zapped.

[TeenageRepublican]

Man, I hope I don't have Homes' bad luck with electronic items.

[DoctorDoom]

It's not uncommon for an anti-virus scan to find a "suspicious" file in a restore point. One reason might be that the box had a naughty digital lifeform when the point was created, but a virus definition came out for it after it was saved. And there are occasional "false positives" where the AV scan misidentifies a harmless file. Nothing is perfect.

Anything in the restore-point files is harmless unless the machine is restored to that point. This is one reason why sites that describe getting rid of infections recommend dumping the restore points. It get rids of saved nasties.

[HomeschoolrsRUs]

I followed your instructions to the letter, Doc -- hopefully my computer will be well now, :smirky:. Thanks again for your help, as always, I owe more than I could ever repay.
Blessings!
Hms