System Restore/Undeletable Virus

[PinchyCM]

Well, McAfee says I have a virus I can't get rid of. It's in my /System Volume Information folder, so I can't access it through windows. I got higher access by using the system repair utility off the XP CD, and I see where the file is. The thing is, when I try to remove the file, it'll ask me if I am sure, and I select yes. I do another DIR off the command line, and the file's still there. McAfee says it's T-Tools Patch or something...

http://vil.nai.com/vil/content/v_130242.htm

So that's my dilemma...

It does so happen that I recently did a system backup right when I formatted a few weeks ago, and I was thinking about restoring it. Thing is, windows restore doesn't delete files upon a restore, so I was wondering if there was a way I could format the drive, and then restore it. (It's on another drive). Let me know guys!

Unless you can find a way to delete it.

 

[Waylay00]

Go to control panel > Right Click My Computer > Click on the "System Restore" Tab > Check "Turn Off System Restore"

That works for me, being that 99% of the virus's that my family gets end up in there.

 

[PinchyCM]

Thanks! My buddy told me the same thing...

I didn't know windows stored the deleted exes in there.

 

[joanneL2]

OK, but the System Restore has saved my butt a couple of times (in addition to ALWAYS having a perfect Ghost image of OS and apps). I might suggest the free anti-virus software which is very good. Get the FREE version at www.grisoft.com. Install it and see if it can delete any trojans, etc. Then turn System Restore back on.

 

[PinchyCM]

Yeah, I have Sys Restore back on...

I use McAfee enterprise...so I don't see the need for anything else.

And, I have a backup of my whole C: drive right from format (with all my main apps n' stuff installed so I don't have to worry about reinstalling it all!)

 

[Carp1812]

Originally posted by: PinchyCM
I use McAfee enterprise...so I don't see the need for anything else.

Hmmmmmm...... ironic to anyone else?

 

[PinchyCM]

Did I miss something?

 

[Bozo Galora]

what he means is - your Mcafee didnt work - you do need something else.
perhaps you should round up a NOD32

 

[PinchyCM]

Well, considering that most Antiviruses can't access the System Vol. Info folder...

I know that Norton and AVG can't...