Restoring files deleted by Windows Malicious Software Removal Tool

Restoring files deleted by Windows Malicious Software Removal Tool

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Restoring files deleted by Windows Malicious Software Removal Tool =?Utf-8?B?UEo=?= 05-17-2006
Posted by =?Utf-8?B?UEo=?= on May 17, 2006, 6:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

Is there any way to restore files that were deleted by the Windows Malicious
Software Removal (WMSR) Tool?

Apparently all my EXE files were infected by the win32.parite.b virus and
WMSR found those during an extended scan and automatically deleted them.

Now I can't use any of my installed programs because the associated .EXE
files have been deleted. What options besides reinstalling those
applications do I have to restore the EXE files deleted by WMSR?

Thanks in advance.

- PJ

Posted by Leythos on May 17, 2006, 6:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
PJ@discussions.microsoft.com says...
> Hello,
>
> Is there any way to restore files that were deleted by the Windows Malicious
> Software Removal (WMSR) Tool?
>
> Apparently all my EXE files were infected by the win32.parite.b virus and
> WMSR found those during an extended scan and automatically deleted them.
>
> Now I can't use any of my installed programs because the associated .EXE
> files have been deleted. What options besides reinstalling those
> applications do I have to restore the EXE files deleted by WMSR?
>
> Thanks in advance.

If you were not using anything other than Windows WMSR, you need to scan
the computer even more, with something that has a proven track record,
and make sure you're clean.

Actually, if I were in your boat, I would wipe and reinstall from
scratch.

If you want to clean the machine, try the following:

Only download software you can validate as uncompromised - in the case
of non-vendor site you have no guarantee that the files are unmodified
or uncompromised. Anyone providing a link to a non-vendors site with a
direct download should not be trusted, the vendors sites are the safest
place to download their application.

No person of sound mind would download files from a hack site that
requires a password to access the unknown files when they are available
directly from the vendors.

Always remember - only download files from Trusted Sites.

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

Dave Lipman's tools:
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072

AdAwareSE can be found here:
http://www.lavasoft.de/support/download/

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

HiJack can be found here:
http://www.spywareinfo.com/~merijn/downloads.html

Ewido Security Suite Trial can be found here:
http://www.ewido.net/en/download/

CrapCleaner can be found at the vendors site here:
http://www.ccleaner.com/ccdownload.asp

CleanUp can be found at the vendors site here:
http://www.stevengould.org/software/cleanup/download.html
or from another reputable source:
http://www.tucows.com/get/405276_152071

The following are two links to Antivirus software in order that I would
use them:

You can also download Symantec Trial version of their Antivirus software
from here:
http://www.symantec.com/downloads/

Download AVG Personal Free edition from here:
http://free.grisoft.com/freeweb.php/doc/2/

--

spam999free@rrohio.com
remove 999 in order to email me

Posted by cquirke (MVP Windows shell/use on May 18, 2006, 9:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>Hello,

Hi!

>Is there any way to restore files that were deleted by the Windows Malicious
>Software Removal (WMSR) Tool?

>Apparently all my EXE files were infected by the win32.parite.b virus and
>WMSR found those during an extended scan and automatically deleted them.

Good grief! That doesn't sound sensible... then again, it also
doesn't sound like what the MSRT does, either. Normally these tools
run very quickly and I doubt if they do anything like scan all
existing code files for intrafile infectors.

What is more likely, is that your resident av did this - and if so,
they should be in quarantine. Look for a competent av that can clean
the files instead of deleting them, but accept that cleaned files may
in fact not work properly (i.e. you may need to replace them anyway).

Do NOT run code files actively infected by a generic intra-file
infector, because that will lead to more code files being damaged.
Sooner or later you may find you can't reclaim the installation.

>Now I can't use any of my installed programs because the associated .EXE
>files have been deleted. What options besides reinstalling those
>applications do I have to restore the EXE files deleted by WMSR?

I'd like clarification on whether WMSR did this, and if so, where it
quarantines backup copies. If this really was the MSRT (Microsoft
Malicious Software Removal Tool) then I'll kick some butt over it!



>------------ ----- ---- --- -- - - - -
The most accurate diagnostic instrument
in medicine is the Retrospectoscope
>------------ ----- ---- --- -- - - - -

Similar ThreadsPosted
Windows Malicious Software Removal Tool? December 4, 2005, 8:19 am
Microsoft Windows Malicious Software Removal Tool February 27, 2006, 5:24 am
Guided Help widget available for MS Windows Malicious Software Removal Tool June 16, 2006, 12:30 am
Re: 890830 The Microsoft Windows Malicious Software Removal Tool January 11, 2006, 4:37 pm
Uninstall/removal of MRT (Microsoft Malicious Software Removal Tool) November 13, 2006, 9:03 am
How to run "Malicious Software Removal Tool" ? July 19, 2005, 2:36 pm
Malicious Software Removal Tool September 22, 2005, 12:59 pm
MS Malicious Software Removal Tool November 18, 2006, 12:05 pm
Where on earth is the (Malicious Software Removal) Tool? January 25, 2008, 4:34 am
Malicious software removal tool - quiet mode September 19, 2005, 6:52 am

The site map in XML format XML site map

Contact Us | Privacy Policy