|
Posted by =?Utf-8?B?bmVlZGhlbHA=?= on April 15, 2007, 8:24 pm
If you were Registered and logged in, you could reply and use other advanced thread options
THANKS TO ALL! I did the disk cleanup and that seems to have done the trick.
I can't thank all of you enough. This was the only site that I was able to
get any help. Thanks!!!!!!!!!!
"cquirke (MVP Windows shell/user)" wrote:
> On Fri, 30 Mar 2007 16:13:38 -0400, "David H. Lipman"
>
> >| Thanks! socks8b is deleted (though I couldn't find the backup in killbill so
> >| couldn't submit to virus total.
>
> >| But the virus isn't gone!!!! It has now infected a00085583.exe located:
> >| systemvolumeinformation. I can't even find these files (conducted a file
> >| search). You've been so helpful -- how can I find this file to delete?
>
> >If I understand you correctrly, this is the WinXP System Restore cache. You
can either
> >leave it there an d it will eventually Cache Out or you can disable the
System Restore
> >cache, reboot the PC and then re-enable the System Restore cache which will
purge the System
> >Restore cache of this file. If you do purge the System FRestore cache, after
you re-anble
> >the cache you should set a new Restore Point.
>
> This is a bad way to purge SR, as it has side-effects, but there isn't
> really a cleaner way to do this in WinME without resorting to DOS mode
> (i.e. simply delete the C:\_RESTORE subtree in DOS mode).
>
> In XP, a better way is to:
> - create a new "clean baseline" Restore Point
> - run Disk Cleanup, More Options tab
> - purge all but most recent restore point
> - back to "general" tab, UNcheck what you don't want cleared
> - OK to apply Disk Cleanup (else old SR data is not purged)
>
> The reason to prefer these approaches is that any SR settings you may
> have applied (capacity limit in WinME, capacity limits and excluded HD
> volumes in XP) are preserved, whereas disabling and re-enabling SR
> will usually fall back to "waste maximum space everywhere" duhfaults.
>
> It's also good to have a baseline restore point in XP, because (unlike
> WinME) the SR data in the SVI subtree is the only automatic registry
> backup that is maintained by XP.
>
>
>
>
> >------------ ----- ---- --- -- - - - -
> The most accurate diagnostic instrument
> in medicine is the Retrospectoscope
> >------------ ----- ---- --- -- - - - -
>
| 
XML site map