Hostile

[clint ward]

after trying to get into my system restore setting i get
this message.
HAWK has detected a hostilefile.The name of the file is
system32\restore\rstrui.exe.it also says "this script is
attempting to call the run method which runs an
application"Please can anyone help me work out how to fix
it please

 

[Will Denny]

Hi

That file runs System Restore. I've never head of 'HAWK' before, so I'm not sure why it is reporting that file as 'hostile'. What definition, in HAWK's help file, does it give for 'hostile'?

Will

 

[clint ward]

-----Original Message-----
Hi

That file runs System Restore. I've never head

of 'HAWK' before, so I'm not sure why it is reporting
that file as 'hostile'. What definition, in HAWK's help
file, does it give for 'hostile'?

 

[Will Denny]

What size and date is rstrui.exe? 'Normally' the SR 'System Volume Information' folder is infected, as opposed to the program file itself.

Will

 

[clint ward]

the size of the exe file is 357kb.And how do you disable
hawk please

-----Original Message-----
What size and date is rstrui.exe? 'Normally' the

SR 'System Volume Information' folder is infected, as
opposed to the program file itself.

 

[Will Denny]

Hi

Can you right click on rstrui.exe, select Properties and then the Version tab - what is the number listed against 'File version:'?

I don't how to disable Hawk as I have never used it before. Isn't there any reference to disabling it in the help file?

Will

 

[clint ward]

ive also just found out that HAWK has something to do
with my mcafee anti virus

 

[Will Denny]

Hi

I don't use Mcafee either. May I suggest that you contact Mcafee regarding Hawk & SR. They may be able to give you a reason why your problem is occurring.

Will

 

[clint ward]

ok the number of the file is 5.1.2600.0

-----Original Message-----
Hi

Can you right click on rstrui.exe, select Properties

and then the Version tab - what is the number listed
against 'File version:'?

I don't how to disable Hawk as I have never used it

before. Isn't there any reference to disabling it in the
help file?

 

[John Liebson]

ive also just found out that HAWK has something to do
with my mcafee anti virus

In VirusScan, go to "Configure Automatic Protection Settings," where you
can disable Hawk's script stopper.

However, disabling Hawk will not solve the problem, only disguise the
symptoms. I suggest that you continue to figure out why Hawk is
extending its talons against that particular file.

 

[clint ward]

ive un ticked the enable script stopper on mcafee but my
problem now is i have lost all the dates in my system
restore calender there is no checkpoints

-----Original Message-----
Hi

I don't use Mcafee either. May I suggest that you

contact Mcafee regarding Hawk & SR. They may be able to
give you a reason why your problem is occurring.

 

[Will Denny]

Hi

I knew that MacAfee's virus 'solution' was suspect. You have now just proved it. I'm sorry that you lost all your SR points, but I really must press upon you the fact that you must contact Mcafee ASAP to see why their virus scan reacts in the way that it does.

I won't allow any Mcafee products on any of my systems, so can't check these problems out personally.

All the best.

Will