How to disable Last known Good Configuration in Windows 2000

[Peter Ulrich]

My son's computer has acquired the Trojan Horse virus and
I am having a tough time getting it out of the system.
When I run my virus software it eradicates the virus but
then it comes back from an auto restoration from the Last
Known Good Configuration. Symantec suggests disabling the
Auto Restore/which I assume is the same as the "last known
good configuration" in Windows 2000. If I could disable
this restoration It would be my hope that I could get rid
of the Trojan Horse in this system. Comments or direction
please.

Peter.

 

[Scott Harding - MS MVP]

I beleive they are talking about Windows File Protection as I do not think
you can disable Last Known Good and it would NOT do anything like your
describing. It must be manually invoked and it really is only for services
and does not replace any files. It is one of the ControlSets in your
registry. The following article talks about disabling the Windows File
Protection but not sure if that will really help either. This service only
restores known Windows files so it sounds like the trojan is still there and
not really cleaned out. I would run Spybot and Adware and also do an online
scan at www.antivirus.com to make sure it is clean. There is section called
House Call that will scan your computer through the internet. Usually if you
know the name of the virus/trojan you can search the internet for removal
tools that are specifically designed to remove it.

http://support.microsoft.com/default.aspx?scid=kb;en-us;222473&Product=win2000