Problem removing infection

[Jesse Tutterrow]

A couple of weeks ago my XP Home computer occasionally (about once every 10
times) started popping windows whenever I open Internet Explorer. One of
the main web pages is:

http://www.winantiviruspro.com/pages/newcontent/?aid=vm_dw_wav_na_3&lid=symant





At the time I was running Microsoft's AntiSpyware. It did not detect
anything. Neither did Norton AntiVirus.



I upgraded to Windows Defender. Now it complains about finding problems in
my system restore images. So, I turned off System Restore, Rebooted, and
then turned it back on. It is my understanding (from Technet) that this
would remove the system restore files.



I still get the following errors listed below. Since it keeps coming back,
with every copy that system restore makes, I believe that the original
problem must be an infection within Windows XP Home.



Why would Windows Defender detect a problem with the system restore, but not
be able to fix it?

Why would there be an infection within the system restore and not the OS?

If the XP is infected why does Windows Defender not detect it?

How can I recolve this?



Thanks in Advance,



Jesse Tutterrow

(e-mail address removed)

314-265-3520

----------------------------------------------------------------------------------------------------

TargetSaver



Category:

Trojan Downloader



Description:

This program has potentially unwanted behavior.



Advice:

Remove this software immediately.



Resources:

file:

C:\System Volume
Information\_restore{96439F1C-62BE-4598-89D2-C57363B204EC}\RP4\A0000073.EXE->(CryptFF)->(wise0008)



DelFin.Media Viewer



Category:

Adware



Description:

This program has potentially unwanted behavior.



Advice:

Review the alert details to see why the software was detected. If you do not
like how the software operates or if you do not recognize and trust the
publisher, consider blocking or removing the software.



Resources:

file:

C:\System Volume
Information\_restore{96439F1C-62BE-4598-89D2-C57363B204EC}\RP4\A0000085.exe->(CryptFF)->(ZipSfx)->uptodater.exe



View more information about this item online.

 

[Guest]

Hello Jesse,

Windows Defender doesn't remove, since such files could contain other
wanted/needed information, or they are in a restore folder which also isn't
touched by Defender, or they are in a quarantine fºlder.

You are right, your PC is infected.

Please try scanning on-line here:
http://www.ewido.net/en
http://safety.live.com/site/en-US/default.htm
http://support.microsoft.com/kb/890830

Jesse, please read the post above, and try to supply more info.

Thank you
Еиçеl