restore points

[bearston]

I can,t get my computer to restore at all. part of
message says A0011665.exe is Win32.Inspect.10 dropper

 

[Doug Knox MS-MVP]

What program is giving you this error message? System Restore? Your
antivirus software? Also, provide the full error message, not just part of
it.

For tips on creating an effective newsgroup post, please see:
http://www.dts-l.org/goodpost.htm

 

[Mike Matheny]

Yes, I have a friend that had infected files in his restore, and they are
compressed, so they only get caught by the antivirus program when they are
being uncompressed to be restored. I think the only way I got it to work was
turn off the antivirus program to get the restore to work, the immediately
do a system scan. I might have booted into safe mode to do this. MS needs to
come up with some way to either handle this better, or get around it.

 

[Jupiter Jones [MVP]]

The proper fix is to turnoff/on System Restore.
There is nothing else Microsoft needs to do with this.
Turn off/on System Restore to delete corrupted files:
Start/All Programs/Accessories/System Tools/System Restore.
Click System Restore Settings on left side.
Check "Turn off System Restore", click OK, follow prompts and reboot.
This deletes ALL Restore Points including corruption.
Then go back and turn on system Restore and create a Restore Point.

 

[Mike Matheny]

This does not address the issue - apparently, an infected file was
compressed into a restore point backup. Then, when trying to restore, as the
file is uncompressed, the anti-virus program detects it as infected. I know
of no antivirus program that can scan inside the restore point compressed
files to either fix or delete infected backup files.

--

Mike Matheny

The proper fix is to turnoff/on System Restore.
There is nothing else Microsoft needs to do with this.
Turn off/on System Restore to delete corrupted files:
Start/All Programs/Accessories/System Tools/System Restore.
Click System Restore Settings on left side.
Check "Turn off System Restore", click OK, follow prompts and reboot.
This deletes ALL Restore Points including corruption.
Then go back and turn on system Restore and create a Restore Point.

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html

 

[Jupiter Jones [MVP]]

Mike;
I may not be sure what your issue is then.
The real fix in this case is prevention.
If prevention fails, it is up to the AV application.
If that fails...possibly time for a reload and also time to rethink
the strategy used to protect the computer.
If the AV applications can not fix data in a Restore Point, that is
not an issue for Microsoft.
In fact it is up to us, using proper procedures to keep the computer
clean and safe, to keep viruses etc from getting on the
computer/Restore Points in the first place.
If System Restore gets contaminated by a virus, the proper fix is to
delete the restore point.
It is not a good idea to attempt to use a virus infected Restore
Point.

http://www3.telus.net/dandemar/Security.htm

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html