Virus is System Restore

[Hunter]

I briefly had a virus-infected file in my Temporary
Internet Files, and Windows apparently created a system
restore point while I had that file. McAfee is now
popping up telling me I have an infected file, and gives
the file location as C:\System Volume Information\_restore
{A7291218-8850-48F4-94D5-266ACBCA1BA5}\RP669
\A0286901.exe\A0286901.EXE. The trouble is, I cannot
clean, delete, or quarrantine the file, because Windows
won't let me. I get "access denied" any time I try to do
anything to the file. Is there any way to delete this
restore point? It is rather annoying, because McAfee
keeps popping up every few minutes.

 

[Shenan Stanley]

I briefly had a virus-infected file in my Temporary
Internet Files, and Windows apparently created a system
restore point while I had that file. McAfee is now
popping up telling me I have an infected file, and gives
the file location as C:\System Volume Information\_restore
{A7291218-8850-48F4-94D5-266ACBCA1BA5}\RP669
\A0286901.exe\A0286901.EXE. The trouble is, I cannot
clean, delete, or quarrantine the file, because Windows
won't let me. I get "access denied" any time I try to do
anything to the file. Is there any way to delete this
restore point? It is rather annoying, because McAfee
keeps popping up every few minutes.

Turn off System Restore.
http://support.microsoft.com/?kbid=310405
Reboot.
Turn on System Restore.
http://support.microsoft.com/?kbid=310405
Make a Manual Restoration Point.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx

DONE!

 

[Carey Frisch [MVP]]

The virus has infected your System Restore folder.
You'll need to turn-off System Restore, reboot, then turn it back on.
One cannot delete an individual Restore Point....it's all or nothing.

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------------------


|I briefly had a virus-infected file in my Temporary
| Internet Files, and Windows apparently created a system
| restore point while I had that file. McAfee is now
| popping up telling me I have an infected file, and gives
| the file location as C:\System Volume Information\_restore
| {A7291218-8850-48F4-94D5-266ACBCA1BA5}\RP669
| \A0286901.exe\A0286901.EXE. The trouble is, I cannot
| clean, delete, or quarrantine the file, because Windows
| won't let me. I get "access denied" any time I try to do
| anything to the file. Is there any way to delete this
| restore point? It is rather annoying, because McAfee
| keeps popping up every few minutes.