Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hello Again,
I'm back asking questions again, lol.
Anyway, I did do a search for similar questions and didn't find what I needed. So....... hopefully, some kind person here will be able to offer some sort of advice.
The thing is, I have been recieving at least two emails a day containing attachments with the Netsky virus.
Of course, I have not been opened any of these emails. In fact I mass emailed everyone in my email addy book to let them know that one of them must have the virus and to do what they had to do to get rid of the darn thing. But anywhooo, Whenever I do a scan with Housecall, it still comes up in my System Restore files. (After quarentining them and deleting them). In one instance, it came up in my Windows Temp folder which I then deleted.
Soooo, my question is: Is there any other way - other than disabling and re-enabling System Restore to get rid of it? I have already done so twice in the last four days.
Will System Restore eventually purge those infected temp files itself? And if that's the case, should I just lower the amount of Restore "space" a bit so that the files are purged that much quicker?
Thanks,
Jodie

Jodie, when you turn system restore off, do you restart your computer and then run the antivirus scan before you turn system restore back on to make sure the system is clean? One big question does comes to mind, since you mentioned using "housecall". What antivirus program do you have installed and why is it not detecting the infection? Regarding the amount of restore space, if your hard drive is say 30G or larger I would set the slider to 4-5%. This will still provide you with adequate restore points if you like using system restore. Take care and all the best!

Yes I do run another scan after disabling system restore.
I am just saying that every time I recieve an email that contains the virus, and after its been quarentined and deleted - it never fails to show up in my System Restore.
I use NAV and am constantly making sure the virus def's are up-to-date. And NAV usually ignores anything in System Restore because it cannot access it to do anything.
As for my hard drive, I can't recall how large my hard drive is. So I don't know where to set the slider to.
Thanks for your answer. As always, I appreciate the help!
Take care Cpt.
Jodie

Do you restart the computer after you turn system restore off? If you do not restart or shutdown the computer and start the computer up again, those files are not cleared out of the system. You can determine your drive's size by using My Computer>local disk(c)>properties and the size and other disk tools(check disk/defrag/disk cleanup) can then be accessed. I am a little confused as to why the email files are being quarantined and deleted by Norton. Is Norton detecting these files, because you are opening the attachments without scanning them first? Are your security setting for your email not set to block any attachments that might have a virus? Is your preview pane not disabled in the view>layout area?

Hi Capt,
Yes I restart the computer after I disable and scan.
NAV catches the virus upon the email's loading into my inbox. I then quarentine and delete the files containing the virus.
I do not open the emails or their attachments.
My Outlook Express security setting is set to block attachments that look suspicious or contain viruses.
The preview pane has always been disabled as I never liked that feature.
I have gone through everything that I could possible think of in order to keep my OS safe. Visiting here and reading many, many posts has helped me to do so.
I only run Housecall because I know that it will recognise a virus if one has made itself at home in my system restore. Hence my disabling system restore in the last few days. Although I have never had to utilise the system restore feature to "fix" my computer, I would like to be able to use it if the need should arise.
I am sure that the rest of my computer is alright. But maybe I should use the Symantec removal tool just in case? Both NAV and Houscall say that my machine is clean (other than the System Restore whenever I recieve one of those stupid emails.......)
I have never had to utilise the system restore feature to "fix" my computer,but, I would like to be able to use it if the need should arise.
I understand the necessity to keep my antivirus up-to-date, as well as keeping myself informed.
I just don't understand why if NAV spots the virus in the first place as it enters my inbox - it goes into my system restore anyways? Because NAV doesn't have access? Hey, that's a possibility!?!
Anyway, thank you so very much for your input. Hopefully whoever has this nasty virus will soon figure it out so that MY computing experience can go back to normal!
Many thanks,
Jodie
PS - Thanks for telling me how to check the size of my hard drive.

Sorry for the double explanation about "not having to use system restore.....". I copied and pasted and forgot to delete one of the copies.
Have mercy!!!

Even though your AV is quarantining those files if you don't get them out of there as soon as they come in they are going to end up in a restore point and the quarantined infected files then are in the restore folder . Seeing that restore points are made almost daily if you don't get them out as soon as they come in and clear the quarantine file they will be in your restore point for that day .

Vipergg,
Hmmmmm...... I usually delete the infected files from quarentine as soon as they are in quarentine. But I will make sure to do it right away EVERYTIME from here on in :o)
Thank you for your time and your insight.
Have a good day and enjoy the rest of your weekend!

You could adjust the size of System Restore down so that it purges older files more often. You just have to remember that any System Restore might be restoring e-mail files that are infected.
System Restore only restores specific types of files (by name and/or extension) or from specific folders. So there is a way to prevent them from being backed up (if you don't care about being able to restore e-mail files). There is even a way to allow AV programs to delete virus out of the Restore folder, but that would corrupt it and make it useless. I don't use Outlook, so off hand I can't tell you how to do it.

Hi JackG,
Thank you for your reply.
No, I would think that it would not matter if email files were to be restored or not, but that is another matter all together :oD
I haven't recieved one email containing a virus so far today. So hopefully whoever had it was able to remove it from their system. That would be sooooo awsome!
My system restore is clear of the virus as is the rest of my system, thankfully!
Hopefully that is how it will stay.
Again, many thanks to you - and the others who have responded to my thread.
Cheers,
Jodie

![]() |
notepad.exe trying to con...
|
DyFuCA and SeekSeek
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |