Hey, i have a virus called PE_SPACES 1445, a trojan called TROJ.ENGEL.A and another one called TROJ.PSWHOTLIX.A.....They have all corrupted a lot of files in C:/_RESTORE/TEMP/A000????...(?=other numbers).....however, im unable to find this folder, plz can u tell me where i can locate this folder to plz. TY.
lew.

That is your restore archive. Disable System Restore and run another scan.

Click Start > Settings > Control Panel > System.
Click The 'Performance' tab then click 'file system' then 'troubleshooting'.
check 'Disable System Restore'. apply/ok. Reboot

Thanks for replying, but the box for Disable System Restore was already checked. All i need to know is where C:/_RESTORE/TEMP/ is if you r able to find it.ty.

TB525's suggestion should have brought something more to your mind than going to "system restore" and seeing that the box was already checked. When did you intentionally disable "system restore" on your computer and why? If you did not disable "system restore", you need to enable it, reboot, and see if you can get "system restore" to function properly. Have you deleted your temp internet files?

I checked the box when i encountered this problem a few months ago, and btw my temporary internet files r mostly still there i think, however, i have a problem, i uncheck the SYSTEM RESTORE box, and reboot......i come back on, check to see if the box is still unchecked but its not, its always checked back when i come back on, and i always click APPLY when unchecking it. Im not so sure wats going on.

Have you checked your drive settings? The file location you listed is the "system restore" files. What antivirus and/or anti-trojan programs are you using to detect/clean/repair your problems?

I used the Housecall.antivirus.com online scan to detect this virus. however, it cant delete or clean the infected files because they are "in use".

lew9, try the removal tool/instructions from http://www.sophos.com/support/faqs/pedis.html, this seems to be the best removal tool for this nasty problem.

Sounds like the C:\_Restore folder files are corruputed.

Boot from a Windows ME boot diskette. At the DOS A:\prompt:

A:\ DELTREE C:\_RESTORE