IACRAWFO-L Archives

Archiver > IACRAWFO > 2001-05 > 0989079007


From: (FRED W DETHLEFSEN)
Subject: [negenie@inetnebr.com: [NEGenWeb] Fw: Manual removal of Bad trans]
Date: Sat, 05 May 2001 09:10:07 -0700 (MST)




================= Begin forwarded message =================

From: ("William Wever")
To:
Subject: [NEGenWeb] Fw: Manual removal of Bad trans
Date: Fri, 4 May 2001 18:16:37 -0500



----- Original Message -----
From: William Wever
To: numagic
Sent: Tuesday, May 01, 2001 8:52 pm
Subject: Manual removal of Bad trans


This from MaAfee virus alert and the basic method my son Mike used to solve situation.


Removal Instructions

Use specified engine and DAT files for detection and removal




Manual removal instructions

Restart the computer in MS-DOS mode
Delete the files mentioned
Restart Windows
Delete the resistry keys as mentioned
Windows ME info

Note: Windows ME utiltizes a backup utility that backs up selected files automatically to the C/;RESTORE FOLDER. This means that an infected file could be stored there as a backup file, and Virus Scan will be unable to delete these files. These instructions explain how to remove the infected files from the C;/Restore folder.

Disabling the Restore Utility

1. Right click on the MY COMPUTER icon on the Desktop.
2. Click on the PERFORMANCE TAB.
3. Click on the FILE SYSTEM button.
4. Click on the TROUBLESHOOTING tab.
5. Put a check mark next to "DISABLE SYSTEM RESTORE."
6. Click the APPLY BUTTON.
7. Click the CLOSE BUTTON.
8. Click the CLOSE BUTTON again.
9. You will be prompted to restart the computer. Click YES
NOTE: The Restore Utility will be disabled.
10. Restart the computer in the SAFE MODE.
11.Run a scan with VirusScan to delete all infected files or browse the the file's located in the C:/_ Restore folder and removed the files.
12. After removing the desired files restart the computer normally. NOTE: To re-enable the RESTORE UTILITY, foLlow steps 1-9 and on Step 5 remove the check mark next to "DisAble System Restore." The infected files are removed and the System Restore is once again active.






This thread: