[Dshield] Virus in my restore point

Troy Billington DoShelp at DoShelp.com
Wed Dec 10 15:34:21 GMT 2003

Click Start > My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply > click OK.
Restart the computer.
Download the latest virus definitions.
Verify that Your Anti-Virus is set to scan all files and all drives, and
then scan the computer.
After cleaning the infected files, repeat steps 1 through 6, except in step
4, uncheck Turn Off System Restore

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
Behalf Of Keith Bergen
Sent: Wednesday, December 10, 2003 8:59 AM
To: list at dshield.org
Subject: [Dshield] Virus in my restore point

Hello All,

I have an annoying problem on my Win XP Pro box. One of the
files in one of the restore points is claimed to have a virus
in it. PC Cillin finds this virus each time, but cannot
remove it. Every day, PC Cillin reports that it is there, and
you have to hit okay.

The virus is Troj_Fyle.B, but never got installed on my
system. The executable, however, got into a restore point
before my scan could delete it. The Run key is not installed
in the registry either.

As you probably know, XP will automatically create these
restore points for you. I would like to find and remove that
restore point (thus removing the file). Does anybody know of
how to manage the restore points, and delete these restore

"Life is like an analogy"

list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:

More information about the list mailing list