CAN'T REMOVE this VIRUS- NEED Assistance

[dufresnem]

McAfee Security centre is version 9 and up-to-date. I cannot remove these what so ever. McAfee cannot delete or quarentine. Says its write protected.

What is the _Restore directory?

Can I delete these files manually without causing any problems

McAfee Viruscan?
List of Detected Files

C:\_Restore\Temp\A0053933.CPY
Potentially Unwanted Program Progam Name IPSentry

C:\_Restore\Temp\A0053934.CPY
Potentially Unwanted Program Program Name Adware-Betterlnet

C:\_Restore\Temp\A0066741.CPY
Potentially Unwanted Program Program Name
Adware-Betterlnet

C:\_Restore\Temp\A0066742.CPY
Potentially Unwanted Program Program Name Reboot-AA

C:\_Restore\Temp\A0070868.CPY
Infected Trojan Name
StartPage-DU.dll

 

[TekTippy4U]

You have WinME
Disable System Restore whenever cleaning

you can probably just delete the Files and "Contents" of the folder/s

see;

http://service1.symantec.com/SUPPOR...sf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[mattjurado]

Yes, as Tippy says, disable the system restore funtion. Once you do that, reboot and scan again. I often see ME not removing the _restore folder, but it should once you disable this function. I've found that in this case, you need to try a couple of things.

1. Boot off a dos floppy and deltree the folder (which can take hours)
2. Make sure that in Explorer you can view hidden/system files/folders, and then boot to safe mode, try to delete the folder now.

Matt J.

Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.

 

[dufresnem]

I'll try that tonight.