PDA

View Full Version : XP Pro, System Restore and Virus


Mark H.
December 12th 03, 11:16 PM
On a similar vein with a couple other queries on the NG this a.m., my McAfee
anti-virus detected the virus, JS/Noclose, in a file downloaded from some
website I inadvertently accessed while surfing this morning. McAfee "told"
me to delete the file, but I can't locate it in the path that McAfee states
or with the search function.

Subsequently, it's suggested that the file is stored in the System Restore
folder, and I should disable System Restore in order to locate and delete
the virus-laden file, then re-enable System Restore.

1) Is this a likely scenario and should I disable System Restore in order
to attempt to locate and delete the file?

2) On a basic note, are all System Restore points lost when disabling the
utility? If so, what are the implications/impacts? Should I/Can I be
making an alternate record of system restore points before disabling the
utility?

TIA,
Mark

Leon
December 12th 03, 11:17 PM
"Mark H." > wrote in message
...
> On a similar vein with a couple other queries on the NG this a.m., my
McAfee
> anti-virus detected the virus, JS/Noclose, in a file downloaded from some
> website I inadvertently accessed while surfing this morning. McAfee
"told"
> me to delete the file, but I can't locate it in the path that McAfee
states
> or with the search function.
>
> Subsequently, it's suggested that the file is stored in the System Restore
> folder, and I should disable System Restore in order to locate and delete
> the virus-laden file, then re-enable System Restore.
>
> 1) Is this a likely scenario and should I disable System Restore in order
> to attempt to locate and delete the file?
>
> 2) On a basic note, are all System Restore points lost when disabling the
> utility? If so, what are the implications/impacts? Should I/Can I be
> making an alternate record of system restore points before disabling the
> utility?
>
> TIA,
> Mark
>
While JS.Noclose may be annoying, it is not malicious.

http://securityresponse.symantec.com/avcenter/venc/data/js.noclose.html

To scan your computer for all adware and spyware download the free Ad-aware
software at

http://www.lavasoftusa.com/

Leon

Google