Posted 07 June 2004 - 06:43 PM
Troj SIBOCO.A and the file this was in is: C:\_RESTORE\TEMP\A0057688.CPY
Troj SMALL.XC and the file it's in: C:\_RESTORE\ARCHIVE\FS350.CAB *A0056586.CPY*
Troj WINTRIM.AU and the file: C:\_RESTORE\ARCHIVE\FS358.CAB *A0056638.CPY*
It told me this when I went to delete them: "Unable to clean the file because it is currently in use". And I cannot delete the browser Hijacker either. If anybody wants me to, I can post the HijackThis log. Oh, and I'm running on WinMe. Please help .
Posted 07 June 2004 - 06:50 PM
The following procedure disables the System Restore feature:
For Windows ME
1: Right-click the My Computer icon on the Desktop and click Properties.
2: Click the Performance tab.
3: Click the File System button.
4: Click the Troubleshooting tab.
5: Select Disable System Restore.
6: Click Apply > Close > Close.
7: When prompted to restart, click Yes.
8: Press F8 while the system restarts.
9: Choose Safe Mode then hit the Enter key.
10: After your system has restarted, continue with the scan/clean process. Files under the _Restore folder can now be deleted.
11: Re-enable System Restore by clearing Disable System Restore and restarting your system normally.
For Windows XP
1: Log on as Administrator.
2: Right-click the My Computer icon on the desktop and click Properties.
3: Click the System Restore tab.
4: Select Turn off System Restore.
5: Click Apply > Yes > OK.
6: Continue with the scan/clean process. Files under the _Restore folder can now be deleted.
7: Re-enable System Restore by clearing Turn off System Restore.
Edited by lion7718, 07 June 2004 - 06:51 PM.