How to delete file A0016131.CPY?? Virus Problem.

[TR15220]

Win-ME on a Compaq Presario 1200.

Anti Virus says that the following files are infected:

C:\_RESTORE\TEMP\A0016131.CPY
thru
C:\_RESTORE\TEMP\A0016135.CPY

Can't delete them as it says they are 'locked'.
Tried using 'Complete Cleanup' (www.softdd.com) and used their option for 'Locked Files' and they are still there.

Any suggestions on how to get rid of these infected files?

Thanks in advance for any help!!!!!

[Endi]

I think me has also the system restore capability. disable it and then try it again



Here is how to do it


Click Start, point to Settings, and then click Control Panel.
Double-click the System icon. The System Properties dialog box appears.


for more informatiion

http://service1.symantec.com/SUPPORT...01012513122239

[TR15220]

Thanks endiablado - you are the man !!!

I appreciate your assistance on this!!!

Best wishes for 2004 to you and yours!!!

[Endi]

Glad you got the problem solved

and

Happy New years to you too.

[Endi]

OH yeah I almost forgot

If you did not do this then you should
enable system restore again

it will start with a new restore point
the files that were giving problems will still be gone

[TR15220]

Thanks again - Your answer got me right where I needed to be!!!

[robdude]

I downloaded this little beasty from kazar downloads when searching for game patches all my av software is up-to-date and fully functional but it slipped into system restore thus as you know cant delete until you've stop using it. But beware when searching on kazar i thought i was safe but it was only a very small exe and on broadband it was on my system in a flash so the moral of this story is only search and download updates and patches from safe legitmate sites or worm/spybot its a matter of time.
but if you do have it turn off your sys restore restart/ run another av scan to make sure enable sys restore the virus should be gone YOU HOPE?.
I know most of you dudes are competant to do this and i hope i'm not teaching anybody to suck eggs most users are not so if it helps cool.

[jan60111]

My virus scanner Fix-It Utilities 5 detected virus:

C:\ RESTORE\TEMP\A0001047.CPY

WORM_ SPYBOT.JS



<FONT size=3><FONT face="Times New Roman">

[jan60111]

<SPAN style="FONT-FAMILY: Arial"><FONT size=3>My virus scanner Fix-It Utilities 5 detected virus:

[jan60111]

<SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt">My virus scanner Fix-It Utilities 5 detected virus:

[robdude]

avg -grisoft is fantastic been using it for years and its free check it out

http://www.grisoft.com/us/us_dwnl_free.php

and it wont try to take over your system like synmantec does ::

ARE YOU PLAYING YOUR PART IN KEEPING THE WEB CLEAN

ROB

[jan60111]

Thank you
Jan

[jan60111]

Thank you

[jan60111]

I did it, here is solution: if you have WORM_SPYBOT or BKDR_SPYBOT in C:RESTORE\TEMP\A0001047.CPY or similar CPY No.
Go to www.trendmicro.com/download/dcs.asp and download Damage Cleanup Engine/Temple
Good luck
Yhanks Rob for good links (Secunia.com)

[palival]

Try Solo antivirus ( http://www.srnmicro.com ). It works great for me. To remove *.CPY infected files you need to disable system restore. You can find simple instructions at http://www.srnmicro.com/customers/resdisable.htm

Hope this helps.

[Insomniac]

This thread is over a year old!

[robdude]

just about my age then