RE: Can I delete?

Can I safely delete the following, which have been identified as being infected with W32.Welchia.gen virus and which are currently quarantined:

svchost.exe C:\WINDOWS\SYSTEM32\DRIVERS

A0034032.exe C:\System Volume Information\_RESTO~1\RP124

I am running XP.

Help?

 

If the files are quarantined and you aren't experiencing any difficulties after rebooting a few times, they are safe to delete. When the are quarantined, they are inaccessible.

The only necessary one is svchost.exe

I only have that in windows/system32 folder

 

...?

 

In short, yes, delete them.

AA was saying to make sure they are backed up first.

Better safe than sorry.

 

ok how do i back up and where to?

isn't svchost.exe a vital file?

 

Not as a driver!

YOu did say its located in C:\windows\system32\drivers, right?

Backing up is exactly how it sounds. Don't know how to explain it.

Make a copy to another location, for safekeeping until you know its safe to delete it, too.

 

yes it is located there.

but if i back it up (make a copy) wont that file have the virus too?

it is currently quarantined if this is the equivalent?

 

Do you know how to access quantined files?

If the answer is no, then back it up.

The file may be a virus, but it cannot activate without something to start it up.

Like I said previously, its only a safegaurd, delete it when you can safely boot, and no you have no problems.

 

The other thing is, what antivirus are you using?

I wouldnt use any AV that quarantines a file then leaves a copy in the exact same place it infected.