System Restore and virus?

[Guest davy]

OK folks I'm looking for some more help and advice :lol:

I am running XP Home on my PC and recently updated my anti virus prog

(AVG free version). I ran AVG and detected a trojan horse swind virus which was then removed safely by AVG. :D :lol:

Now however when I leave the PC idle for a few minutes I get a warning that states:

trojan horse swind found in file C:system restore information_restore{CB2D7211etc,etc ends withA0263832.exe

Please run AVG.

I run AVG again but no virus is found. :? :?

I have only limited PC knowledge :oops: but I asume that the virus is now lying dormant in a system restore point?

I know that you can remove all but your most recent restore point from the system but I assume that the virus is in the last restore point.

I also assume that if I create another retsore point it could also be in that one?

Is there any way to remove individual restore points?

Any ideas greatly appreciated.

Thanks in advance,

davy.

p.s. this is probably linked to my post last week where I can now not defrag my hard drive.

http://smartphone.modaco.com/viewtopic.php?t=66758

[Guest mattbrown]

will hav to delete that restore point as it looks like when the pc booted every day - for one of those days it took a snap shot with the virus in there so it keeps finding it in that restore point

[Guest mattbrown]

if its in the last restore point then make another restore point for today and then it should allow you to delete that infected one

[Guest MECX]

ok if you go to your C drive go to tools/folder options/view tab make the hidden folders viewable,, you should now be able to see 'System volume information' folder.

in this folder should be a 'restore' folder.

inside this folder there are numbered folders RP1 (restorepoint1) --you should be able to delete the restore point from there---or at least virus check it>?

if you want to switch off restore before you do this(might be a good idea) just right click on 'My computer' on the desktop then go to properties and the system restore tab.

hope this helps virus suck ass.

[Guest davy]

Thanks for the advice guys.

Just followed advice from mattbrown and deleted all but most recent restore points.

If (or more likely when it happens again) I'll try your suggested method MECX. :lol:

Now I just have to leave the thing alone to see if the virus is detected again. :lol:

Thanks again,

davy.

edit: :oops: Just reread mattbrowns multitude of posts :D

Sorry for suggesting that he advised me to delete all but most recent restore point. That was in the manual :roll: