Sofunny.exe

[Gait_Keeper]

Win ME machine, it seems to be in the restore copys only, thats the location NAV gives, it won't delete or quarenteen ( ok so I c an't spell)

what to do from nortons site doesn't do it, maybe because it's in the restore folders copy

anything someone???

TIA

[Beemer]

Turn off System Restore and reboot. If the _Restore folder is still on your machine after that, just delete it.

Empty your Recycle Bin & reboot again. Defrag and enable System Restore.

Windows me's System Restore enabler is found in msconfig/General tab/Advanced button. Down near the bottom.

Cheers!

[Gait_Keeper]

yeah Beemer

don't have the machine yet, my friend is supposed to bring it over later

I'll get back at you, thanx again

[Gait_Keeper]

How do you, turnoff system restore in ME and where is the folder to delete?

don't have the macine, was trying to walk him thur it, I need to see it and I know I would be able to do it,

[Beemer]

Originally Posted by Beemer

Windows me's System Restore enabler is found in msconfig/General tab/Advanced button. Down near the bottom.

Remove the checkmark to turn it off.

Cheers!

[Gait_Keeper]

ok that done, where is the folder to delete?
norton points to .cpy files, but dosen't give a clear path

still don't have the machine tried to do it over the phone

check box done, reboot, defrag.....norton still finds but can't delete, C:\windows\system\_restore\***\**\ .cpy

something like that

[Beemer]

If you've turned off System Restore, rebooted, and the file is still being found in C:\windows\system\_restore\***\**\ , navigate in Windows Explorer to C:\windows\system\_restore\ and delete the _restore folder.

Empty the Recycle Bin, Reboot for extra assurance.

Enable System Restore in the System Configuration Utility\Advanced button\...

Reboot and you should be good to go.

The antivirus program can't access the System Restore created _Restore folder as it is a registered system folder. You have access to it though once you disable the System Restore function and reboot.

Cheers!

[Gait_Keeper]

you da man, and I hear the regeristry Guru

Let you know how it went, thanx again

[Beemer]

Pleasure.

When everything else fails, head on in to the registry.

Cheers!

[Gait_Keeper]

Originally Posted by Beemer

Pleasure.

When everything else fails, head on in to the registry.

Cheers!

DOS Exploit; found by spybot search and destroy, but unremoveable

HKEY_USERS\DEFAULT\Software\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\0\1004!=W=3

remove or change value to to 1004!=W=(some number here)