virus in C:\_RESTORE\TEMP directory

[weeGeordie]

One of my clients has sent me a FREEDOM A/V log that shows 3 virus infected files in the C:\_RESTORE\TEMP\ directory, (it's a WinME system).

Can they safely be ignored or should I go through the effort of repairing them?

THanks

 

[Byteman]

Hi, If the user does run a System Restore, the virus will be put back in.... best to Disable System Restore, which removes all files, then after a clean scan, Create New Restore Point- it's the only way to remove infected files from Restore area. Link below has steps to do this, for ME and winXP

http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam