Vista - How to Delete under "C:\Restore"

mir

hello guys,

one of my friends is using vista and seems to have a malware under :
C:\RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\Drive13.exe

i tried to disable / re-enable system restore and do clean up .. but it doesn't seem to work

any hints how to clean files under c:\restore ?

help appreciated

Padre

never worked under vista, but there is nothing that a fresh boot disk can't clean ;)

belal

work in safe mode.

mir

:o did the MS ppl wake up one day and say how are we gonna create protected folders for viruses and trojans ?

I will try safe mode, nothing i can do with the delete restore points ?

I tried to overwrite it , to delete it in command line , to copy the content of another folder above it to smash it

I detected it with my kaspersky by sharing the folder and scanning remotely, but i couldn't delete it

the dude has NOD, he bought it, but he can't update it for some reason, he wants to keep it, he seems to like it
his pc is very clean for a non-IT person, i left him with kaspersky online scanner updating, hope it does the update and he can scan his pc

ideas and suggestions are welcomed

Padre

i usually remove all those "malwares" (yes, technically, they are NOT viruses :P) by hand using the good ol tools :D if it helps, get a copy of the malware and analyze it using any sandboxing website.

mir

want me to send you a copy ?

u still "collect" them / trabeh cute little malware ?
mir tags Padre in this pic, don't tell me it is not true :P

Padre

lol :P well, i used to analyse them so i can effectively remove them :D
now, i just remove everything that isn't supposed to be :P

about that pic ... its not entirely false, but the software to control the botnet is not detected and dosen't act so recklessly, else how would u get to have a big net ? ;)

mir

[off topic]

well, i used to analyse them so i can effectively remove them

tsk tsk tsk.. bala hijaj, bala hijaj, enough excuse, You know, normal people just have aquariums
-- joking, picking on you :P this is a webcomic, i find it kinda cool tho that you used to tjame3 and trabeh malware in vmware... wanna do a competition who can yjame3 a bigger collection of malware ? :)
and then maybe we can do a competition on who can clean faster the other person vmware MANUALLY :D
the more you tjame3, the harder for the other person to clean :)

[/off topic]
-- sorry for the off topic guys, but i couldn't help it :P

Padre

why the competition about that ? lets compete about the most effective, small, hidden one we can write :P

mir

well if i want to code something yi2zeh, you won't have a chance.. haram to unleash those evil ideas in the world... there is enough malware out there.

if other ppl compete, they might get better and faster at cleaning viruses manually :) wich is a good thing
and consider it as funny archiving educational thing :
vmware best of malware of 2008
vmware best of malware of 2009