1
   

How Do I Remove Files from C:\_RESTORE\TEMP

 
 
Reply Sat 12 Aug, 2006 02:24 am
To make a long story as short as possible - I submitted "How Do I Remove xwxnwhcw.exe about Feb/Mar 2005 & you guys just totally rocked on helping me get rid of it. This afternoon I decided to run through all these steps again. So here's what happened:

(First - I have Win Me)
I updated CWShredder, Ad-Aware & Spybot. Rebooted. I ran all 3 programs. 0 found on CWShredder, 56 on Ad-Aware, & 0 on Spybot. I had Ad-Aware remove/fix items. Rebooted. I then updated Norton Antivirus - scanned & all was good. Rebooted & went to Safe Mode - previous instructions said to delete contents of C:\Documents & Settings\Local\Temp, C:\Temp & C:\Windows\Temp - (I only found C:\Temp and deleted these files on from C:\Temp).

I went back through all the above and found on Ad-Aware 5 files. I tried to remove them several times (with Ad-Adware) but - no such luck - they are:

C:\_RESTORE\TEMP\A003562.0 (data miner)
C:\_RESTORE\TEMP\A003563.0 (data miner)
C:\_RESTORE\TEMP\A003564.0 (malware)
C:\_RESTORE\TEMP\A003565.0 (malware)
C:\_RESTORE\TEMP\A003566.0 (malware)

I also went to the hard drive and looked under C:\_RESTORE\TEMP to search for these files - none of them show up with *****.0 (yes all files shown is checked on my View) most show up as *.CPY - but the above files show up as C:\_RESTORE\TEMP\A003562.1 - and C:\_RESTORE\TEMP\A003562.1, etc.

So. my questions are: do I just delete them or what? Do I need to run more programs to get rid of them? What are these files & how am I getting them?

Thanks so much (again!!!) if you can help me out here.

beledi (previously gizemli)
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 1 • Views: 582 • Replies: 8
No top replies

 
timberlandko
 
  1  
Reply Sat 12 Aug, 2006 02:19 pm
Those are System Restore files - among the general youckware cleanup steps is the proceedure for clearing and restting System Restore, but for convenience sake, here it is again:


Start>Settings>Control Panel>System
(If you don't see the System icon, go up to the toolbar in Control Panel, click "Tools", click the "View" tab, click "View all Control Panel Options", cick "Apply", then click OK")

In the System Control Panel dialog box, click the "Performance" tab, then click "File System", then click the "Troubleshooting" tab. In the "Troubleshooting" tab, click "Disable System Restore", confirm if prompted, click "OK", and when prompted to restart Windows, click "OK" and allow your system to restart. When it has restarted and before doing anything else, empty your Recycle bin and clear all your temporary files or better yet, run Cleanup! (which you should already have anyway), reboot once more, go back into Control Panel>System>Performance>File System>Troubleshooting and UNCLICK "Disable System Restore", click "OK".

That should remove all your previous Restore Points. Windows should set a fresh restore point on your next restart, but you can do it manually as well; Start>Run>type (without the quotes) "msconfig">click "OK" (or hit ENTER)>click "Launch System Restore">click "Create a new Restore Point">click "Next">enter a descriptive name for your new Restore Point>click "Create", be patient, and follow the remaining prompts as they come up.
0 Replies
 
beledi60
 
  1  
Reply Fri 18 Aug, 2006 08:52 pm
I followed your instructions - here's what happened:

Disable System was already checked. I went ahead & rebooted. I checked the Recycle Bin & it was empty. I went to C:\WINDOWS\TEMP - 3 files could not be deleted, so I went into Safe Mode and none of them were listed. So I rebooted. I went back to C:\WINDOWS\TEMP and this time there was only one file listed (2LT03049.TMP) - tried turning off TSRs (useless since I already tried in Safe Mode) - but the file did show in Normal Mode - still could not remove it. So, I ran Cleanup & rebooted. Went back to Control Panel>System>Performance>File System>Troubleshooting and UNCLICK "Disable System Restore", clicked OK & set a new restore point. Again, I rebooted. and ran through CWShredder, Ad-Aware, Spy Bot & Cleanup - this time everything came up good. Do I need to continue on with BitDefender, TrendMicro, LSP, Lavasoft VX2, BINet removal tool & HJT (and since I already have HJT -previous intructions say to install to a new folder - if I have to run it again do I update or uninstall & reinstall to a new folder)?

Thanks again - have a good one.
0 Replies
 
timberlandko
 
  1  
Reply Fri 18 Aug, 2006 09:14 pm
Sounds like you're good to go, no real need to do the whole cleanup if you have no symptoms and everything reports clean. Keep current on updates, scan regularly with your antivirus and your choice of antispyware, and, naturally, use your head out there on the 'net - you should be OK
0 Replies
 
beledi60
 
  1  
Reply Fri 18 Aug, 2006 09:29 pm
Thanks so much for your help.

I'm not sure what to look for on this site in reference to my last questions - so here they are:

1) How do I prevent this crap? Since my previous issue, I have not downloaded anything except downloads & updates to the programs I was told to download, Windows updates (includes Media Player). Is it possible I may have gotten this garbage via email?

2) I am thinking about buying a new computer - to be used only for online banking & ohter important stuff and to use my current computer for surfing and email - good idea or bad idea? What are your thoughts on this?

Thanks so much again
0 Replies
 
beledi60
 
  1  
Reply Fri 18 Aug, 2006 09:32 pm
Sorry, I think I am a happy clicker and did not finish - sorry again.

What type of scans and in what sequence should I run them in order to check my system and make sure it is ok?
0 Replies
 
timberlandko
 
  1  
Reply Fri 18 Aug, 2006 10:05 pm
beledi60 wrote:
Sorry, I think I am a happy clicker and did not finish - sorry again.

What type of scans and in what sequence should I run them in order to check my system and make sure it is ok?

Not sure how much you wanna go through - a detailed proceedure is available HERE - its about due for revision and update, but the newer version will be substantially the same.

Actually, as I said earlier, if everything seems OK, and your antivirus and your choice of antispyware report clean, I think you're prolly OK.
0 Replies
 
beledi60
 
  1  
Reply Fri 18 Aug, 2006 11:59 pm
Thank you so much. I bookmarked the last site as well as wrote it down and will use it for preventive measures. If you are ever in Silver City NM - look me up - I think I owe you a few drinks (or maybe a couple of cases of beer - whatever) for your help. Thanks again.

Beledi
0 Replies
 
timberlandko
 
  1  
Reply Sun 20 Aug, 2006 02:20 pm
Thanks, glad if I helped - no gratuity necessary Laughing
0 Replies
 
 

Related Topics

Clone of Micosoft Office - Question by Advocate
Do You Turn Off Your Computer at Night? - Discussion by Phoenix32890
The "Death" of the Computer Mouse - Discussion by Phoenix32890
Windows 10... - Discussion by Region Philbis
Surface Pro 3: What do you think? - Question by neologist
Windows 8 tips thread - Discussion by Wilso
GOOGLE CHROME - Question by Setanta
.Net and Firefox... - Discussion by gungasnake
Hacking a computer and remote access - Discussion by trying2learn
 
  1. Forums
  2. » How Do I Remove Files from C:\_RESTORE\TEMP
Copyright © 2025 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.03 seconds on 12/29/2025 at 10:18:37