Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

infected with Win32/FakeAlert.HT

by hanabata Oct 30, 2008 3:57AM PDT

OS: Windows XP
Model number: Dell XPS 400

In a tired moment I clicked on an email attachment and infected my computer with a handful of viruses. CA Anti-Virus picked them up and I've removed all but one. I need help with this one.

It's called Win32/FakeAlert.HT
I've run several programs and scanners to remove it, but have not been able to. I've used: CA Antivirus, AdAware, Spybot and fsecure.

My CA Antivirus keeps picking up this file:
C:\System Volume Information\_restore{4FC3261F-058C-4A24-8967-693E6A7FCBED}\RP184\A0056156.exe

My thought is simply to go to this location and delete the file, but my computer does not allow me to go to the location. I cannot locate "System Volume Information". Is my thinking wrong, or if not, how can I get at the file to delete it?

Thanks so much,
Foox

Discussion is locked

1 Posts

- Collapse + Expand Details

- Collapse -

To Remove It From System Volume Information

by Grif Thomas Former Forum moderator Oct 30, 2008 4:12AM PDT

...you'll need to temporarily turn off System Restore.. RIGHT click on "My Computer", choose "Properties", then click on the "System Restore" tab, then place CHECK mark in the "Turn Off System Restore" window, then "apply", then OK.. Restart the computer..

And to get a "second opinion" from a different scanner, please download, install, update, then run a full system scan with the antispyware tool from the link below.. In some recent cases where I've cleaned up the same malware you've described, I needed to run the tool below in Safe Mode to finally get rid of everything.

SUPERAntispyware Removal Tool

Hope this helps.

Grif

Back to Spyware, Viruses, & Security forum