12 replies to this topic

[lolajoe]

Once the scan is complete and everything is taken care of, do I delete the file from quarantine?

[AdvancedSetup]

Yes you can. It's probably best to leave it alone though for at least a few days to confirm that you don't encounter any negative impact or that it was not a "False Positive". If you're confident that the file removed was not a False Positive and their is no negative impact you can delete it from quarantine at anytime.

[lolajoe]

AdvancedSetup, on Nov 5 2008, 05:43 PM, said:

Yes you can. It's probably best to leave it alone though for at least a few days to confirm that you don't encounter any negative impact or that it was not a "False Positive". If you're confident that the file removed was not a False Positive and their is no negative impact you can delete it from quarantine at anytime.

Is there any harm in just leaving it in the quarantine?

[AdvancedSetup]

Nope, they are perfectly safe there. Though on occasion other security software may scan those files and alert you that they may be infected files. You should also clean out your Restore Points and create New restore points if you've recently cleaned up your system.

If the computer is behaving at all like it's still infected with something then you may want to visit our HJT log forum and get further assistance on ensuring your system is clean.

[lolajoe]

AdvancedSetup, on Nov 5 2008, 06:20 PM, said:

Nope, they are perfectly safe there. Though on occasion other security software may scan those files and alert you that they may be infected files. You should also clean out your Restore Points and create New restore points if you've recently cleaned up your system.

If the computer is behaving at all like it's still infected with something then you may want to visit our HJT log forum and get further assistance on ensuring your system is clean.

Sorry to have to ask you a stupid question but I'm new to all of this, but how do you clean out Restore Points and create a New one?
Thanks for all the help again.

[AdvancedSetup]

Here is how to clear out and recreate the restore points.

[indent]Disable and Enable System Restore-WINDOWS XP
This is a good time to clear your existing system restore points and establish a new clean restore point:

Turn off System Restore

• On the Desktop, right-click My Computer.
  
• Click Properties.
  
• Click the System Restore tab.
  
• Check Turn off System Restore.
  
• Click Apply, and then click OK.
  
• Reboot.

Turn ON System Restore

• On the Desktop, right-click My Computer.
  
• Click Properties.
  
• Click the System Restore tab.
  
• UN-Check *Turn off System Restore*.
  
• Click Apply, and then click OK.

This will remove all restore points except the new one you just created.


Disable and Enable System Restore-VISTA

This is a good time to clear your existing system restore points and establish a new clean restore point:

Turn off System Restore-Vista

• Click the Vista/Start icon.
  
• Right Click >> Computer
  
• Click Properties.
  
• Click the System Protection tab.
  
• Uncheck All drives
  
• Click "Turn Off System Restore" at the prompt then click "Apply".
  
• Restart your computer.

Turn ON System Restore-Vista

• Click the Vista/Start icon
  
• Right Click >> Computer
  
• Click Properties.
  
• Click the System Protection tab.
  
• Checkmark All drives that were selected previously then click "Apply".

This will remove all restore points except the new one you just created.[/indent]

[indent]However you really should consider doing this to really ensure your system is clean.[/indent]

[indent]Please read and follow the instructions provided here: Pre- HJT Post Instructions
When ready please post your logs here: Malware Removal - HijackThis Logs

Someone will be happy to assist you further with cleaning your system.

During this scan and cleanup process you should not install any other software unless requested to do so.
[/indent]

[lolajoe]

Thanks again, I'll give it a try...lets hope it works.

[beck]

At least uou HAVE files in quarantine! I've never seen any, when is this going to be fixed?

[beck]

beck, on Nov 6 2008, 08:02 AM, said:

At least you HAVE files in quarantine! I've never seen any, when is this going to be fixed?

I guess never since this seems to be only a minor problem for so few.

[Tigger93]

Never be fixed? It will be, Marcin is surely looking into it...

[beck]

Tigger93, on Nov 7 2008, 09:34 AM, said:

Never be fixed? It will be, Marcin is surely looking into it...

Don't be so sure, Tigger.
I PM'd Marcin about this and since he can't duplicate the issue, he claims it's "system specific" and "not likely to be fixed". Too bad, as MBAM is a nifty program, but not worth purchasing if it doesn't work completely on ALL systems, IMO. I have a laptop and a desktop and they both have the same issue (XP SP3 Home.)
For now, I'll use the free verson of MBAM as a second opinion to SAS.

[Tigger93]

Just because he says he can't reproduce it doesn't mean it won't be fixed. There are many things to work on right now, this isn't a high priority.

[beck]

OK