disabling system restore

[sonvolt12]

OK, I'm new to this kind of thing, even though I know a decent amount about computers.  I'm usually scared to mess with anything that I am unsure of.  

My computer is infected with Wib32:Trojan-gen  

I ranavast and I received the pop up notification that a virus was found, and I could delete, ignore, etc.  But now I'm reading about needing to disable system restore.  Does that mean that even though I clicked on delete, the thing wasn't deleted?  

Thanks in advance for your help  

[bob3160]

sonvolt12
Welcome to the forum.

Does that mean that even though I clicked on delete, the thing wasn't deleted?  

That all depends on where the infection was located.
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
etc. etc.

[sonvolt12]

OK,

My OS is Windows XP
avast version:  4.1
VPS:  comp. date:  01.10.2004
         Version:  0440-3
Error Message:  This is one that I just received:  "Warning, a virus was found...no need to panic...etc."
Virus name:  JS:TrojDnldr-1 [Trj]
Available Actions:  "move.rename," "delete," "repair," or "move to chest."

Also what is the best type of scan to use?

Thank you thank you thank you so much

[bob3160]

sonvolt12
The safest thing to do is to Move it to the Chest.

[sonvolt12]

Thanks very much.  I really appreciate your help.

[sonvolt12]

Also, could you explain why putting it in the chest is the best thing?  I would think that you'd want to delete it.

Sorry, I'm still getting used to the program.

[neal62]

Welcome to the forum. If you were to choose "delete" as you asked about it's possible that you might be deleting a file associated with the infection that your O.S. needs to operate correctly. That's one reason I know of and others here in the forum can possibly inform you of other reasons. It's not always a good idea to immediately choose delete until you find out what might happen with any associated files.

[DavidR]

Also, could you explain why putting it in the chest is the best thing?  I would think that you'd want to delete it.

Sorry, I'm still getting used to the program.

Hi, welcome to the forums.

It is about damage limitation whilst you confirm that it was a virus and your system runs ok with the file moved to the chest.

Applying a minimum force rule, you do the things least likely to harm your system but remove the virus.

This in my opinion would be Repair (not always possible, Trojans or VRDB not run for first time, etc.), Move to Chest (from the chest, the file can do no harm {you can seek advice here, etc.}, the file can be restored or deleted later as required), Move or Delete.

Once you have deleted the file you have no more options left (so don't take such drastic action without thought) unless you are able to get a program to recover deleted files (not always successful).

visit the User's FAQ thread, it will give you a lot of useful advice.

HTH David