• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hi - had yet another false-positive from last nite's full-system SAS (this is the 2nd occurrence)   i sent  in the below to SAS asking if it was another 'false-positive...they just  replied it was yet another false-positive and to do another scan (did that already)

          ... BUT MY 'NEW' WORRY IS THAT  last nite after the scan was over in haste, when i went to 'quarantine' showing the below  i choose ''DELETE'  (OF WHAT was showing -SEE below) .......So...did i actually delete these files from MY COMPUTER by choosing ''delete'  !!!!    (REASON I ASK IS BECAUSE THERE IS THE OPTION TO DO A 'RESTORE'IN THE QUARANTINE AREA  !!!  THANKS IN ADVANCE - EDYTHE  (NIS 2012/ WIN XP )

Trojan.Agent/Gen-Virut
C:\WINDOWS\INSTALLER\{91120409-6000-11D3-8CFE-0150048383C9}\MISC.EXE
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\DIGITAL CERTIFICATE FOR VBA PROJECTS.LNK
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\MICROSOFT OFFICE 2003 LANGUAGE SETTINGS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\DIGITAL CERTIFICATE FOR VBA PROJECTS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\MICROSOFT OFFICE 2003 LANGUAGE SETTINGS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\WINDOWS\INSTALLER\{91120409-6000-11D3-8CFE-0150048383C9}\MISC.EXE

Adware.Tracking Cookie
core.saymedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\TUMXYXN8 ]

 

Replies

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hi - had yet another false-positive from last nite's full-system SAS (this is the 2nd occurrence)   i sent  in the below to SAS asking if it was another 'false-positive...they just  replied it was yet another false-positive and to do another scan (did that already)

          ... BUT MY 'NEW' WORRY IS THAT  last nite after the scan was over in haste, when i went to 'quarantine' showing the below  i choose ''DELETE'  (OF WHAT was showing -SEE below) .......So...did i actually delete these files from MY COMPUTER by choosing ''delete'  !!!!    (REASON I ASK IS BECAUSE THERE IS THE OPTION TO DO A 'RESTORE'IN THE QUARANTINE AREA  !!!  THANKS IN ADVANCE - EDYTHE  (NIS 2012/ WIN XP )

Trojan.Agent/Gen-Virut
C:\WINDOWS\INSTALLER\{91120409-6000-11D3-8CFE-0150048383C9}\MISC.EXE
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\DIGITAL CERTIFICATE FOR VBA PROJECTS.LNK
C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\MICROSOFT OFFICE 2003 LANGUAGE SETTINGS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\DIGITAL CERTIFICATE FOR VBA PROJECTS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\MICROSOFT OFFICE\MICROSOFT OFFICE TOOLS\MICROSOFT OFFICE 2003 LANGUAGE SETTINGS.LNK
C:\MY BACKUP -- 08-07-22 0630AM\WINDOWS\INSTALLER\{91120409-6000-11D3-8CFE-0150048383C9}\MISC.EXE

Adware.Tracking Cookie
core.saymedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\TUMXYXN8 ]

 
Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Was this a Norton scan?

If you delete it from quarantine, it will no longer exist on your computer.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hello EDYTHE

This is actually a question you should ask SAS since this was a scan that program did. Usually, if you delete something from quarantine, that deletes the files from your computer. Clicking restore, would have put the files back into your computer.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

i realize this is the Norton forum and i have NIS 2012 and in the past  i've seen recommendations on 'this' board for SAS and felt if others with NIS also have SAS it wouldn't hurt to mention the situation.

             Regarding the ''restore'' button i understood how that would work but the 'repair' button was 'blanked-out' so i thought that meant i best get rid of the infected material and 'not' choose ''restore'' - i thought 'delete' meant to 'delete' the virus !!!  didn't realize it would actually delete the program that was 'allegedly' infected. (**see below)     

              I posted the 'results' of the scan here with the hopes someone could tell me 'what' i lost .  I see references to Microsoft Office - i never have and never will use that program and if that's 'all' that was lost then i don't care.   My computer is performing and all other programs are working.   

             ** Apparently with a 'false-positive' it may be that the company is aware of it and therefore greys-out the 'clean' option? - whatever - i did write into their CS and found out it was indeed a 'false-positive' ....this not being the first time i've gotten a ''false-positivie' ....but they seemed to 'brush-off' the incident with the helpful advice to reinstall what was deleted...nothing more, nothing less, no suggestion where one could actually 'learn' for the future when said situation would again arise.  

           much apprecaite your suggestion  that i post on their SAS's  but frankly i feel there are very good people on this board willing to help and quite knowledgable of 'more' than just NIS  and being a customer of NIS that the company wouldn't mind helping me.    ;)

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!


peterweb wrote:

Was this a Norton scan?

If you delete it from quarantine, it will no longer exist on your computer.


See reply just posted.  

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hello EDYTHE

If your computer is working ok since then and you have no use for Office, then I would assume everything is ok. Yes, it is helpful for you to tell us about what happened to you since we do recommend often the use of SAS here in the Forum. Thanks for your contribution and thanks for reading.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!


floplot wrote:

Hello EDYTHE

If your computer is working ok since then and you have no use for Office, then I would assume everything is ok. Yes, it is helpful for you to tell us about what happened to you since we do recommend often the use of SAS here in the Forum. Thanks for your contribution and thanks for reading.


Hello - yes all seems fine - but it was an eye-opener for a computer non-guru like me !!!  i've learned that 'delete' from quarantine means the PROGRAM (!) is taken out of the hard drive along with the virus !!! 

               i hate to think that if  'false-positive' had shown for my email program, for example...because  i really thought i was just  getting rid the VIRUS and NOT the ENTIRE PROGRAM!!

              If my experience helps other Norton users who could also get in trouble from lack of knowledge (thru no fault of theirs)  of these programs  but  who also suffer from 'run-away-fingers-on-keyboard syndrome '  like me, then maybe my experience will save someone else from clicking on the wrong button  !!    best wishes -

Kudos1 Stats

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hi EDYTHE,

Let's see if I undestand exactl wht you are asking.  You selected delete after the scan was finished which put the entires in Quarantine.  They were not deleted from your system - as they are held in quarantine until such time as you physically go nito quarantine and delete them.

See the screenshots below:  first shows the main page of SAS and where  Manage Quaratine is located.

Clciking on it wil display the the second screen shot and if you read the4 text - it ispretty clear the delete after the scan places the files in quaranitine and if you go into Manage Quarantine, select entires and then hit Delete - the files will be removed from yuor system and naturally no longer be available to restore.

Well, that isn't the clearest screenshot...so above the image in the lst screenshot it says:

The quarantine contains potentially harmful items that were detected and identified as items to be removed (deleted) from your computer. Click the Manage Quarantine.. button and a screen similar to the following will be displayed

 ....and below the screenshot it says:

Restore

If you wish to restore a file or entire quarantine, highlight the item you wish to restore and click Restore...

Remove

If you wish to remove (delete) a file or entire quarantine, highlight the item you wish to remove and click Remove... Once an item is removed (deleted) from the quarantine, it cannot be restored.

I hope that answers your question.

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

I see EDYTHEposted while I was typling my last response.  In actuality unless you went into Quarantine and check marked the program and then selected Remove - the program should still be in Quarantine and capable of being restored.

Kudos1 Stats

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

For what it's worth, the folks at Piriform who are the creators of CCleaner have a free application named Recuva that can sometimes recover deleted files.

http://www.piriform.com/recuva

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hi Yank -

       thanks for sending the information & screen shots - that was very kind of you !!

             - i think in my ignorence i hit 'delete' after the scan and then for the same reason found myself in Quarantine and then hit 'remove' thinking i was removing just the virus.....

         i just now went  quarantine and that program is GONE WITH THE WIND ! 

            i think the operative word ''Item' is too 'vague' within in the notice ..... ''item''cannot be restored once hitting ''remove'' (once at 'quarantine) ....perhaps for computer novices the term/warning ... 'program cannot be restored'..... might be more of a 'red-light'  and cause one to think twice before making that awful 'move' i did .  

          Just a thought -   thanks again for your help !  Edythe

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!


1mcrtd wrote:

For what it's worth, the folks at Piriform who are the creators of CCleaner have a free application named Recuva that can sometimes recover deleted files.

http://www.piriform.com/recuva


thanks for this !    :)  (for the future) 

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

Hello EDYTHE

I would also like to point out that Yank's screenshots are from the Paid version of SAS. We usually recommend the free version of the program also.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!


floplot wrote:

Hello EDYTHE

I would also like to point out that Yank's screenshots are from the Paid version of SAS. We usually recommend the free version of the program also.


Actually Flo - you are correct - but it was handy via Goggle and supplied answers in regards to Quaratine.  Sorry if I mislead anyone!

Kudos2 Stats

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!

It looks to me like no programs were removed, only a couple of their entries in the Start Menu.  Also, it looks like the backups in C:\MYBACKUP were also removed - that is a good lesson in why backups should be stored on external media (an unconnected external harddrive or online) rather than on the same drive as the original files.

Kudos0

Re: DID I DELETE THESE FILES FROM MY COMPUTER !!! HELP !!


SendOfJive wrote:

It looks to me like no programs were removed, only a couple of their entries in the Start Menu.  Also, it looks like the backups in C:\MYBACKUP were also removed - that is a good lesson in why backups should be stored on external media (an unconnected external harddrive or online) rather than on the same drive as the original files.


if they were only removed from Startup then i don't mind ( i wouldn't care 'if' the actual programs were removed since i don't use them and never will )... if they are removed removed from 'startup' then does that mean that 'loading' from a cold-boot should be 'faster' ?     for the future how do you 'transer a copy' to an 'external Hd or 'on-line' ?  thanks in advance for everyone's help here !!!  Edythe

ps:  is there a way i could do a 'search' to see if those two backup exe files are really gone ?  thanks !

This thread is closed from further comment. Please visit the forum to start a new thread.