Link to home
Start Free TrialLog in
Avatar of lneilson
lneilson

asked on

MS defender detected it but couldn't remove it

Hi all

I just ran MS Defender and it found something,I checked remove all and it said action failed
but I should remove this immediatly:

C:\systemvolumeinformation\-restore{93E92BA8-09C7-4DE1-9B39-8FE34AC0FD1A}\RP390\A0029859.EXE->(WISE0009)

any ideas on what it is and how to get rid of it?

thanks

lneilson
ASKER CERTIFIED SOLUTION
Avatar of masnrock
masnrock
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What masnrock said should work - turning off System Restore pretty much deletes all the restore points. Running the scan again is a good idea to ensure complete cleansing of the virus/spyware from whatever "remnants" might exist of the Restore archives.

In my experience, Windows Defender has difficulty removing an infected file from an archive. Restore Points are archives, but there are other archives where you can open them (if you have the right software) and delete the problem file without deleting the entire archive, which might be something necessary or useful.