There isn't one in Windows 2000. You said you thought your XP partition was infected. If there is a virus/worm in XP and you have "System Restore" enabled (in ME as well), you need to turn it off, scan/clean the infection & then re-enable system restore, otherwise you reinfect your own PC. 2K has no such animal. You can use ERUNT to back up your registry in 2K/XP/NT: http://home.t-online.de/home/lars.hederer/erunt/ The best protection is not to open any email from anyone you don't know and even then it is not unusual for someone to "spoof" someone else's address and send you spam/worm/virus with that address, even your very own. I've used AVG for 6 yrs. and never got a false positive.YMMV. Armando Computers make very fast, very accurate mistakes. -------On Sat, 14 Feb 2004 10:41:56 -0800 (PST), razviam@xxxxxxwrote: > > I tried the Trend Micro "housecall". It scanned all > partitions and said they > were clean. > > At least my "free" AVG antivirus found LOVESCAN - > thanks Housecall!. > > > Someone suggested I turn off restore to enable System > Volume Information folder > access. How do I do that in WIN2000? > > I checked Startup and Recovery on Advanced Options Tab > - but there is not much > there to uncheck. > > > > On Sat, 14 Feb 2004 02:03:28 -0500 (EST), FreeLists > Mailing List Manager wrote: > > > > > triadtechtalk Digest Fri, 13 Feb 2004 Volume: 05 > Issue: 037 > > > > In This Issue: > > [triadtechtalk] Re: Is this a virus > > [triadtechtalk] Re: Lovescan.A Virus > > [triadtechtalk] Re: Lovescan.A Virus > > [triadtechtalk] Re: Lovescan.A Virus > > [triadtechtalk] Re: Lovescan.A Virus > > > > > ---------------------------------------------------------------------- > > > > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx> > > Subject: [triadtechtalk] Re: Is this a virus > > Date: Fri, 13 Feb 2004 21:02:49 -0600 > > > > Could this have caused the problem I was having? > > CW shredder? I believe it has been fixed but when I > try to run update it > > freezes. > > Spybot also found common extensions hijack. I deleted > it. But kept the > > recovery. The mall ware was gone from > > spybot so I did recover. > > > > Read fourth post to know what I am talking about. > > > > > > > http://forums.net-integration.net/index.php?showtopic=9877&st=15 > > > > There was something simular that i-spyed is doing. > > Something about deleting all your blocked urls when > you get the update. > > I think it might have mentioned Script Sentry. Too > lazy to go back and read. > > That was on the i-spyed url > > though. > > > > > > > > Juanita > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system > (http://www.grisoft.com). > > Version: 6.0.588 / Virus Database: 372 - Release > Date: 2/13/04 > > > > > > > > ------------------------------ > > > > From: razviam@xxxxxxxxxx > > Subject: [triadtechtalk] Re: Lovescan.A Virus > > Date: Fri, 13 Feb 2004 19:52:05 -0800 (PST) > > > > try again! > > > > When I am on the XP partition of my partitoned drive > I get the following > > message. > > > > Lovescan.A Virus found in file > > > > F:\System Volume > Information\_restore{C653065-........\Rp13\A0014566.exe > > > > However when I boot the Win2000 partition, Windows > blocks access to this > > folder. Is there a way of removing the infected file > short of re-installing > > Windows? > > > > Arif > > > > ------------------------------ > > > > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx> > > Subject: [triadtechtalk] Re: Lovescan.A Virus > > Date: Fri, 13 Feb 2004 22:34:48 -0600 > > > > > > From: <razviam@xxxxxxxxxx> > > > > > > > > > > Lovescan.A Virus found in file > > > > > > ------------------------------------------------------------- > > All I found while searching was lovescan\msblaster. I > take it, that means one > > of the same. If so here is a repair > > tool. > > > > Juanita > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system > (http://www.grisoft.com). > > Version: 6.0.588 / Virus Database: 372 - Release > Date: 2/13/04 > > > > > > ------------------------------ > > > > From: "Juanita Kimble" <jkimble@xxxxxxxxxxx> > > Subject: [triadtechtalk] Re: Lovescan.A Virus > > Date: Fri, 13 Feb 2004 23:01:38 -0600 > > > > > > From: <razviam@xxxxxxxxxx> > > > > > Lovescan.A Virus found in file > > > > ________________________________________________ > > > > > > See here: Second item PC solutions.network > > > > > http://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&q=lovescan+%2B+msblaster > > > > > > > > And > > > > > > > > See here: To make sure you have it > > > > > http://pub9.ezboard.com/fcoolpcfrm7.showMessage?topicID=61.topic > > > > > > Juanita > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system > (http://www.grisoft.com). > > Version: 6.0.588 / Virus Database: 372 - Release > Date: 2/13/04 > > > > ------------------------------ > > > > From: avbsantos@xxxxxxxxxxxx > > Subject: [triadtechtalk] Re: Lovescan.A Virus > > Date: Fri, 13 Feb 2004 21:07:53 -0800 (PST) > > > > Try scanning your XP partition with an online > AV/Trojan > > scanner. > > > > Turn off system restore before you use any of these. > > The virus is in there also and will only result in it > > being reloaded. Just follow the instructions you > > receive. > > > > online scanners: > > Trend > > > http://housecall.antivirus.com/housecall/start_corp.asp > > > > Norton > > http://snurl.com/1jhs > > > > panda's online scanner: > > > http://www.pandasoftware.com/activescan/com/activescan_principal.htm > > > > Trojan > > http://housecall.trendmicro.com/ > > > > You know what infected you? Symantec's removal tools > > list : > > > http://securityresponse.symantec.com/avcenter/tools.list.html > > > > HTH, > > A. > > > > On Fri, 13 Feb 2004 19:52:05 -0800 (PST), > > razviam@xxxxxxxxxx wrote: > > > > > > > > try again! > > > > > > When I am on the XP partition of my partitoned > drive > > I > > > get the following > > > message. > > > > > > Lovescan.A Virus found in file > > > > > > F:\System Volume > > > > > > Information\_restore{C653065-........\Rp13\A0014566.exe > > > > > > However when I boot the Win2000 partition, Windows > > > blocks access to this > > > folder. Is there a way of removing the infected > file > > > short of re-installing > > > Windows? > > > > > > Arif > > > > ________________________________________________ > > PeoplePC: It's for people. And it's just smart. > > http://www.peoplepc.com > > > > ------------------------------ > > > > End of triadtechtalk Digest V5 #37 > > ********************************** > VIEW ARCHIVES @ //www.freelists.org > > UNSUBSCRIBE by sending email to > triadtechtalk-request@xxxxxxxxxxxxx with unsubscribe in > the Subject field. > > To VIEW/CHANGE your subscription status go to > //www.freelists.org/webpage/triadtechtalk > > Contact List Owner - dbcfour@xxxxxxx ________________________________________________ PeoplePC: It's for people. And it's just smart. http://www.peoplepc.com VIEW ARCHIVES @ //www.freelists.org UNSUBSCRIBE by sending email to triadtechtalk-request@xxxxxxxxxxxxx with unsubscribe in the Subject field. To VIEW/CHANGE your subscription status go to //www.freelists.org/webpage/triadtechtalk Contact List Owner - dbcfour@xxxxxxx