if i restore a file that has been quarantined will it still cause problems?

Question

ibm.00003.exe this is what im trying to restore. the reason i want to restore it is because i get a pop up saying the file cannot be found.im not a big computer wiz. restoring it is the only thing that i figure will stop the pop up error. Or is there a website that will allow me to download this file so that i will stop getting this error pop up

Answer 1

The file is a virus. You don't want to restore it.

The reason you're getting a popup is because your PC is trying to run the virus but it can't because the file was moved to quaranteen.

What you want to do is find out where the command is that is telling your PC to run this file and remove it so it doesn't try anymore. A common place a virus would put this is in the system registry. You could run the registry editor "regedit" (START - RUN - REGEDIT) and then do a search in there (EDIT - FIND) for "ibm.00003.exe" and remove any references to it. When it finds it - right-click and delete (the line on the right not the folder it's under) - then hit F3 to make it continue to search from where you left off.

Normally viruses put themselves under this registry key if you want to browse to it manually.

HKEY_LOCAL_MACHINE/SOFTWARE/MICROSOFT/WINDOWS/CURRENT VERSION/

And then check under all the folders that start with "RUN". Be careful in the registry though. NEVER delete anything if you don't know what you're doing. If you delete the wrong stuff your PC could stop working completely and require a reload of Windows.

If you have Windows XP another way to do this would be to run MSCONFIG (START - RUN - MSCONFIG). Then go to the STARTUP tab and look through the stuff in there for a reference to it. If you find anything uncheck it. This tab shows everything that loads when your PC boots - you may even want to uncheck some other things if you know what they are and do not want them to run. Doing that can speed up your PC, but do not disable things you're unsure of since that could cause something else to not work. The good thing is you can just go back and check the item off again if you feel you made a mistake.

Good luck.

Answer 2

I have Norton 2006. When it quarantined a file, I got the option of sending it on to Norton for examination. I later received notice that the file was not malicious so I restored it.

Personally, if the only reason you want to restore it is to stop the pop-up, I wouldn't do it. Didn't you get the option to have the file examined? It sounds like a harmless cookie, but I wouldn't take a chance. Check your antivirus program to see what you can do.

Answer 3

First try safemode and run a spyware program from safe mode (it usually catches a lot more stuff in safe mode). Update virus scanner ands try to clean. If you know the name of the trojan (from your virusscanner log) you can see if there is a tool to get rid of it. Otherwise to get your files off; if a desktop system, put your hard drive as a secondary harddrive in another computer 9that has a very good and up to date virusscanner) and copy the files off. Otherwise, boot your computer up with a linux on CD program (i.e. knoppix) and copy yoru files to an external drive.

Answer 4

The pop-up wants you to restore it so that the virus can continue.

Try these. They work and they are free:

Run the tool and then download the free spyware and virus protection programs:

Malicious virus removal tool:
http://www.microsoft.com/security/malwareremove/default.mspx

Ad-Aware Free download:
http://www.lavasoft.de/software/adaware/...

AVG Download free
http://free.grisoft.com/doc/1

Yahoo Toolbar has good pop-up blocker:
http://toolbar.yahoo.com/

Good Luck

Answer 5

Hello

I think it's a Trojan. Try the programs here http://www.sysopt.com/forum/showthread.php?t=161595
Don't restore it :-). What were you doing when you got the pop-up error?

Hmmm

Answer 6

Yes it will because it contained a virus was the reason for the quarantine.

Answer 7

If it was quarentined by your antiviris program, it is most likely a viris and can be harmful, anything in quarentine, I usually delete, why would you want to restore it, if its been quarentined. look that particular thing up before deleting, and see what it says about it.