Re: Deleting "Software" file located on C:\WINDOWS\Repair\Software

JT,

Was your anti-virus sophos too?

Just to be safe, I am going to restore the files from backup tapes before
they were "infected".

Thanks.

"JT" wrote:


Several of my servers were 'infected' with ScriptDL however upon calling the
vendor I found this was a false positive. I did a quick stop and start of
the AV services and it seemed ok.

Unfortunately, my virus scanner was misconfigured and it deleted the
'software' file in the windows repair directory on some of the boxes.

Does anyone know how I could restore or rebuid this file? The files are no
longer on backup.

Thanks,

JT

"Laura E. Hunter [MVP]" wrote:

The files in this directory are used to perform a Repair installation of the
Windows operating system; they should not be deleted manually as you're
describing.

--
Laura E. Hunter
Microsoft MVP: Windows Server - Networking
Author: _Active Directory Consultant's Field Guide_
(http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_
(http://tinyurl.com/z7svl)

Responses provided as-is; no warranties expressed or implied
"tnt" <tnt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4B90334B-2A25-475D-BCC8-2E322840EA7A@xxxxxxxxxxxxxxxx
Laura,

Thanks for the reply.

I did use the anti-virus software interface to delete the file. I
rebooted
the ss

I thought the "software" file in this directory is used to repair the
registery.

Thanks,
Tnt

"Laura E. Hunter [MVP]" wrote:

Deleting this file will not remove any quarantined virus files, and will
have an adverse effect (to put it mildly) on the stability of your
servers.)

Your anti-virus software should provide you with an option to delete any
quarantined files using the anti-virus software interface; I wouldn't
recommend trying to delete anything manually.

HTH

--
Laura E. Hunter
Microsoft MVP: Windows Server - Networking
Author: _Active Directory Consultant's Field Guide_
(http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_
(http://tinyurl.com/z7svl)

Responses provided as-is; no warranties expressed or implied
"tnt" <tnt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6EE1FB21-B6E7-444D-BB15-3DCF57C7A5C5@xxxxxxxxxxxxxxxx

Hello,

Over the past holidays, some of my servers had been infected with
Troj/ScriptDl-A virus. They have been quarantine, but I like to delete
them.

Any consequences of removing the "software" file in this
C:\WINDOWS\Repair\Software directory"?

Thanks so much.
Tnt






.

Relevant Pages

  • Re: Deleting "Software" file located on C:WINDOWSRepairSoftware
    ... Several of my servers were 'infected' with ScriptDL however upon calling the ... Microsoft MVP: Windows Server - Networking ... Responses provided as-is; ... I did use the anti-virus software interface to delete the file. ...
    (microsoft.public.windows.server.general)
  • RE: Anti-Virus on web facing servers??
    ... Anti-Virus on web facing servers?? ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • Re: Long error message when opening documents
    ... Norton CE doesn't have the Office Plug-in option that is causing the ... > You may be encoutering this message because an anti-virus ... > the virus it has found. ... All major anti-virus software manufacturers have ...
    (microsoft.public.word.application.errors)
  • Re: Need for Office Update installation patch files
    ... This problem is most likely caused by a connection issue to one of our ... servers. ... Many times this can happen because a firewall or Anti-virus ...
    (microsoft.public.officeupdate)
  • RE: Long error message when opening documents
    ... > You may be encoutering this message because an anti-virus ... > the virus it has found. ... > virus software to the latest updates available from the ... All major anti-virus software manufacturers have ...
    (microsoft.public.word.application.errors)