Is there any forseeable problem with erasing a system restore point by erasing its folder using a file eraser? Using the online scanner from Computer Associates, I learned I had a trojan in an *.scr file in one of the folders of my C:\System Volume Information\ directory. The trojan is rare enough that no other antivirus sites had information on it (Win32.Rawbot.P).
I have plenty of other restore points to use. And I'm sure that if I just deleted (erased) the file that the restore point corresponding to that time and day would be corrupted, so it either wouldn't work or perhaps worse, trying to go back to a corrupted restore point. The file eraser app I'm using will make 35 passes over the data sectors to randomize them, which is definitely better than just trying to delete the trojan. Unfortunately, I don't know what changes if any it made in my registry. Computer Associates gave information on three Win32.Rawbot variants, including the registry keys they added when they infected a system, but it didn't have specific info on the variant that infected my machine. The restore point is about seven days old.
Any ideas?
I have plenty of other restore points to use. And I'm sure that if I just deleted (erased) the file that the restore point corresponding to that time and day would be corrupted, so it either wouldn't work or perhaps worse, trying to go back to a corrupted restore point. The file eraser app I'm using will make 35 passes over the data sectors to randomize them, which is definitely better than just trying to delete the trojan. Unfortunately, I don't know what changes if any it made in my registry. Computer Associates gave information on three Win32.Rawbot variants, including the registry keys they added when they infected a system, but it didn't have specific info on the variant that infected my machine. The restore point is about seven days old.
Any ideas?