I asked a friend about this. First a couple questions -- Has the VM itself every been infected? Has there been a full scan within the VM?
If there hasn't been a full scan within the VM, I suggest doing that first to see if specific files can be found. However, if nothing is found, let's use the Disk Cleanup tool clear all but the most recent System Restore point.
First, create a fresh restore point:
1. Click Start, click All Programs, click Accessories, click System Tools, and then click System Restore.
2. Click Create a Restore Point, and then click Next.
3. Name your restore point. (i.e., clean)
4. Click the Create button.
5. When the new restore point has been created, click Close.
Now select the files to be removed as well as all but the new restore points:
- Click start-->Run and type cleanmgr into the run box and then click "OK".
- Select the drive where Windows is installed (if you have more than one drive) and click "OK".
- When the scan completes, check/uncheck desired boxes.
- Next, please click the More Options tab at the top.
- Click the "Clean up..." button under the System Restore section at the bottom.
- Answer Yes to the question "Are you sure you want to delete all but the most recent restore point?".
- Click OK and answer Yes again.
The disk clean up utility will remove the selected items. When it completes, please restart the computer to properly record the changes made to the hard disk.
Rescan and see if that solves the problem.
