Re: bugbear.worm
From: AnnaLee (acasteneda@hotmail.com)
Date: 12/09/02
- Next message: Gary Macy: "MMC 2.0"
- Previous message: Avro: "password shared files"
- In reply to: AlanP: "bugbear.worm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "AnnaLee" <acasteneda@hotmail.com> Date: Mon, 9 Dec 2002 16:37:26 -0500
"AlanP" <info@portfairygolf.com.au> wrote in message
news:025f01c29d21$82a26e80$8af82ecf@TK2MSFTNGXA03...
> I am getting a message:
> C:/System Volume Information\_restore {B4615533-10EO-4722-
> AF58-80408E3293E6}\RP205\Aoo32979.exe is
> Win32.Bugbear.worm
> I have a virus program "Vet"
> I need to know haow to get rid of this
>
"AlanP" <info@portfairygolf.com.au> wrote in message
news:025f01c29d21$82a26e80$8af82ecf@TK2MSFTNGXA03...
> I am getting a message:
> C:/System Volume Information\_restore {B4615533-10EO-4722-
> AF58-80408E3293E6}\RP205\Aoo32979.exe is
> Win32.Bugbear.worm
> I have a virus program "Vet"
> I need to know haow to get rid of this
>
Hello Alan,
I had the same problem as you; I had the Bugbear (and a program called
"Rabbit") in my C/system/restore. I posted this problem to
microsoft.public.windowsxp.general some time back. I thought the replies to
my post might assist you because it is going to take further steps to remove
the "tainted" files in C/system/restore. You will have to disable system
restore for a short time to get rid of all the bad files. Oh, and by the
way, this is for Windows XP. Below are two posts which assisted me in
getting rid of the virus.
Good luck,
ALC
Try this...
I believe you have 'System Restore' enabled and the
infected files are being found in your 'System Restore'
archives which are read-only. To allow your virus
scanning software to delete them you have to disable the
System Restore function temporarily. I believe you are
running Windows XP, judging from your comments. After
the virus scanning software deletes the files, you can re-
enable the System Restore.
1. Right click the My Computer icon on the Desktop and
click on Properties.
2. Click on the System Restore tab.
3. Put a check mark next to 'Turn off System Restore on
All Drives'.
4. Click the 'OK' button.
5. You will be prompted to restart the computer. Click
Yes.
the location of the file is in
> the System Restore backup folders. To purge the SR folders
> do the following and any resident virus will also be
> purged:
>
> 1) Right-click My Computer on Descktop and select
> Properties.
> 2) Select the System Restore tab.
> 3) Disable System Restore and Apply changes.
> 4) Most of the files should now be deleted. (If not re-
> boot the machine)
> 5) Re-enable System Restore by following the first 2 steps
> above.
>
- Next message: Gary Macy: "MMC 2.0"
- Previous message: Avro: "password shared files"
- In reply to: AlanP: "bugbear.worm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
