CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

AVPE Detecting Worm

 
Post new topic   Reply to topic       All -> FavForums -> AntiVir Personal Edition Classic [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
ups4

Sergeant
Sergeant


Joined: Sep 12, 2004
Posts: 82
Location: Sunrise, FL

PostPosted: Wed Apr 20, 2005 12:50 am    Post subject: AVPE Detecting Worm
Reply with quote

The following alert was presented to me today and I was just wondering if anyone had ever seen it before. There have been 4 alerts so far today.

4/19/2005,6:56:24 WARNING: Contains signature of the worm Worm/SdBot.33280.6!
C:\SYSTEM VOLUME INFORMATION\_RESTORE{6AB549D7-ADA5-4B54-B53B-66BB9959800B}\RP62\A0016675.EXE

I have been just denying it access so far, but was wondering if I should just go ahead and have AVPE remove it.

Any thoughts?

Paul


_________________
...my get-up-and-go musta got up and went...
Back to top
View users profile Send private message Send email
mrrockford

News Admin
News Admin
AVPE Host
AVPE Host

Joined: Apr 24, 2004
Posts: 3010

Forums Admin MVP Premium Team F@H

PostPosted: Wed Apr 20, 2005 1:25 am    Post subject:
Reply with quote

Howdy,

You need to clear out your systems restore points, to do this you must be logged in as an Administrator. If you are not logged in as an Administrator, the System Restore tab will not be displayed. Also you need to be aware that turning off System Restore will clear out all previous restore points.

To turn off Windows XP System Restore:

NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.

1. Click Start.
2. Right-click the My Computer icon, and then click Properties.
3. Click the System Restore tab.
4. Check "Turn off System Restore" or "Turn off System Restore on all drives".
5. Click Apply.
6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
7. Click OK.
8. When you have finished, restart the computer and follow the instructions in the next section to turn on System Restore.

To turn on Windows XP System Restore:

1. Click Start.
2. Right-click My Computer, and then click Properties.
3. Click the System Restore tab.
4. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives."
5. Click Apply, and then click OK.
6. Scan with AVPE and report back to this thread with results.


_________________
"Anyone who considers protocol unimportant has never dealt with a cat."

L. Long
Back to top
View users profile Send private message Visit posters website
ups4

Sergeant
Sergeant


Joined: Sep 12, 2004
Posts: 82
Location: Sunrise, FL

PostPosted: Wed Apr 20, 2005 1:53 am    Post subject:
Reply with quote

Thanks mrrockford.
I suspected that is what needed to be done and was poised and ready to do so....but only after expert advice Very Happy.
I almost did it right away, but then thought..."what if this screws something up and I NEED a restore point?"
Anyway, thanks again.
I'll proceed as planned.

Paul


_________________
...my get-up-and-go musta got up and went...
Back to top
View users profile Send private message Send email
mrrockford

News Admin
News Admin
AVPE Host
AVPE Host

Joined: Apr 24, 2004
Posts: 3010

Forums Admin MVP Premium Team F@H

PostPosted: Wed Apr 20, 2005 5:38 am    Post subject:
Reply with quote

Howdy,

make sure to set a new restore point after clearing the old ones incase there are more problems that need to be taken care of.


_________________
"Anyone who considers protocol unimportant has never dealt with a cat."

L. Long
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> AntiVir Personal Edition Classic All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer