• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

Worm/ Nachi

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

Remove

Member
Joined
Jun 14, 2003
I battled with a worm the past week and ended up having to reinstall windows. There are no traces left of it except in the windows restore feature.

The file is located in c:\system volume information\_restore-{5927 etc, etc. I can bot acces the file through exploer even as administrator.

The worm is not active but my antivirus still finds it and shows the alert. How do I access or delet that restore file?
 
I assume that you're running XP.

You have to turn off system restore
1) Click -->Start-->My Computer.
2) Click Properties.
3) Click System Restore Tab.
4) Turn System Restore off.
5) Click Apply.
6) Restart.
7) Run the AV app (And remove the Virus if it's still there).
8) Repeat steps 1 to 6, except that you turn System Restore on in step 4.

Hope that helped.
 
Back