PDA

View Full Version : Ive got a virus!!!help!!!



ggyy
09-08-2003, 06:42 PM
i currently have the virus/worm called "KwBot", and i need help trying to remove it

tweak\'e
09-08-2003, 06:49 PM
look here (http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.f.worm.html)

what problem are you having removing it?

DanielS
11-08-2003, 08:45 PM
I also have this virus.
I followed the instructions from that page, including the things I have to look for in the registry, but I can't find those files/processes.

The virus is located in C:\System Volume Information\_restore{BA87C268-4467-4D91-820E-22FDEE2390C0}\2P89\H0019953.exe

At least that's what the message says that keeps appearing from time to time. It also advises me to scan with AVG, but that doesn't seem to find the virus.

Does anyone know how I can get to that location?

thanks,

Jen C
11-08-2003, 09:14 PM
> The virus is located in C:\System Volume
> Information\_restore{BA87C268-4467-4D91-820E-22FDEE239
> C0}\2P89\H0019953.exe

> Does anyone know how I can get to that location?

You will need to disable System Restore so that the infected file can be purged. Note, you will lose all your saved Restore points, but this is the only way to remove the last trace of the virus.

After you have disabled System Restore, reboot and then rescan your PC. When you have the all clear you can re-enable System Restore again.