PC Review


Reply
Thread Tools Rate Thread

C:\System Volume Information = W32/Nachi.worm?

 
 
Sebas Santos
Guest
Posts: n/a
 
      30th Dec 2003
I have scanned my Hard Disks and MacAffee tels me that I
have a virus:
C:\System Volume Information\_restore{9624A49B-6459-42A5-
94C6-46613A8547C4}\RP56\A0015621.EXE is a virus
W32/Nachi.worm

I can't find that file or folder.
Can anyone tell me whee is it and what am I facing here?
(E-Mail Removed)

Thank you Sebas
 
Reply With Quote
 
 
 
 
Guest
Posts: n/a
 
      30th Dec 2003
Perhaps you should try "show hidden files and folders"
first. (You can do through windows explorer, Tools, Folder
options).


>-----Original Message-----
>I have scanned my Hard Disks and MacAffee tels me that I
>have a virus:
>C:\System Volume Information\_restore{9624A49B-6459-42A5-
>94C6-46613A8547C4}\RP56\A0015621.EXE is a virus
>W32/Nachi.worm
>
>I can't find that file or folder.
>Can anyone tell me whee is it and what am I facing here?
>(E-Mail Removed)
>
>Thank you Sebas
>.
>

 
Reply With Quote
 
=?Utf-8?B?VGhlIFdheg==?=
Guest
Posts: n/a
 
      30th Dec 2003
The worm is in the system restore where the antivirus can't remove it and you can't see the folder contents. Go to My computer, properties, system restore TAB and turn off system restore click OK to the message and it should blow away your worm. Turn system restore back on. Cheers and a happy New Year

----- (E-Mail Removed) wrote: -----

Perhaps you should try "show hidden files and folders"
first. (You can do through windows explorer, Tools, Folder
options).


>-----Original Message-----
>I have scanned my Hard Disks and MacAffee tels me that I
>have a virus:
>C:\System Volume Information\_restore{9624A49B-6459-42A5-
>94C6-46613A8547C4}\RP56\A0015621.EXE is a virus
>W32/Nachi.worm
>>I can't find that file or folder.

>Can anyone tell me whee is it and what am I facing here?
>(E-Mail Removed)
>>Thank you Sebas

>.
>

 
Reply With Quote
 
Will Denny
Guest
Posts: n/a
 
      30th Dec 2003
Hi Sebas

Right click on My Computer, select Properties and then the System Restore tab. Enable 'Turn off System Restore on all drives' and reboot your PC. After the reboot go back into System Restore and disable 'Turn off System Restore on all drives' and reboot again. After the second reboot System Restore will create a new Point for you and the virus would have been deleted.

--

Will Denny
MS-MVP Windows - Shell/User


"Sebas Santos" <(E-Mail Removed)> wrote in message news:090e01c3ced4$9eece620$(E-Mail Removed)...
> I have scanned my Hard Disks and MacAffee tels me that I
> have a virus:
> C:\System Volume Information\_restore{9624A49B-6459-42A5-
> 94C6-46613A8547C4}\RP56\A0015621.EXE is a virus
> W32/Nachi.worm
>
> I can't find that file or folder.
> Can anyone tell me whee is it and what am I facing here?
> (E-Mail Removed)
>
> Thank you Sebas



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.556 / Virus Database: 348 - Release Date: 26/12/2003
 
Reply With Quote
 
Bruce Chambers
Guest
Posts: n/a
 
      31st Dec 2003
Greetings --

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.

However, if you have Restore Points that you'd really rather not
lose, and know which one is corrupted, very carefully try this:

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default...b;EN-US;309531


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Sebas Santos" <(E-Mail Removed)> wrote in message
news:090e01c3ced4$9eece620$(E-Mail Removed)...
> I have scanned my Hard Disks and MacAffee tels me that I
> have a virus:
> C:\System Volume Information\_restore{9624A49B-6459-42A5-
> 94C6-46613A8547C4}\RP56\A0015621.EXE is a virus
> W32/Nachi.worm
>
> I can't find that file or folder.
> Can anyone tell me whee is it and what am I facing here?
> (E-Mail Removed)
>
> Thank you Sebas



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Nachi worm =?Utf-8?B?Q29uZnVzZWQ=?= Windows XP Security 0 11th Apr 2004 05:11 PM
nachi .b worm Tammie Elphick Windows XP Performance 2 17th Mar 2004 09:36 AM
nachi.b in system volume Sean Bartleet Anti-Virus 4 22nd Feb 2004 05:50 AM
System Volume Information = virus W32\Nachi.worm? Sebas Santos Windows XP Performance 2 30th Dec 2003 03:32 PM
nachi worm jbellemeg Windows XP General 2 10th Dec 2003 01:46 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:32 PM.