Sddrop worm

[Peach]

My anti virus software recently detected the sddrop worm in a
downloaded file, (I use AVG free edition). It quarentined the culprit
file and then i deleted it but every time i switch my computer on i
get a message box from AVG saying it detects the sddrop worm in
c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.

 

[kurt wismer]

My anti virus software recently detected the sddrop worm in a
downloaded file, (I use AVG free edition). It quarentined the culprit
file and then i deleted it but every time i switch my computer on i
get a message box from AVG saying it detects the sddrop worm in
c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.

disable system restore and reboot... then (if you want to) re-enable
system restore...

 

[Dan Shackelford]

My anti virus software recently detected the sddrop worm in a downloaded
file, (I use AVG free edition). It quarentined the culprit file and then
i deleted it but every time i switch my computer on i get a message box
from AVG saying it detects the sddrop worm in c:\system volume
information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.

The worm is in the "restore volume" where the OS will not permit access by
outside programs like AVG. You need to turn off "restore", reboot, run AVG
to clean the infection, then turn "restore" back on

 

[Geese_Hunter]

#My anti virus software recently detected the sddrop worm in a
#downloaded file, (I use AVG free edition). It quarentined the culprit
#file and then i deleted it but every time i switch my computer on i
#get a message box from AVG saying it detects the sddrop worm in
#c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
# Can someone tell me if the worm is deleted from my computer or what
#to do? Thanks in advance.
#
Nope, it's still on your computer. You have to turn the system restore
off, then I'd run the AV program again, if it finds it then delete it,
then turn on system restore & make yourself a restore point. If for
some reason you'd have to restore your pc with that restore point it'll
come back.