System 'Worm'?

[Guest]

The 'eTrust EZ antivirus' that we have loaded on our pc has identified a 'worm' in the following directory
C:\SystemVolumeInformation\Restore{CDE24C46-EC88-4BB8-AACB-EFBAF9A77EFO}\RP59\AOO12019,exe is WIN32 nachi, B worm
Can you advise firstly what a 'worm' is and secondly if this requires attention
Thanks

 

[Kaylene aka Taurarian]

Yes, it requires attention.

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
for information on the worm
http://www.symantec.com.au/avcenter/venc/data/w32.welchia.worm.removal.tool.html

How antivirus software and System Restore work together
http://support.microsoft.com/default.aspx?scid=kb;en-us;831829


Right click [My Computer] [Properties] then click on System Restore tab.
Put a check in the box for Disable Restore on all drives.
Click apply, then Reboot your PC.
After the system reboots, navigate to the System Restore tab and turn it back
on. Click apply.
Once System Restore has been turned back on, the computer needs to be rebooted
again so that System Restore can create a new point (although a manual point can
be created, by navigating to [System Tools] [Restore...] and choose [Create a
Restore Point] and then providing a name for the new restore point).
If you decide not to do the 2nd reboot this will result in the next Point being
created 'within the next 24 hours'.

Check your System Restore to see if the new restore point has been created.

The 'eTrust EZ antivirus' that we have loaded on our pc has identified a

'worm' in the following directory.C:\SystemVolumeInformation\Restore{CDE24C46-EC88-4BB8-AACB-EFBAF9A77EFO}\RP59\AO
O12019,exe is WIN32 nachi, B worm.

 

[Mike]

Was there no suggestion that you quarantine or delete the file?

The 'eTrust EZ antivirus' that we have loaded on our pc has identified a

'worm' in the following directory.C:\SystemVolumeInformation\Restore{CDE24C46-EC88-4BB8-AACB-EFBAF9A77EFO}\RP5
9\AOO12019,exe is WIN32 nachi, B worm.