Virus in System volume information

[fidelma]

unfortunately I have the worm lovsan A virus despite
having an up-to-date Virus Checker (AVG). sorted the
problem out however, I am now constantly getting the
following error message:

Virus identified worm/lovsan.A
has found a file
C:\System Volume Information\_restore{E5BC4411-4D20-4CEF-
973A-C775B69F5FDF}\RP1\A0000063.exe

To remove this virus run AVG for Windows.

I do but it says no virus found and I'm left with the
above. I have followed the XP instructions to see the
Sys Volume folder but cannot get into it. I'm running XP
for Home.

Thanks..x

 

[purplehaz]

Try turning off system restore and running the virus removal patch here:

Symantec: removal info and removal tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html


Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.

http://support.microsoft.com/?kbid=823980

http://www.microsoft.com/security/incident/blast.asp



If that doesn't help then purge your old restore points in disk cleanup
utility.

 

[Star]

unfortunately I have the worm lovsan A virus despite
having an up-to-date Virus Checker (AVG). sorted the
problem out however, I am now constantly getting the
following error message:

Virus identified worm/lovsan.A
has found a file
C:\System Volume Information\_restore{E5BC4411-4D20-4CEF-
973A-C775B69F5FDF}\RP1\A0000063.exe

To remove this virus run AVG for Windows.

I do but it says no virus found and I'm left with the
above. I have followed the XP instructions to see the
Sys Volume folder but cannot get into it. I'm running XP
for Home.

Thanks..x

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Star

 

[Alex Nichol]

unfortunately I have the worm lovsan A virus despite
having an up-to-date Virus Checker (AVG). sorted the
problem out however, I am now constantly getting the
following error message:

Virus identified worm/lovsan.A
has found a file
C:\System Volume Information\_restore{E5BC4411-4D20-4CEF-
973A-C775B69F5FDF}\RP1\A0000063.exe

To remove this virus run AVG for Windows.

I do but it says no virus found and I'm left with the
above.

That is where the system restore points are stored. It is in one (or
more) of them, but is no danger unless you restore to that point. To
deal with it, wait until a point has been made on the cleaned up machine
(check at Start - All Programs - Accessories - System Tools - System
Restore by going into Restore and checking out the calendar). Then run
Start - All Programs - Accessories - System Tools - Disk Cleanup and in
its More Options use the one to delete all but the most recent restore
point