nachi worm


Recommended Posts

i get this pop up everyday and run avg as instructed. avg doesn't find anything. all my defs are up to date. there is NO dir called system volume information, either.

any help is appreciated!

post-32-1063225341.jpg

Link to comment
Share on other sites

System Volume Information is a hidden system folder.

Information regarding the worm and how to remove it can be found HERE

Symantec also have a tool to remove it, which can be found HERE

Hope that helps

Link to comment
Share on other sites

i get this pop up everyday and run avg as instructed.  avg doesn't find anything.  all my defs are up to date.  there is NO dir called system volume information, either.

any help is appreciated!

Disable System Restore, then Enable it again. That'll clear out System Volume Information.

No Removal tool can access System Volume Information as its rights are only "SYSTEM" by default.

Turning off System Restore is the only way to clear it out.

Link to comment
Share on other sites

i turned off system restore, ran the fix, found no virus, restarted, ran the fix again, found no virus, and restarted...why was no virus found?

By disabling system restore, it cleared the virus out. When system restore is enabled; it gathers information and files and stores them on your hard drive. By disabling system restore, it deleted all the information in the folder, therefore deleting the file.

andymorum, you beat me to it :(

Link to comment
Share on other sites

i turned off system restore, ran the fix, found no virus, restarted, ran the fix again, found no virus, and restarted...why was no virus found?

You didn't need to run the fix, as I said before when you disable system restore all files in System Volume Information Get Deleted.

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.