Help with a worm\spybot virus in my reg

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hey all, I keep getting a pop up from my AVG virus telling me I've got a worm\spybot in the following location..

J:\system volume information\_restore{F95E25D3-1723-4723-9574-923F695776AB}\RP208\A0019774.ex

I've been getting this pop up for a while. In talking with my roommate I believe what happened is it popped up as being in a made up folder on the new networked drive (J:) and my roomate deleted the folder, rather than running the anitvirus on it. Now it is stuck in my registries under system restore and I can't get at it there. AVG and The Cleaner can't seem to find it and delete it. AVG seems clearly capable of locating it to warn me it exists, but then when I run scans it fails to locate the virus and remove it. I've used regedit to locate the offending file and I deleted that (maybe a bad idea, but I was frustrated) but the warning keeps popping up and now when I search regedit for the above file, the search comes back empty. I've painted myself in a corner! DOH! Please reply to my email address if possible... (e-mail address removed)
 
The virus is in your system restore files, you will need to clear your restore
points

Right click [My Computer] [Properties] then click on System Restore tab.
Put a check in the box for Disable Restore on all drives.
Click apply, then Reboot your PC.
After the system reboots, navigate to the System Restore tab and turn it back
on. Click apply.
Once System Restore has been turned back on, the computer needs to be rebooted
again so that System Restore can create a new point (although a manual point can
be created, by navigating to [System Tools] [Restore...] and choose [Create a
Restore Point] and then providing a name for the new restore point).
If you decide not to do the 2nd reboot this will result in the next Point being
created 'within the next 24 hours'.
Check your System Restore to see if the new restore point has been created.

washingtron said:
Hey all, I keep getting a pop up from my AVG virus telling me I've got a
Click to expand...
worm\spybot in the following location...
J:\system volume information\_restore{F95E25D3-1723-4723-9574-923F695776AB}\RP208\A0019774.exe

I've been getting this pop up for a while. In talking with my roommate I
Click to expand...
believe what happened is it popped up as being in a made up folder on the new
networked drive (J:) and my roomate deleted the folder, rather than running the
anitvirus on it. Now it is stuck in my registries under system restore and I
can't get at it there. AVG and The Cleaner can't seem to find it and delete it.
AVG seems clearly capable of locating it to warn me it exists, but then when I
run scans it fails to locate the virus and remove it. I've used regedit to
locate the offending file and I deleted that (maybe a bad idea, but I was
frustrated) but the warning keeps popping up and now when I search regedit for
the above file, the search comes back empty. I've painted myself in a corner!
DOH! Please reply to my email address if possible... (e-mail address removed)
 
Back
Top