Sddrop worm

  • Thread starter Thread starter Peach
  • Start date Start date
P

Peach

My anti virus software recently detected the sddrop worm in a
downloaded file, (I use AVG free edition). It quarentined the culprit
file and then i deleted it but every time i switch my computer on i
get a message box from AVG saying it detects the sddrop worm in
c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.
 
Peach said:
My anti virus software recently detected the sddrop worm in a
downloaded file, (I use AVG free edition). It quarentined the culprit
file and then i deleted it but every time i switch my computer on i
get a message box from AVG saying it detects the sddrop worm in
c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.
Click to expand...

disable system restore and reboot... then (if you want to) re-enable
system restore...
 
My anti virus software recently detected the sddrop worm in a downloaded
file, (I use AVG free edition). It quarentined the culprit file and then
i deleted it but every time i switch my computer on i get a message box
from AVG saying it detects the sddrop worm in c:\system volume
information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
Can someone tell me if the worm is deleted from my computer or what
to do? Thanks in advance.
Click to expand...
The worm is in the "restore volume" where the OS will not permit access by
outside programs like AVG. You need to turn off "restore", reboot, run AVG
to clean the infection, then turn "restore" back on
 
#My anti virus software recently detected the sddrop worm in a
#downloaded file, (I use AVG free edition). It quarentined the culprit
#file and then i deleted it but every time i switch my computer on i
#get a message box from AVG saying it detects the sddrop worm in
#c:\system volume information\restore{9674fc41-f85c-4fao-bcda-30eea71e9028}\rp295\a0040875.exe.
# Can someone tell me if the worm is deleted from my computer or what
#to do? Thanks in advance.
#
Nope, it's still on your computer. You have to turn the system restore
off, then I'd run the AV program again, if it finds it then delete it,
then turn on system restore & make yourself a restore point. If for
some reason you'd have to restore your pc with that restore point it'll
come back.
 
Back
Top