Worm/ Nachi

[Remove]

I battled with a worm the past week and ended up having to reinstall windows. There are no traces left of it except in the windows restore feature.

The file is located in c:\system volume information\_restore-{5927 etc, etc. I can bot acces the file through exploer even as administrator.

The worm is not active but my antivirus still finds it and shows the alert. How do I access or delet that restore file?

 

[KILLorBE]

I assume that you're running XP.

You have to turn off system restore
1) Click -->Start-->My Computer.
2) Click Properties.
3) Click System Restore Tab.
4) Turn System Restore off.
5) Click Apply.
6) Restart.
7) Run the AV app (And remove the Virus if it's still there).
8) Repeat steps 1 to 6, except that you turn System Restore on in step 4.

Hope that helped.

 

[Remove]

Seems to have worked. Thanks!