Re: DUMARU worm
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 02/22/04
- Next message: anonymous_at_discussions.microsoft.com: "DUMARU worm"
- Previous message: down on DUMARU worm: "DUMARU worm"
- In reply to: down on DUMARU worm: "DUMARU worm"
- Next in thread: anonymous_at_discussions.microsoft.com: "DUMARU worm"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 21 Feb 2004 20:18:55 -0500
Please read the following URL:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
The objective:
------------------
- Turn off the System Restore function
- Reboot the PC
- Using your AV package, perform a full scan of all files on the platform and clean/delete
infectors found
- Turn on the System Restore function, and re-apply any System Restore preferences,
e.g. HD space to use
- Reboot the PC
- Create a new System Restore point.
If you have problems, it can be done manually....
Use the WinME floppy boot disk and boot from drive "A:"
When you get to a DOS prompt enter the following command
attrib -r -s -h c:\_RESTORE
rename c:\_RESTORE c:\RESTORE.old
Reboot the PC.
In Windows delete the folder; c:\RESTORE.old
Please report back your results.
Dave
"down on DUMARU worm" <anonymous@discussions.microsoft.com> wrote in message
news:146b801c3f8de$e1664530$a401280a@phx.gbl...
| how do I get rid of this worm. It is in
| c:\_RESTORE\TEMP\A0085862.
|
| It wont let me delete it. Is there a way and if there is
| how.
|
| Really appreciate any help
|
| B
- Next message: anonymous_at_discussions.microsoft.com: "DUMARU worm"
- Previous message: down on DUMARU worm: "DUMARU worm"
- In reply to: down on DUMARU worm: "DUMARU worm"
- Next in thread: anonymous_at_discussions.microsoft.com: "DUMARU worm"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|