View Single Post
Old 23-12-2003, 08:49   #21
abailey152
Inactive
 
abailey152's Avatar
 
Join Date: Nov 2003
Location: In hiding!
Services: 60Mb VM BB Sky+HD
Posts: 725
abailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant futureabailey152 has a brilliant future
Send a message via MSN to abailey152 Send a message via Yahoo to abailey152
Re: Should I be worried?

Quote:
Originally Posted by Xaccers
Should be sorted then.
Have you always had AVG installed?
You need to check your configuration as this virus somehow got through.
From what Jarandco has posted, I don't think it has "got through". It looks like AVG has nailed it as soon as it appeared on the drive, but it has been copied by System Restore when it was deleted.

I personally do not let my anti-virus check the System Volume Information folders. Yes, I know if there's something in there it may get back on if I do a system restore, but if I have something serious, I disable System Restore before deleting it.

I'd be more concerned about how the file got on in the first place. Worth monitoring I think.

If it does keep re-appearing, then....
Search HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run , HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Services, and HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run keys in the registry for anything strange. Look in your Start\All Programs\Startup folder for shortcuts which shouldn't be there.

Search your drive for DLL files which are tucked out of the way, with strange names. They may be innocent, but then again could be an indiciation of something installed (into IE for example).

Good Luck

NOTE: I've edited this response 3 times now.......I'm having a bad morning after the night before!
abailey152 is offline   Reply With Quote