Windows

General discussion

Gravatar
Locked

Removal of 1- Worm/Dumaru.A Virus

By dzhray ·
Removal of 1- Worm/Dumaru.A Virus

I am currently stuck with the 1- Worm/Dumaru .A virus which invaded my PC on the 29th of September, 2003. Fortunately, I have the free edition of AVG and the virus was detected then healed. However, I am left with an empty file on the C drive labled as System Volume Information, zero bytes. Everytime I try to access this file to delete it I get an error message that say "Access Denied". I contaced the MS Web site but cannot get anywhere. My system is a PIV 128Mb 20HD w/MS XP Home edition and XP Pro software. I need to clean this PC. Can you tell me what to do with regards to making changes in the registry key. According to Micro Soft's Technical bulletin, it suggest that I find Enable Opportunistic Locks in the registry key but I am unable to locate this when I look there.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
+ Follow this Discussion ·
| Thread display: Collapse - | Expand +

All Comments

gravatar
Collapse -

by angela.brown2 In reply to Removal of 1- Worm/Dumaru ...

Try going to the following link and downloading the Dumaru removal tool.

http://www.symantec.com/avcenter/FxDumaru.exe

gravatar
Collapse -

by dmiles In reply to Removal of 1- Worm/Dumaru ...

Removal using the W32.Dumaru@mm Removal Tool
Symantec Security Response has developed a removal tool to clean the infections of W32.Dumaru@mm. This is the easiest way to remove this threat and should be tried first. To obtain the W32.Dumaru@mm removal tool, read the document, "W32.Dumaru@mm Removal Tool."

gravatar
Collapse -

by Joseph Moore In reply to Removal of 1- Worm/Dumaru ...

Umm, the System Volume Information folder is where XP holds the files for its System Restore function.

Read this page on changing the security permissions on this folder.

Anyway, once you change the security, you will see a Restore folder under System Volume Information, and then folders under that one. That is where the Restore Points are saved.

If the antivirus program detects that the virus is in one of those subfolders, it is OK to delete the folder. It won't hurt System Restore.

hope this helps

gravatar
Collapse -

by bigkenny In reply to Removal of 1- Worm/Dumaru ...

goto symantec download the fix tool
disable system restore
restart pc in safe mode
run the tool

Back to Windows Forum
4 total posts (Page 1 of 1)  

Start or search

Related Forums