Posts: 2,771
Threads: 96
Joined: Oct 2003
Everytime I start up my computer, or leave it for a while, my Virus scanner tells me it has detected "Tumbi.worm" (im using Mcafee)
It cant clean the file
It cant delete the file
It cant quarintine the file
It can only "exclude" the file
After I have chosen the option, it may come back up again, up to 3 times!
I am using Zone Alarm, although I only installed it earlier today.
Is my computer secure?
Is Tumbi.worm reinfesting via the internet, or is "excluding" the file not actually doing anything to it, and so it just keeps reappearing?
How can I stop it coming back?
Any help would be MUCH appreciated...
ARG!
Posts: 6,419
Threads: 74
Joined: Mar 2002
Have you attempted to manually delete the file?
Posts: 383
Threads: 14
Joined: Mar 2004
I had the same thing, my pc broke down yesterday....
Posts: 3,522
Threads: 189
Joined: Dec 2003
Exclude means: ignore.
If you are on win9x or able to boot into pure dos, then do so, and remove it from there.
Try uing a boot disk... anything that DOES NOT execute the registers or autostart files on your computer.
Posts: 864
Threads: 13
Joined: Oct 2003
You can try what Symantec suggests here:
http://securityresponse.symantec.com/avc....worm.html
Check and see if the process is running and that may be the reason why it wont clean or delete the file.
igitalblackie.com - Done!
Ask about our hosting
-Goddess of the of the No More Religion Threads movement
Posts: 2,771
Threads: 96
Joined: Oct 2003
Quote:Have you attempted to manually delete the file?
Considering the file is located in:
"C:\System Volume Information\_restore{132B1CCD-EE3D-43BF-A3F3-0A5DADB831F5}\RP222\A0057272.exe\A0057272.EXE"
I dont think so... "C:\System volume information" is not a visible part of C:\ I dont think...
Rhia: thanks I'll try that.
Posts: 864
Threads: 13
Joined: Oct 2003
Quote:na_th_an Wrote:Have you attempted to manually delete the file?
Considering the file is located in:
"C:\System Volume Information\_restore{132B1CCD-EE3D-43BF-A3F3-0A5DADB831F5}\RP222\A0057272.exe\A0057272.EXE"
I dont think so... "C:\System volume information" is not a visible part of C:\ I dont think...
Rhia: thanks I'll try that.
That's System restore. Clear the save points that Winxp created.
igitalblackie.com - Done!
Ask about our hosting
-Goddess of the of the No More Religion Threads movement
Posts: 2,771
Threads: 96
Joined: Oct 2003
Thankyou!!! I thought this might be the case, because The symantec website was talking about the deactivating system restore... Will delete when i get home! ^_^
