W32/sddrop.worm.c!p2p

[littlestevee]

Hi everyone,

I've been getting this message from Mcaffee several times daily...

C:\System Volume Information\_restore{DA0BF085-137D-4680-84CC-1FB83C514717}\RP80\A0008921.exe\A0008921.EXE

Virus name: W32/Sddrop.worm.c!p2p

the program gives options like...
Clean
Exclude
Quarintine

But none of them do anything! If I click "exclude" the box goes away and reappears later in the day or the next day for sure!

I have updated my **legal** copy of Mcafee and I scan for viruses regluarily but nothing comes up!

I am using Kazaa++.

[muchspl2]

maybe you need to get a new virus scanner that works? both are free trails for the pro versions and avg has a free version
http://www.grisoft.com
http://www.sophos.com


p.s. norton isn't any better, so stay away from it allso

[wormless]

mcafee is behind norton norton is great its the free ones u gotta worry about

[Mik3ll]

its because the file is in the system restore file, virus scanners cant modify, or delete the files, you will have to disable system restore

to disable system restore, go here http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

[Broken]

i've ran into this virus,
Mcafee just stopped the download and that was it.

[sparsely]

run cleanup, and delete all but the most recent system restore files.
or all of them.

[MUSLEMAN]

you guys are so funny turn system restore off then do a full scan boss

[razorsharp013]

Originally posted by MUSLEMAN@17 October 2003 - 02:43
you guys are so funny turn system restore off then do a full scan boss
:o http://www.mcbriens.net/liam/img/smilies/notworthy.gif

[MUSLEMAN]

Originally posted by razorsharp013+17 October 2003 - 03:48--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (razorsharp013 @ 17 October 2003 - 03:48)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-MUSLEMAN@17 October 2003 - 02:43
you guys are so funny turn system restore off then do a full scan boss
:o http://www.mcbriens.net/liam/img/smilies/notworthy.gif [/b][/quote]
no no its http://smilies.sofrayt.com/%5E/b0/pray.gif to paul balamm and dg_mortal http://smilies.sofrayt.com/%5E/b/smiley2k.gif

[Sparkle1984]

Originally posted by wormless@17 October 2003 - 05:31
mcafee is behind norton norton is great its the free ones u gotta worry about
Norton is made by Symantec, and I always thought that it was a completely separate company to McAfee ??&#33;
Yes Norton is good. :)

EDIT :It&#39;s OK now, I just misunderstood your post at first.

[littlestevee]

Thanks MM,
I turned off system restore.
Seems fine now.

[fkdup74]

if you need manual removal instructions, (you know, if your AV prog isnt removin the virus) go here (http://www.symantec.com) (and like muscle and all the others mentioned, dont forget to disable system restore before you restart)


oops, missed that last post :D
but check out the site anyway, it&#39;ll tell you what registry entries were modified and how to fix em (oh yeah...love the avatar.....can you blow her up a little? :D )


oh sh*t, that links to the home page, just click on &#39;security response&#39; and search for the virus, hope that helps if you still need it

[wormless]

Originally posted by Sparkle1984+18 October 2003 - 17:29--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Sparkle1984 @ 18 October 2003 - 17:29)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-wormless@17 October 2003 - 05:31
mcafee is behind norton norton is great its the free ones u gotta worry about
Norton is made by Symantec, and I always thought that it was a completely separate company to McAfee ??&#33;
Yes Norton is good. :)

EDIT :It&#39;s OK now, I just misunderstood your post at first. [/b][/quote]
ok no problem :D :)