W32/sddrop.worm.c!p2p

Printable View

10-17-2003, 05:09 AM
littlestevee

Hi everyone,

I've been getting this message from Mcaffee several times daily...

C:\System Volume Information\_restore{DA0BF085-137D-4680-84CC-1FB83C514717}\RP80\A0008921.exe\A0008921.EXE

Virus name: W32/Sddrop.worm.c!p2p

the program gives options like...
Clean
Exclude
Quarintine

But none of them do anything! If I click "exclude" the box goes away and reappears later in the day or the next day for sure!

I have updated my **legal** copy of Mcafee and I scan for viruses regluarily but nothing comes up!

I am using Kazaa++.
10-17-2003, 05:19 AM
muchspl2

maybe you need to get a new virus scanner that works? both are free trails for the pro versions and avg has a free version
http://www.grisoft.com
http://www.sophos.com

p.s. norton isn't any better, so stay away from it allso
10-17-2003, 05:31 AM
wormless

mcafee is behind norton norton is great its the free ones u gotta worry about
10-17-2003, 05:32 AM
Mik3ll

its because the file is in the system restore file, virus scanners cant modify, or delete the files, you will have to disable system restore

to disable system restore, go here http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
10-17-2003, 05:36 AM
Broken

i've ran into this virus,
Mcafee just stopped the download and that was it.
10-17-2003, 05:40 AM
sparsely

run cleanup, and delete all but the most recent system restore files.
or all of them.
10-17-2003, 07:43 AM
MUSLEMAN

you guys are so funny turn system restore off then do a full scan boss
10-17-2003, 07:48 AM
razorsharp013

Quote:

Originally posted by MUSLEMAN@17 October 2003 - 02:43
you guys are so funny turn system restore off then do a full scan boss

:o http://www.mcbriens.net/liam/img/smilies/notworthy.gif
10-17-2003, 07:51 AM
MUSLEMAN

Quote:

Originally posted by razorsharp013+17 October 2003 - 03:48--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (razorsharp013 @ 17 October 2003 - 03:48)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-MUSLEMAN@17 October 2003 - 02:43
you guys are so funny turn system restore off then do a full scan boss

:o http://www.mcbriens.net/liam/img/smilies/notworthy.gif [/b][/quote]
no no its http://smilies.sofrayt.com/%5E/b0/pray.gif to paul balamm and dg_mortal http://smilies.sofrayt.com/%5E/b/smiley2k.gif
10-18-2003, 05:29 PM
Sparkle1984

Quote:

Originally posted by wormless@17 October 2003 - 05:31
mcafee is behind norton norton is great its the free ones u gotta worry about

Norton is made by Symantec, and I always thought that it was a completely separate company to McAfee ??!
Yes Norton is good. :)

EDIT :It's OK now, I just misunderstood your post at first.
10-18-2003, 05:43 PM
littlestevee

Thanks MM,
I turned off system restore.
Seems fine now.
10-18-2003, 05:46 PM
fkdup74

if you need manual removal instructions, (you know, if your AV prog isnt removin the virus) go here (and like muscle and all the others mentioned, dont forget to disable system restore before you restart)

oops, missed that last post :D
but check out the site anyway, it'll tell you what registry entries were modified and how to fix em (oh yeah...love the avatar.....can you blow her up a little? :D )

oh sh*t, that links to the home page, just click on 'security response' and search for the virus, hope that helps if you still need it
10-18-2003, 06:06 PM
wormless

Quote:

Originally posted by Sparkle1984+18 October 2003 - 17:29--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Sparkle1984 @ 18 October 2003 - 17:29)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-wormless@17 October 2003 - 05:31
mcafee is behind norton norton is great its the free ones u gotta worry about

Norton is made by Symantec, and I always thought that it was a completely separate company to McAfee ??!
Yes Norton is good. :)

EDIT :It's OK now, I just misunderstood your post at first. [/b][/quote]
ok no problem :D :)