Swen worm in restore file

[Grover]

My Norton Antivirus keeps flagging a file contaminated
with the Swen worm. It's a system restore file. For some
reason NAV cannot quarantine it. I have the filename but
cannot find it.

Is there a way to determine the file date from its
description? If I could figure out when the restore point
was contaminated, I could use an earlier date for a system
restoration.

Or does it matter at all, since the worm is in an archived
file and is not "live"?

Thanks

Grover

[T O M M Y]

The worm is not alive , but can be restored at any time. In your case
,
you have to immediately turn off system restore in all drives: Right
click My Computer> Properties> System Restore > Turn off system
restore in all drives>Apply.
This will permanently Delete the worm from your computer. Bear in mind
that choosing a previous system restore can not solve the problem
since the worm is still in restore files.

Good Luck
-----------------------------------------
"Grover" > wrote in message
...
> My Norton Antivirus keeps flagging a file contaminated
> with the Swen worm. It's a system restore file. For some
> reason NAV cannot quarantine it. I have the filename but
> cannot find it.
>
> Is there a way to determine the file date from its
> description? If I could figure out when the restore point
> was contaminated, I could use an earlier date for a system
> restoration.
>
> Or does it matter at all, since the worm is in an archived
> file and is not "live"?
>
> Thanks
>
> Grover

[Grover]

Thanks!

>-----Original Message-----
>The worm is not alive , but can be restored at any time.
In your case
>,
>you have to immediately turn off system restore in all
drives: Right
>click My Computer> Properties> System Restore > Turn off
system
>restore in all drives>Apply.
>This will permanently Delete the worm from your computer.
Bear in mind
>that choosing a previous system restore can not solve the
problem
>since the worm is still in restore files.
>
>Good Luck

[Bruce Chambers]

Greetings --

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, and
then re-enable System Restore, if you like. This will delete all of
your Restore Points, including the corrupted one(s), and allow you
start with a clean slate.

Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Grover" > wrote in message
...
> My Norton Antivirus keeps flagging a file contaminated
> with the Swen worm. It's a system restore file. For some
> reason NAV cannot quarantine it. I have the filename but
> cannot find it.
>
> Is there a way to determine the file date from its
> description? If I could figure out when the restore point
> was contaminated, I could use an earlier date for a system
> restoration.
>
> Or does it matter at all, since the worm is in an archived
> file and is not "live"?
>
> Thanks
>
> Grover