W32/Sdbot.worm.gen

[Sarah Whitfield]

I keep getting this message from McAfee
C:\System Volume information\_restore {B762F5BE-DFD-40
Virus name: W32/Sdbot.worm.gen and that it can not be
cleaned and best thing is to delete the file. How do
you delete it and where is it. I can't find it.

Sarah

[David B.]

Easiest way is to turn off system restore, reboot, and then turn on system restore again, this will delete all the restore points.
Run a full scan to make sure the system is clean, then I would manually create a new restore point just in case you need it before
the system creates one.

--


----------------------------------------------------------------
"Sarah Whitfield" > wrote in message ...
> I keep getting this message from McAfee
> C:\System Volume information\_restore {B762F5BE-DFD-40
> Virus name: W32/Sdbot.worm.gen and that it can not be
> cleaned and best thing is to delete the file. How do
> you delete it and where is it. I can't find it.
>
> Sarah

[Ronnie Vernon MVP]

Sarah Whitfield wrote:
> I keep getting this message from McAfee
> C:\System Volume information\_restore {B762F5BE-DFD-40
> Virus name: W32/Sdbot.worm.gen and that it can not be
> cleaned and best thing is to delete the file. How do
> you delete it and where is it. I can't find it.
>

Sarah

The System Volume Information folder is where all of the restore points for
System Restore are stored. The best procedure is to delete all of these
files immediately. To do this, you need to turn the System Restore utility
off and then re-enable it.

Open Control Panel/System/System Restore tab. Place a check mark in the
"Turn off System Restore on all drives" option. Apply/OK. Exit Control
Panel. Now go back and re-enable that option. This will effectively remove
all of the SR files.

Go to Start/All Programs/Accessories/System Tools/System Restore. Select the
Create a Restore Point option and click the Next button. Follow the prompts.

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.