Computing.Net > Forums > Security and Virus > Lovsan virus in XP

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Lovsan virus in XP

Reply to Message Icon

Name: Theo
Date: November 17, 2003 at 12:19:34 Pacific
OS: XP home
CPU/Ram: 2.0/256meg
Comment:

My son's home computer has been infected with the Lovsan virus some weeks back. The machine was scanned with AVG and the infected files were found and dealt with. The patch was downloaded from MS and installed.

However, there are persistant reports that pop up on the screen every half hour or so from AVG that the virus remains in the System Volume Information folder in an executable file with a string of about thirty numbers and letters in its name.

I have run AVG a number of times in tests pointed at this folder but it comes up stating there is no virus.

I cannot access this file in either command prompt mode or through Windows Explorer as it simply states access denied. As the format is NTFS I am unable to access the system through a DOS boot disk.

Has anyone any ideas how I can eliminate this file or otherwise prevent AVG from reporting this apparently non-existent virus.

Regards,

Theo



Sponsored Link
Ads by Google

Response Number 1
Name: Tom41
Date: November 17, 2003 at 12:48:27 Pacific
Reply:

Disable system restore, reboot, enable system restore and reboot. Here's how:

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

Once you have re-enabled system restore create a new restore point:

To create a restore point:

Click Start > All Programs > Accessories > System Tools > System Restore.

In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.
Type a description for your new restore point. Something like "Before I installed some program that may cause my system major grief" would do just fine, but you don't have to be that descriptive.
Click Create.


0

Response Number 2
Name: blender
Date: November 17, 2003 at 12:52:24 Pacific
Reply:

System Volume Information folder is your system restore.
Windows locks out that folder from any programs modifying it including antivirus programs but windows backed up the virus.
Avg would detect the virus every time windows is doing anything with restore folder..ie: doing backups but since windows locks out that folder antivirus cannot remove it.
You will need to turn off system restore and turn it back on again to remove all your restore points and the virus.
To do...right click on "my computer"
Click properties
Click system restore
Checkmark turn off system restore on all drives
Click yes to the are you sure prompt
Reboot machine
Turn on system restore again by reversing above steps.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Auto protect NAV-done all... Getting rid of Startium T...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Lovsan virus in XP

CIH.damaged virus in XP www.computing.net/answers/security/cihdamaged-virus-in-xp/10722.html

I got a virus in setup www.computing.net/answers/security/i-got-a-virus-in-setup/1953.html

possible virus in Win XP.advice plz www.computing.net/answers/security/possible-virus-in-win-xpadvice-plz/15765.html