Forum Home
Press F1
 
Thread ID: 50836 2004-11-03 04:59:00 Worm buchon - can't get rid of notification write-click (2248) Press F1
Post ID Timestamp Content User
287447 2004-11-03 04:59:00 My computer was infected with the Worm Buchon virus last week so after doing a backup I followed the instructions on Symantec's site to get rid of it. So far so good, but I keep getting the following message every now and then:
Virus
Virus identifies I-Worm/Buchon
Is found in file
C:\System Volume Information\_restore{43946224-96B8-49F4-B018-717501DD139E}\RP159\A0027080.exe
To remove this virus, please run AVG for Windows.
OK
I thought I had been reinfected so I did another backup, but when I went into the registry to remove the rogue file, it wasn't there. I am still getting the message advising me I have the virus though, despite updating my AVG.
Is this a problem, does it mean I still have the virus, or did I do something wrong when deleting it before? Any advice would be appreciated.
write-click (2248)
287448 2004-11-03 05:04:00 Disable system restore, then rescan with AVG. After it says its removed it (if it does), then turn system restore back on. f you want it. Did u turn system restore off the first time?? Spacemannz (808)
287449 2004-11-03 05:05:00 Have a look here (pressf1.pcworld.co.nz). Note that the page may be a little slow in loading. Susan B (19)
287450 2004-11-03 05:31:00 Thanks you two. I clicked on the link you gave me Susan and followed the instructions, although I had to go in through control panel, systems, system restore tab rather than right clicking on the my computer logo on the desktop (which I don't have!). I have disabled system restore and am running a scan using AVG. I did this last time but it said there were no viruses detected - that was while system restore was enabled though. If it doesn't detect anything now, is it okay to turn it back on? write-click (2248)
287451 2004-11-03 06:08:00 It should be OK to turn it back on. Scan again. See what happens tho Spacemannz (808)
287452 2004-11-03 06:15:00 > Thanks you two. I clicked on the link you gave me
> Susan and followed the instructions, although I had
> to go in through control panel, systems, system
> restore tab rather than right clicking on the my
> computer logo on the desktop (which I don't have!).
> I have disabled system restore
I hope at this point you have restarted computer to actually purge the restore points and therefore rid yourself of virus. Once restarted then run AVG again.
> and am running a scan
> using AVG. I did this last time but it said there
> were no viruses detected - that was while system
> restore was enabled though. If it doesn't detect
> anything now, is it okay to turn it back on?
sam m (517)
287453 2004-11-03 06:32:00 Thanks Sam, yes, I restarted the computer then ran a scan (it came up with nothing), then I enabled system restore again. No more messages so far, fingers crossed this has fixed it.

Thanks everyone for your help.
write-click (2248)
1