Author Topic: Win32:RPCexploit & Win32:Nachi-B  (Read 3746 times)

0 Members and 1 Guest are viewing this topic.

erea

  • Guest
Win32:RPCexploit & Win32:Nachi-B
« on: March 20, 2004, 09:26:04 AM »
I am a fresh Avast HE user. I just have moved two of my infected files to quarantanne:
1. Win32: Nachi-B which concerns the file "A0001005.exe" in D;/System Volume Information/_restore{46F5C523-A8A7-4F71-91A3-F2E43AAA5CE8}/RP12
2. Win32:RPCexploit which concerns the file "user.dmp" in D:/Documents And Settings/All Users/Application Data/Microsoft/Dr Watson
What steps should I take next? Erase it?
Regards
Andrew

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:Win32:RPCexploit & Win32:Nachi-B
« Reply #1 on: March 21, 2004, 03:59:19 AM »
delete both files. and download all patches from microsoft for your version of windows
"People who are really serious about software should make their own hardware." - Alan Kay

whocares

  • Guest
Re:Win32:RPCexploit & Win32:Nachi-B
« Reply #2 on: March 21, 2004, 06:50:33 PM »
About the file in _restore:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

or:
Clean the rest of the PC first, then make a new restore point, then remove older restore points via disk Cleanup -> extended/advanced

further details via the board search above

 ;)