Win32 Fatso worm

Viruses and worms
1

I have been infected by win32 fatso worm and it keeps reappearing and also stops access to a number of antivirus sites and cleaners. It has also deleted the system restore tab in the system control panel (XP). I think system restore is still on but I can’t access it. I’m not sure what to do but it has clearly done all sorts of things and left things behind. How do I clean up my system? P.S. Avast detects the worm but I must have been infected on day 1 (7 March I understand).

Thanks for any help you can offer!

2

Hi, welcome to the forums.

In order to help fully we need more information…

  • What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
  • What was the virus name, what was the filename, where was it found
    example (C:\windows\system32\infected-filename.xxx)?
  • What actions have you taken to try and resolve the problem?

With XP you can schedule a boot-time scan from within avast!

3

Click on the link in my signature and follow the instructions in the malware removal section.

You can find more info about the worm HERE

4

HI
Thanks for replies. I have managed to get rid of most elements of virus with spyblaster etc but I still have system restore disabled. ie I cannot access system restore. I get the message that it is disabled “by group policy” and to contact my “domain administrator”. I have no idea what this means. No sytem restore tab in system info control panel. Avast is still detecting fatso in C:/ system volume information/_restore… I am running avast 4.6 Home on standalone PC with XP, build 4.6.603 and VPS file 0510-1. I’ve done a boot time scan but no difference. Main residual problem is to re-enable system restore. Any advice would be gratefully received!

Hector

5

Will this help?
How to Remove Files with Reserved Names in Windows XP