Win32:RPCexploit & Win32:Nachi-B

I am a fresh Avast HE user. I just have moved two of my infected files to quarantanne:

  1. Win32: Nachi-B which concerns the file “A0001005.exe” in D;/System Volume Information/_restore{46F5C523-A8A7-4F71-91A3-F2E43AAA5CE8}/RP12
  2. Win32:RPCexploit which concerns the file “user.dmp” in D:/Documents And Settings/All Users/Application Data/Microsoft/Dr Watson
    What steps should I take next? Erase it?
    Regards
    Andrew

delete both files. and download all patches from microsoft for your version of windows

About the file in _restore:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

or:
Clean the rest of the PC first, then make a new restore point, then remove older restore points via disk Cleanup → extended/advanced

further details via the board search above

:wink: