How do I get rid of a LovSan.A Worm?

I have the LoveSan.A worm on my computer. I have run my updated av program, downloaded the patch, downloaded the fixit file and ran it. The runs all say my computer is clean now, but my av program keeps posting that the worm was detected in "C:\SystemVolumeInformation\_restore......" file. What's going on and how can I fix it for good?
Brian, October 2003


done
I too experienced the same problem - running my anti virus software - being informed that my computer was clean - and then every so often this irritating pop-up box generated by said software telling me that I had the lovesan.a worm in a file in C:\System Volume Information\_restore...(etc.).... Advice I picked up from another site suggested turning off 'system restore' temporarily by right clicking on 'my computer', going into properties then into 'system restore' and turning it off. I then ran my AVG virus software. After this I turned System Restore back on!!! (very important as by switching it off all restore points are deleted and no new ones created). So far so good - I appear to have got rid of it.

Jacqui M., March 2004
Brian you are doing all the right things. Try deleting the infected file in "C:\SystemVolumeInformation\_restore......" Make sure that you empty your Dustbin as well.

(To get to "C:\SystemVolumeInformation\_restore......" you will have to make this folder visible. It is hidden by default. In Explorer select Tools > Folder Options > View Tab. Un-check Hide Protected Operating System Files. Okay)

Try running the FixIt File in Safe Mode. It may pick up the virus in this mode. (To select Safe Mode do the following. As your machine starts, as soon as the BIOS stuff is done, hit F8 and select Safe Safe Mode.)

Kev, October 2003