Re: System Volume Information folder

Hi Chris,

"cquirke (MVP Windows shell/user)" wrote
How much disk space is System Restore set to use?

Encrypting File System (EFS) also uses the System Volume Information
folder on each partition to store the log file that is generated
during
the encryption and decryption process.

Is there a risk of clearing SVI, if EFS is in use?

I haven't considered this and haven't tested it. Saying that, the best
practice would be to disable SR or use Disk Clean-up to purge restore
points rather than deleting the contents of the SVI folder.

Zone Alarm version 6.5 has a bug that creates very large .rdb files
within the system. These .rdb files are monitored by System Restore
and
thus end up in the restore points located in the System Volume
Information folder, along with other locations on the system. The best
advise is to revert to an earlier version of Zone Alarm. Then disable
System Restore which will purge all existing restore points, then turn
it back on. For more information on this subject please visit the Zone
Labs User Forum.

http://forum.zonelabs.org/zonelabs/board/message?board.id=gen&message.id=34871

You can also purge all but the last Restore Point, as follows:
- Windows Explorer, right-click disk letter (e.g. C:)
- click Disk Cleanup, then More Options tab
- click the lowermost button to c1lear all but last SR point
- OK

This is a good thing to do after cleaning up malware; once clean, set
a new restore point and use this to discard earlier infected ones.

Agreed.

How are you measuring contents of SVI? I ask, in case you are
assuming that what can't be seen elsewhere must be in SVI. That's not
the case; space can be invisibly lost in other ways, e.g. ADS on NTFS.

Right click on SVI or the _restore{xxx} folder and properties.

Last point: The SVI tree may hold multiple per-installation subtrees
of SR material, if there are or have been multiple installations of XP
that can "see" the volume. Each installation has its own ID, and that
ID forms the base of the installation's SVI data. This prevents the
WinME SR debacle, where each installation tramples all over any other
installation's SR data - but space taken by other installations may
not be taken into account when SR's usage is assessed.

I have not seen this. A screen shot would be nice. <g> I wonder is Disk
Clean-up would clean ALL SR data in this case except for the most recent
RP.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org



.