Re: Virus in system volumn restore file

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Don wrote:
My Bit Defender virus program has popped up a virus alert stating that "c:\system volumn information_restore{fde0c025-926e-452d-855e-e1add ...} is infected with: Worm.VB.CZ" ZIt goes on to say that "BitDefender has blocked this virus - your computer has NOT been infected." I would like to delete that particular file just to be safe. I tried from the safe mode but it would not allow me to access the files in my system volumn information folder (after turning off my system restore and restarting in safe mode.) Is there another way to get rid of it?

Don




    The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors.  It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

    To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time.  This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having both at once. - RAH
.




Relevant Pages

  • Re: Internet Traffic
    ... > off system restore, and restart in safe mode to delete these files. ... TrendMicro's Sysclean is an extensive antivirus tool which has the ... Create a new folder on your Desktop or the C: ... Restart your computer in Safe Mode. ...
    (microsoft.public.security.virus)
  • RE: XP Problem cant open Task Manager and a few others
    ... >> There are no System Restore points before this happened. ... Download TrendMicro's Sysclean, burn to cd-r, and take it to the sick ... Create a new folder on your Desktop or the C: ... Restart your computer in Safe Mode. ...
    (microsoft.public.windowsxp.general)
  • Re: Suspected virus/high jack
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)
  • Re: Internet Traffic
    ... two files that I mentioned is now in windows Prefetch folder. ... >> off system restore, and restart in safe mode to delete these files. ... Restart your computer in Safe Mode. ... Do not install driver updates from Windows Update; ...
    (microsoft.public.security.virus)
  • Re: winxp is using all of my hard drive space
    ... To investigate how you are using hard disk space you need to make sure that ... Which drives are shown as Monitored and which as Turned Off? ... remove all but the latest System Restore points? ... Create a My Documents folder in another partition and copy the ...
    (microsoft.public.windowsxp.perform_maintain)