Re: System Volume Information

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 01/12/05


Date: Tue, 11 Jan 2005 19:36:00 -0700

microsoft wrote:
> Nortons came up with an alert that there are 5 infected files in the System
> Volume Information folder. The computer keeps rebooting as soon as it tries
> to load WinXP.
> I have pulled the Hard drive and am running it as a slave on another
> computer.
> I have tried to repair XP to no avail.
> Help Please
> Loretta
>
>

     The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

     To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time. This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on having 
both at once. - RAH


Relevant Pages

  • Re: DSL Fast but messed up my XP settings- Adware?Spyware?
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.windowsxp.security_admin)
  • Re: sticky trojan
    ... (e.g., "c:\New Folder") ... Download SYSCLEAN.COM and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)
  • Re: spp.reg trojan start page virus
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)
  • Re: JS.downloader.trojan & w32.netsky.p@mm!enc
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)
  • Re: IE toolbar addd by virus
    ... (e.g., "c:\New Folder") ... Download sysclean.com and place it in that directory. ... If you are using WinME or WinXP, disable System Restore ... Reboot your PC into Safe Mode ...
    (microsoft.public.security.virus)