Re: System Volume Information

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Will Denny (willdenny_at_mvps.org)
Date: 03/20/04 

Date: Sat, 20 Mar 2004 14:35:54 -0000

Hi

The System Volume Information folder holds the files for System Restore. You can get rid of the virus by performing the following, although all existing checkpoints will be deleted:

Right click on My Computer, select Properties and then the System restore tab. Enable 'Turn off System Restore on all drives' - Apply>OK and then reboot your system. After that first reboot, go back into System Restore, uncheck 'Turn off System Restore on all drives' - Apply>OK - and then reboot again. After this second reboot the virus would have been eliminated and your system will have one new checkpoint.

Please do not try and access that folder directly. Changing anything there may make System Restore unusable at a later date. 

-- 
Will Denny
MS-MVP Windows - Shell/User
"Steve B" <sjb698@aol.com> wrote in message news:DD7A5BFF-0EEE-4942-8F95-9475FE464E6C@microsoft.com...
| I recently purchased Norton Antivirus and It found 4 viruses and got rid of them. Great or so I thought.
| 
| I was looking at all the settings and found that in the exclusions on Auto-protect was something called \System Volume Information.
| 
| I removed this from the exclusion list and within 10 mintues it had found a worm virus, but it couldn't delete it as 'Access Is Denied'.  So I clicked ok and every 10 mins it would come up with the same message.  Even when playing a game it would interupt.  Eventually, I replaced the exclusion. 
| 
| But is the virus going to cause me problems and if so how do I get rid of it.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.634 / Virus Database: 406 - Release Date: 18/03/2004

Relevant Pages

  • Re: bugbear.worm
    ... > I have a virus program "Vet" ... > I need to know haow to get rid of this ... infected files are being found in your 'System Restore' ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Virus in system restore
    ... It unzipped 5 files and immediately told me that one of the files was a .exe that was infected with a virus. ... The next day, the scheduled disk scan kicked in, and said I had a copy of this virus in the directory that stores my restore points. ... I then switched system restore back on, and when it had done that, I scanned the whole disk, and it said I was OK. ... What should I have done, that would have got rid of this file, without getting rid of all my restore points? ...
    (microsoft.public.windowsxp.general)
  • Re: Virus in system restore
    ... then you may find that your virus checker can only see the infected items ... my PC and virus scanned it using Sophos. ... I was unsure what to do, but was determined to get rid of this thing. ... system restore back on, and when it had done that, I scanned the whole ...
    (microsoft.public.windowsxp.general)
  • Re: c:windowssystem32 etdc.exe
    ... Netdc.exe is related to a virus. ... to remove it from relatives machine and I could not get rid of it. ... > before this started happening but System Restore couldn't do it. ... > Other than my getting the error message, ...
    (microsoft.public.windowsxp.general)
  • Re: Virus in System Volume Information Folder
    ... >my virus checker to check my entire computer it cannot get rid of it. ... Reboot. ... Turn on System Restore again. ... information stored in the System Volume Information Folder ...
    (microsoft.public.windowsxp.general)