My son's home computer has been infected with the Lovsan virus some weeks back. The machine was scanned with AVG and the infected files were found and dealt with. The patch was downloaded from MS and installed.

However, there are persistant reports that pop up on the screen every half hour or so from AVG that the virus remains in the System Volume Information folder in an executable file with a string of about thirty numbers and letters in its name.

I have run AVG a number of times in tests pointed at this folder but it comes up stating there is no virus.

I cannot access this file in either command prompt mode or through Windows Explorer as it simply states access denied. As the format is NTFS I am unable to access the system through a DOS boot disk.

Has anyone any ideas how I can eliminate this file or otherwise prevent AVG from reporting this apparently non-existent virus.

Regards,

Theo

Disable system restore, reboot, enable system restore and reboot. Here's how:

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

Once you have re-enabled system restore create a new restore point:

To create a restore point:

Click Start > All Programs > Accessories > System Tools > System Restore.

In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.
Type a description for your new restore point. Something like "Before I installed some program that may cause my system major grief" would do just fine, but you don't have to be that descriptive.
Click Create.

System Volume Information folder is your system restore.
Windows locks out that folder from any programs modifying it including antivirus programs but windows backed up the virus.
Avg would detect the virus every time windows is doing anything with restore folder..ie: doing backups but since windows locks out that folder antivirus cannot remove it.
You will need to turn off system restore and turn it back on again to remove all your restore points and the virus.
To do...right click on "my computer"
Click properties
Click system restore
Checkmark turn off system restore on all drives
Click yes to the are you sure prompt
Reboot machine
Turn on system restore again by reversing above steps.