Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have a trojan virus buried inside
C:\System Volume Information\_restore{xxxxxxxx-88B6-xxxx-xxxx-464565252F28}\RP24\A0004050.exe
Norton Anti-Virus can not remove the infected file because it cant get axs. Where in the heck is this file located? I do not have a C:\System Volume Information folder. Maybe I can manually delete it otherwise I will have to reformat...shiver. Thank you
Paul

I think you need to do something along the lines of lauch System restore (through the start menu) and turn off monitoring of your C drive.
You will then be able to delete the offending folder (You may need to change your view settings to view system folders etc.)
Dont forget to turn the monitoring back on when you're done.
Hope this helps!
David.

my comp- tools-folder options-view-check show hidden files and folders-uncheck hide protected op files(recommended)
sys vol info will appear in c as a transparent icon
these contain your restore points and you
need to probably delete all that have occured since you got the virusobviously you will not be able to resore to
prior date once deleted

Thank you Rick and thank you David. Using both your ideas I was able to delete the Virus. Thank you from saving me a re-format.
I am really happy I found this forum. It has saved me so many headaches.
Paul

I accidentally deleted the System index, which monitors the C drive. Now some of my applications run SLOW. I want to recreate the index, but don't have access to the C:\system volume information folder, where the index is stored. Only the system account has access. So I gave administrator full privs, but the folder still won't expand or let me recreate the index. Anyone have any advice how to fix this prob?

Microsoft has a nice handy thing on their web site about accessing the System Volume Information folder. Basically you need to set NTFS security on the folder as well. (If you're not running NTFS, then just showing protected files will work.) The simplest way to set NTFS permissions, is to right click on the "System Volume Information" folder, choose properties. On the security tab, add everyone or just yourself and give yourself the access you want. Well hope this helps, good luck!

Oh yeah, here's their web address for it...
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q309531 Good luck! :-D

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |