Can't access a hidden folder ?? help please

[niteowl]

hi all,

my daughter is running XP Home on her computer and keeps getting this
popup from her AV program (Grisoft - AVG)

--------------------------------------
Virus
Trojan horse Downloader.Toolber.I

is found in file
C:\System Volume
Information\_restore{B6461F21-6F5F-40F6-B06E-5EFF51F5536E}\RP24\A0010253.exe

To remove this virus, run AVG for Windows

OK
----------------------------------------

It won't remove it so we're trying to manually delete it.

we finally got the folder/file visible, but can't delete it. She has
tried to Right-click the folder, choose Properties, go to tab Security
and check "Full Control" but still it will not let her delete this
folder or file...

She says this popup occurs several times a day... and it's getting
annoying.. I can find NO information about this trojan....

What else can we do?

thanks,
niteowl

 

[The Unknown P]

While I applaud the fact that you have an anti-virus
program AVG from Grisoft is not the best there is.
Panda\McAffee and Norton are amongst the leaders. So while
AVG may not be able to help you another better program
might. You can also go to sites like www.symantec.com and
let their online scanners scan and fix your virus for no
charge. www.pandasoftware.com is another good site.Then
purchase a good program. Keep smiling.

 

[GSV Three Minds in a Can]

hi all,

my daughter is running XP Home on her computer and keeps getting this
popup from her AV program (Grisoft - AVG)

--------------------------------------
Virus
Trojan horse Downloader.Toolber.I

is found in file
C:\System Volume
Information\_restore{B6461F21-6F5F-40F6-B06E-5EFF51F5536E}\RP24\A0010253.exe

This is a system restore point.

a) the virus won't hurt you unless you restore to that point, so you can
just ignore it.

b) or you can turn off system restore, and reboot, and then turn it on.
That dumps all your restore points.

c) or you can force it to create a new restore point, then use disk
cleanup to dump all but the most recent (which should be clean -
assuming the system has no viruses right now).

It is =very= not-recommended to manually mess with SV Info. If you want
to do so you first need to add yourself to the access list (using the
security tab, which you can only get to in safe mode with XP Home).

 

[Ronnie Vernon MVP]

hi all,

my daughter is running XP Home on her computer and keeps getting this
popup from her AV program (Grisoft - AVG)

--------------------------------------
Virus
Trojan horse Downloader.Toolber.I

is found in file
C:\System Volume
Information\_restore{B6461F21-6F5F-40F6-B06E-5EFF51F5536E}\RP24\A0010253.exe

To remove this virus, run AVG for Windows

OK
----------------------------------------

It won't remove it so we're trying to manually delete it.

we finally got the folder/file visible, but can't delete it. She has
tried to Right-click the folder, choose Properties, go to tab Security
and check "Full Control" but still it will not let her delete this
folder or file...

She says this popup occurs several times a day... and it's getting
annoying.. I can find NO information about this trojan....

What else can we do?

thanks,

Niteowl

The System Volume Information folder contains all of the files that are
created by the System Restore utility in XP. No anti-virus program cannot
access this file directly, hence, it cannot delete the virus file that was
backed up there.

Go into Control Panel/System/System Restore Tab and turn off system restore
on all drives. This will delete all of the SR check point files. Go back and
turn system restore back on and another clean check point will be created.
AVG is a good av program, I have used it for many years without problems.

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.

 

[mrtee]

To each his own.

I use AVG and it works just fine.

Niteowl, follow the advice of GSV & Ronnie about your RPs.

--
Just my ¢ worth
Jeff
__________in response to__________
| While I applaud the fact that you have an anti-virus
| program AVG from Grisoft is not the best there is.
| Panda\McAffee and Norton are amongst the leaders. So while
| AVG may not be able to help you another better program
| might. You can also go to sites like www.symantec.com and
| let their online scanners scan and fix your virus for no
| charge. www.pandasoftware.com is another good site.Then
| purchase a good program. Keep smiling.

 

[niteowl]

thanks for the commercial, but AVG was the only one of the 4 AV
programs she has that caught this one... btw, she has all the ones
you've mentioned..

niteowl

 

[niteowl]

thanks, I'll forward your comments to her, thanks for the info.

I still use win98 so I had no idea what this was.

niteowl

 

[niteowl]

Thanks, I'll forward this info on to my daughter, I'm not familiar
with XP as I still use win98... so I appreciate learning this ahead of
the time I'll have to upgrade myself..

thanks again,
niteowl