system volume information

G

Guest

i scanned my system using Kaspersky on line scanner.it found
not-a-virus:Adware.Win32.Coupons.h it shows that it is located in C:\System
Volume
Information\_restore{202550A8-7A33-4BCA-9586-O51D23DDBF8F}\RP101\A0008735.ocx
i found the folder and tried to open it but get the message that its
not accessable, acces is denied.i place the curser over it and it shows its
empty.it found other problems and i was able to delete them. this is the only
one i can't get rid of. Norton,Spybot and Ad-Aware doesn't find
anything.thank you for any help.
 
D

David H. Lipman

From: "mrvette" <[email protected]>

| i scanned my system using Kaspersky on line scanner.it found
| not-a-virus:Adware.Win32.Coupons.h it shows that it is located in C:\System
| Volume
| Information\_restore{202550A8-7A33-4BCA-9586-O51D23DDBF8F}\RP101\A0008735.ocx
| i found the folder and tried to open it but get the message that its
| not accessable, acces is denied.i place the curser over it and it shows its
| empty.it found other problems and i was able to delete them. this is the only
| one i can't get rid of. Norton,Spybot and Ad-Aware doesn't find
| anything.thank you for any help.
| --
| mrvette

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


Kasperski flagged adware in a OCX file found in the WinXP System Restore cache. This is a
relatively safe place. That's assuming you don't restore to an earlier Restore Point that
this OCX file *may* be in and re-infect your computer.

You have two choices...

1. Ignore the message and eventually the file will get cached out of the system. This
assumes you don't restore to a previous Restore Point.

2. Disable the System Restore cache, reboot the PC, re-enable the System Restore cache
and create a new Restore Point.
 
B

Bruce Chambers

mrvette said:
i scanned my system using Kaspersky on line scanner.it found
not-a-virus:Adware.Win32.Coupons.h it shows that it is located in C:\System
Volume
Information\_restore{202550A8-7A33-4BCA-9586-O51D23DDBF8F}\RP101\A0008735.ocx
i found the folder and tried to open it but get the message that its
not accessable, acces is denied.i place the curser over it and it shows its
empty.it found other problems and i was able to delete them. this is the only
one i can't get rid of. Norton,Spybot and Ad-Aware doesn't find
anything.thank you for any help.


The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time. This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
P

Plato

=?Utf-8?B?bXJ2ZXR0ZQ==?= said:
i scanned my system using Kaspersky on line scanner.it found
not-a-virus:Adware.Win32.Coupons.h it shows that it is located in C:\System
Volume
Information\_restore{202550A8-7A33-4BCA-9586-O51D23DDBF8F}\RP101\A0008735.ocx
i found the folder and tried to open it but get the message that its
not accessable, acces is denied.i place the curser over it and it shows its

It's a proprietary file format. Best to disable system restore if you
have a virus/spyware which should, in theory, delete the restore points
and and their calls to bugs. Enable it back again once you are done
scanning.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top