Cannot gain access to System Volume Information using cacls

[Brad]

There has been a trio of Trojans camped out in my System
Volume Information folder for a couple months now;
PSW.Perfect.A, PSW.Perfect.B, and PSW.Perfect.C. I
cannot seem to get rid of them. I use AVG and Norton but
neither one of them has been able to remove them. I have
used a host of other anti-trojan programs, but there they
sit. Now on top of that, I can no longer gain access to
the System Volume Information folder. I cannot change
the Hidden or Read-only boxes in Folder Properties. When
I use CACLS it says that I have Full access rights, yet I
can't Open or Explore the folder. Where do I go from
here?

Thanks for any help anyone can offer,
Brad

 

[Doug Knox MS-MVP]

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;en-us;309531

 

[Guest]

I did that. It doesn't work.

-----Original Message-----
How to Gain Access to the System Volume Information Folder
us;309531

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Brad" <[email protected]> wrote in

message news:[email protected]...

 

[Doug Knox MS-MVP]

Well, since you can't delete individual files from the System Restore Points that are stored in System Volume Information, nor can you delete individual restore points, go to Control Panel, System, System Restore. Turn it off. This flushes all of the restore points. Then turn it back on, and it will automatically create a new restore point. Make sure you keep your AV software up to date.

 

[Bruce Chambers]

Greetings --

The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH