Can't delete virus in hidden folder

[Byron Gibson]

Hello,

Both AVG and Norton AV 8 have discovered the W32.Supernova.Worm in the
D:\System Volume Information\ folder of my second harddrive (WinXP Pro
SP1). However, it is unable to delete this virus, for unspecified
reasons, and can only quarantine it. Further, I can't open the folder
to manually delete it; I get "Access Denied" when trying to explore
D:\System Volume Information\. Is there a permision I should be aware
of that is preventing Norton from deleting this virus, or that is
preventing me opening this folder? Thanks,

Byron

 

[Jupiter Jones [MVP]]

Byron;
System Volume Information is the System Restore data.
Turn off/on System Restore to delete corrupted files:
Start/All Programs/Accessories/System Tools/System Restore.
Click System Restore Settings on left side.
Check "Turn off System Restore", click OK, follow prompts and reboot.
This deletes ALL Restore Points including corruption.
Then go back and turn on system Restore and create a Restore Point.

 

[feardotcom]

Hello,

Both AVG and Norton AV 8 have discovered the W32.Supernova.Worm in the
D:\System Volume Information\ folder of my second harddrive (WinXP Pro
SP1). However, it is unable to delete this virus, for unspecified
reasons, and can only quarantine it. Further, I can't open the folder
to manually delete it; I get "Access Denied" when trying to explore
D:\System Volume Information\. Is there a permision I should be aware
of that is preventing Norton from deleting this virus, or that is
preventing me opening this folder? Thanks,

Byron

Byron, You can also startup in safemode,login as admin and then run your
anti-virus software to remove the virus if my memory serves me right.

 

[John7]

Byron,

You can keep your System Restore files but still have the virus removed.
The trick is to allow your AntiVirus to do is job.
(Sorry, I can't remember the steps exactly but this comes close)

Login as Administrator.
Rightclick D:\System Volume Information\ folder.
Enter Security & Sharing
In upper pane, click Add (users...), type: administrators , click OK or
Add
In upper pane, click Advanced, highlight 'administrators',
In middle, select 'All folders, subfolders and files'.
In lower pane, Select 'Full Control', click Apply, then OK.
Check access by entering the folder.
Run your AntiVirus to do it's job.

HTH,
John7



Login as

 

[Lady Layla]

Hi Fear

In this case - your memory is failing. As Jupiter points out, the System volume
Info is referencing the Restore information. What is needed here is a reset of
the restore points




: : > Hello,
: >
: > Both AVG and Norton AV 8 have discovered the W32.Supernova.Worm in the
: > D:\System Volume Information\ folder of my second harddrive (WinXP Pro
: > SP1). However, it is unable to delete this virus, for unspecified
: > reasons, and can only quarantine it. Further, I can't open the folder
: > to manually delete it; I get "Access Denied" when trying to explore
: > D:\System Volume Information\. Is there a permision I should be aware
: > of that is preventing Norton from deleting this virus, or that is
: > preventing me opening this folder? Thanks,
: >
: > Byron
: >
: Byron, You can also startup in safemode,login as admin and then run your
: anti-virus software to remove the virus if my memory serves me right.
:
:

 

[Byron Gibson]

Thanks everyone, I appreciate your help. I used the System Restore
approach, and that solved it. I was logged in as Admin the first two
times I tried to use Norton to get rid of it, but hadn't checked if I'd
allowed Admin all rights on the System Restore directory. I'll keep
that in mind for next time. Muchos gracias!

Byron