help with system volume info trojan

[russ]

hi there - can someone please help?

I have a trojan purity virus in my system volume info
restor folder. But i cannot access this folder. i have
already followd the steps on micro support site by
allowing hidden folders to be seen. ihave also tried
turning off and on the system restore.

i CAn see the folder now - but it is faded. when i try
to open - it says access is denied.

What is there left for me to do?? anti-virus cannot
access it either!

 

[Carey Frisch [MVP]]

You'll need to turn-off System Restore, reboot, then turn it back on.
The virus may have infected your System Restore folder (system volume information).

How to Turn On and Turn Off System Restore in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;310405&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------


| hi there - can someone please help?
|
| I have a trojan purity virus in my system volume info
| restor folder. But i cannot access this folder. i have
| already followd the steps on micro support site by
| allowing hidden folders to be seen. ihave also tried
| turning off and on the system restore.
|
| i CAn see the folder now - but it is faded. when i try
| to open - it says access is denied.
|
| What is there left for me to do?? anti-virus cannot
| access it either!

 

[russ]

did you not read my message?? i have already done this
step it it did not work. any other suggestions?

 

[Carey Frisch [MVP]]

There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

 

[Doug Knox MS-MVP]

Yes, Carey read your post. The only effective way to get rid of a virus in the System Restore folder is to right click My Computer and select Properties, System Restore, and turn it completely off. Reboot and turn it back on.

You can remove indvidual files from the System Restore folder, if you know the exact name/sub-folder and etc. You need to adjust the NTFS permissions on the System Volume Information folder, as by default, NO user account has access.

http://support.microsoft.com/default.aspx?scid=kb;en-us;309531&Product=winxp
How to Gain Access to the System Volume Information Folder

 

[Guest]

May I suggest a product called Webroot Spy Sweeper. You can download a trial version for free. It does a great job of removing trojans.