how to delete virus in system volume info?

S

sillyputty

AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?
 
K

KlausK

sillyputty said:
AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?

Then, Get a Mac and you'll hate it even more.
 
D

Dave

sillyputty said:
AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?

If you are sure that the file is a virus, download the following ISO and
burn it to CDR, data, multisession. Then boot it. Run pmount (something
like that, in file tools menu) to mount your hard drive (click on the icon
near your hard drive to turn it green to "mount" it). Now start up the file
explorer utility, and you will have full access to every file on your hard
drive. Just be careful you delete the right file and nothing else.
:) -Dave

ftp://ftp.oss.cc.gatech.edu/pub/linux/distributions/puppylinux/puppy-3.01-seamonkey.iso

This is a full-featured operating system, and makes a good rescue disk,
also.
 
G

geoff

.. . . and MACs have viruses also but since winblows is used more by
business, going after those machines does more damage.

From:

http://www.labwithleo.com/transcripts/LWL-transcript-episode143.pdf

FOR THE FIRST TIME EVER
IN THE LAST FEW MONTHS THERE
HAS BEEN DOCUMENTED A VIRUS IN
THE WILD FOR OS X.

IT WASN'T EASY TO GET.
THE WAY YOU WOULD GET IT IS
YOU'D GO TO A WEBSITE, A
WEBSITE WITH ADULT VIDEO ON IT,
AS IT TURNS OUT, ALTHOUGH IT
COULD BE ANY KIND OF VIDEO, AND
YOU TRY TO START TO WATCH THE
MOVIE AND IT WOULD SAY, OH,
SORRY - AND YOU SEE THIS ALL
THE TIME ON THE WEB - YOU DON'T
HAVE THE RIGHT CODEC, WOULD YOU
LIKE TO DOWNLOAD IT, CLICK THIS LINK.

YOU CLICK THE LINK, YOU
DOWNLOAD THE FILE.
OS X AS ALWAYS WOULD SAY
-- THERE'S A PROGRAM
TRYING TO BE INSTALLED FROM
THIS WEBSITE; DO YOU WANT TO
SAY OKAY?

IF YOU'RE NOT
OPERATING AS THE ADMINISTRATOR,
YOU'D HAVE TO GIVE YOUR
ADMINISTRATIVE PASSWORD, YOU'D
TYPE THAT IN, IT WOULD INSTALL.

BUT INSTEAD OF INSTALLING A
MOVIE CODEC, IT WOULD ACTUALLY
INSTALL A PROGRAM THAT WOULD
CHANGE YOUR HOST'S FILE IN SUCH
A WAY SO THAT WHEN YOU WENT TO
CERTAIN SITES, PERHAPS YOUR
BANKING SITE, IT WOULD LOOK TO
BE YOUR BANKING SITE, EVEN YOUR
BROWSER WOULD SAY IT WAS YOUR
BANKING SITE, BUT, IN FACT, IT
WOULD BE A HACKER'S SITE.

YOU'D GIVE THEM YOUR PASSWORD
AND ALL OF A SUDDEN ALL YOUR
BANKING INFORMATION IS OUT THERE.
SO, THIS IS A PRETTY NASTY
TROJAN HORSE PROGRAM
 
M

Michael Cecil

AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?

I just hate stupid people. After all, is it so hard to learn to change
the security permissions on a folder? Or perhaps learn how to purge the
restore points? Guess so.
--
Michael Cecil
http://macecil.googlepages.com/index.htm
http://macecil.googlepages.com/safehex.htm
http://macecil.googlepages.com/hackingvista.htm
Chuck Norris: Afraid of NOTHING, except John McCain's 95 year-old mother
 
Y

yogi

AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?

If you are using the full registered version of AVG, then it has the
ability to delete virus from the System Volume folder, mine has on a
number of occasions.

Another way to remove virus from the System Volume folders is to
remove all but the last restore point.

From within Windows Explorer, Right click on the [C:/ Root Directory]
and then [Properties] then on the General Tab [Disk Cleanup], then go
to the [More Options] tab, in the bottom section under System Restore
click on the [Cleanup] button, a box will popup asking you ARE YOU
SURE YOU WANT TO DELETE ALL BUT THE LAST RESTORE POINT (YES or NO),
click [YES], then click [OK] back in the disk cleanup window, another
popup will ask you ARE YOU SURE YOU WANT TO PERFORM THESE ACTIONS,
click [YES] then click [OK] on the drive properties window.

Windows creates System Volume Information folders on each hard drive
on you computer, you might need to repeat this procedure on each
drive.

You should have picked up a fare bit of drive space from the multiple
restore points removed, now run a complete virus scan on your drives
to see that the virus is gone, if so, then create a new restore point
remembering that there is still one there but another wont hurt.

This all seems to make sense to me now as I typed it but given that I
have to had my first cup of coffee yet, it might not when I see it in
the group later, but you should not have a problem.

Cheers
Keith
 
P

peter

I would delete all restore points by shutting down system restore and
rebooting....then run another scan and if clear turn Restore back on and
create a restore point.
The Trojan could be in that last restore point
peter

--
DISCLAIMER: If you find a posting or message from me
offensive, inappropriate, or disruptive, please ignore it.
If you don't know how to ignore a posting, complain to
me and I will be only too happy to demonstrate... ;-)


yogi said:
AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?

If you are using the full registered version of AVG, then it has the
ability to delete virus from the System Volume folder, mine has on a
number of occasions.

Another way to remove virus from the System Volume folders is to
remove all but the last restore point.

From within Windows Explorer, Right click on the [C:/ Root Directory]
and then [Properties] then on the General Tab [Disk Cleanup], then go
to the [More Options] tab, in the bottom section under System Restore
click on the [Cleanup] button, a box will popup asking you ARE YOU
SURE YOU WANT TO DELETE ALL BUT THE LAST RESTORE POINT (YES or NO),
click [YES], then click [OK] back in the disk cleanup window, another
popup will ask you ARE YOU SURE YOU WANT TO PERFORM THESE ACTIONS,
click [YES] then click [OK] on the drive properties window.

Windows creates System Volume Information folders on each hard drive
on you computer, you might need to repeat this procedure on each
drive.

You should have picked up a fare bit of drive space from the multiple
restore points removed, now run a complete virus scan on your drives
to see that the virus is gone, if so, then create a new restore point
remembering that there is still one there but another wont hurt.

This all seems to make sense to me now as I typed it but given that I
have to had my first cup of coffee yet, it might not when I see it in
the group later, but you should not have a problem.

Cheers
Keith
 
J

John Doe

Michael Cecil said:
I just hate stupid people. After all, is it so hard to learn to
change the security permissions on a folder? Or perhaps learn how
to purge the restore points?

Or have a hidden copy of Windows on your hard drive. Actually that
might be hard for most people, but it solves anything System Restore
can solve and just about everything else that isn't hardware failure
(but it helps troubleshoot that too). It might not be good for some
software technician practicing Windows certification stuff, you do
get lazy, but it's easy and it always works (with the exception of
catastrophic hard drive failure). It's like the friendliness of a
Mac with the power of Windows.

Get yourself free.
 
C

Conor

AVG reported a trojan, BackDoor.Hupigon3.ARCW, in the system volume
information folder. I unchecked hide protected system operating files,
then tried to open the system volume information folder and got
"system volume information is not accessible, access is denied."

I HATE WINDOWS !!!

Did you get it that I hate windows?
It's not Windows fault you got infected. I've never had a virus or
trojan in 15 years of running Windows.

--
Conor

As a Brit I'd like to thank the Americans for their help in the war
against terror because if they'd not funded the IRA for 30 years, we
wouldn't know how to deal with terrorists.
 
S

sillyputty

I just hate stupid people. After all, is it so hard to learn to change
the security permissions on a folder? Or perhaps learn how to purge the
restore points? Guess so.

I was unable to change the security permission on the folder. Hence my
frustration, after 'unhiding' the system volume info and not simply
being able to delete the infected file. I've been working with
WinBlows for more than 10 yrs and understand how much better Linux is
and wish it was in Microshaft's place.
 
S

sillyputty

It's not Windows fault you got infected.

Try Linux, then come back...
I've never had a virus or
trojan in 15 years of running Windows.

Then you've been very lucky. Btw, you didn't say whether you're
running AV/FW. The virus got on my system when some bonehead I let use
my computer opened a malicious email attachment.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top