System Volume Information

[Pastor]

My resident virus shield located a virus in my C:\System
Volume Information\_resore{... file. I ran my virus
protection software a couple times and it doesn't see the
file.

I'd like to delete the file from the resoration file.
I've gone into the process of changing its properties from
read only to be able to be written and even attempted
enabling sharing, but I can't seem to open the folder to
access the file. Any ideas on how I can get rid of the
virus? The virus is called Dropper.Inor

Thanks

 

[Doug Knox MS-MVP]

You can't simply remove the virus from the Restore Point, you have to remove the Restore Point itself. Go to Control Panel, System, System Restore. Turn System Restore off, reboot, and then turn it back on.

 

[Bruce Chambers]

Greetings --

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.

However, if you have Restore Points that you'd really rather not
lose, and know which one is corrupted, very carefully try this:

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;EN-US;309531


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH