System Volume Information

[Guest]

Hi, I did that new Windows Live Saftey Scan on my Computer 12 hours ago, LOL.
Good job, but long time. Anyway, it tells me I have to go in and manually
take out a Trojan, whereit is sitting in my c:\system volume
information\_restore-{5d730628-7ff8-44f7-9456-7086479cc893}rp65\a0024699.exe.
Can someone please tell me how I get to this c:\system volume Information,
even my Help And Support Center is giving me the run around. Now, when I
finally find out, I just know I'm going to feel like an dimwit "duh!", LOL.

 

[Bert Kinney]

Hi,

The SVI (System Volume Information) is where System Restore holds it's
information and restore points. Encrypting File System and the Indexing
Service also use the SVI folder to store information.

The file referenced below appears to be within a restore point. If the
system is running correctly, then the restore point can be purged. To do
this, rather than deleting files, turn off System Restore. This will
delete all existing restore points. Then enable SR, which will create
one new restore point.

How to Disable and Enable System Restore:
http://bertk.mvps.org/html/disablesr.html

Note: Infections detected within restore points will not re-infected a
system unless the system is restored using System Restore.

 

[Guest]

open my computer, tools, folder options, view and select view hidden files.
close my computer and reopen. then do a search for the file name with
extension exe that is at the end of the named error filename. then delete.
the other alternative is to turn off system restore. this will delete all
restore points/files upon reboot. you can later turn the restor feature back
on and begin a new set of restore points..... since you used that ms one
care, you could also try out the ms defender as this should also detect that
trojan and delete as well.....

 

[Guest]

Hey Bert, thanks big guy, work like a charm and I don't even feel like a
Dinwit, LOL. Don't know if you read my Profile or not, I mean it's not a
paycheck or anything. But it's a little something that you can take home to
the wife or tell your friends about anyway. Again, thanks, and all the best.

Lance Boles
My Father was Allen Boles, A little History there for ya.

 

[Bruce Chambers]

Hi, I did that new Windows Live Saftey Scan on my Computer 12 hours ago, LOL.
Good job, but long time. Anyway, it tells me I have to go in and manually
take out a Trojan, whereit is sitting in my c:\system volume
information\_restore-{5d730628-7ff8-44f7-9456-7086479cc893}rp65\a0024699.exe.
Can someone please tell me how I get to this c:\system volume Information,
even my Help And Support Center is giving me the run around. Now, when I
finally find out, I just know I'm going to feel like an dimwit "duh!", LOL.

The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time. This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

 

[Bert Kinney]

You're welcome, and thanks for the feedback.