virus in system volume information folder

[Guest]

My virus scanner found a W32/SillyWorm infecting this file: C:\System Volume
Information\_restore{DDE3EB95-4B24-44D8-AD38-1F974B96C2F0}\RP212\A9945924.exe

If I delete this, will it royally screw me over?

What is a sillyworm, and if I can't delete that file, how much of a problem
will it cause if I leave it?

Thank you ever so much in advance!

Ashlee

 

[David H. Lipman]

From: "Ashlee" <[email protected]>

| My virus scanner found a W32/SillyWorm infecting this file: C:\System Volume
| Information\_restore{DDE3EB95-4B24-44D8-AD38-1F974B96C2F0}\RP212\A9945924.exe
|
| If I delete this, will it royally screw me over?
|
| What is a sillyworm, and if I can't delete that file, how much of a problem
| will it cause if I leave it?
|
| Thank you ever so much in advance!
|
| Ashlee

Ignore it unless you suspect that you have to restore from a previous restore point.

Otherwise, disable the System Restore cache and reboot the PC. This will dump all restore
points and the W32/Silly worm.

Re-enable the System Restore cache then manually create a new restore point.

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

 

[Kelly]

Delete it.

To show System Volume Information

Go to: Windows Explorer/Tools/Folder Options/View/Show Hidden File and
Uncheck Hide Protected Operating System Files.

Then go to: C:\System Volume Information

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;EN-US;309531


But the way to fix your problem is to create a restore point and then use
the Disk Cleanup to delete all but the last restore point. The virus will be
gone, if your virus checker already deleted it from your system.

Right click your Root drive/Properties/Disk Cleanup ... let it run. Then
click on More Options/System Restore/Clean up.


--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool
http://www.kellys-korner-xp.com/taskbarplus!.htm

 

[Bruce Chambers]

My virus scanner found a W32/SillyWorm infecting this file: C:\System Volume
Information\_restore{DDE3EB95-4B24-44D8-AD38-1F974B96C2F0}\RP212\A9945924.exe

If I delete this, will it royally screw me over?

What is a sillyworm, and if I can't delete that file, how much of a problem
will it cause if I leave it?

Thank you ever so much in advance!

Ashlee

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

 

[Bruce Chambers]

My virus scanner found a W32/SillyWorm infecting this file: C:\System Volume
Information\_restore{DDE3EB95-4B24-44D8-AD38-1F974B96C2F0}\RP212\A9945924.exe

If I delete this, will it royally screw me over?

What is a sillyworm, and if I can't delete that file, how much of a problem
will it cause if I leave it?

Thank you ever so much in advance!

Ashlee

The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time. This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin