Virus in System Volume Information Folder

[Paul]

My virus checker keeps giving me messages about a virus I
have in this folder. It tells me to open my virus
checker and run it to sweep this folder. However, when I
do it finds nothing, and when I try to open this folder,
even if I log on as an administrator it tells me that
access is denied. I know the file that the virus is in
(the message tells me the full path). How can I get rid
of it?

 

[Rock]

My virus checker keeps giving me messages about a virus I
have in this folder. It tells me to open my virus
checker and run it to sweep this folder. However, when I
do it finds nothing, and when I try to open this folder,
even if I log on as an administrator it tells me that
access is denied. I know the file that the virus is in
(the message tells me the full path). How can I get rid
of it?

You need to turn off system restore by right clicking My Computer |
Properties | System Restore. Put a tick mark in Turn off System REstore
on all drives. Click OK. Reboot the computer. That will delete all
restore points and the virus too. Then turn it back on. Create a fresh
restore point. There is no other way to eliminate a virus from the
system restore folder.

 

[Gregg Hill]

Open Windows Explorer, click Tools, Folder Options, View, scroll to the
bottom and uncheck Use Simple File Sharing and hit OK. Back to Explorer,
right-click the Sys Vol folder, Security tab, add your account with Full
Control, apply and exit. Go back to Explorer and you should have access to
the folder.

Gregg Hill

 

[Bruce Chambers]

Greetings --

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.

However, if you have Restore Points that you'd really rather not
lose, and know which one is corrupted, very carefully try this:

How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;EN-US;309531


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Rock]

Open Windows Explorer, click Tools, Folder Options, View, scroll to the
bottom and uncheck Use Simple File Sharing and hit OK. Back to Explorer,
right-click the Sys Vol folder, Security tab, add your account with Full
Control, apply and exit. Go back to Explorer and you should have access to
the folder.

Gregg Hill

You don't need access to the system volume folder to delete a virus in
it. And even if you do that, virus checkers won't remove it from system
restore. There is no way to selectively remove items or even full
restore points except by turning it off or running disk clean up and
telling it to remove all restore points. It leaves the most recently
created one, but the virus will still probably be in that one.

 

[Alex Nichol]

My virus checker keeps giving me messages about a virus I
have in this folder. It tells me to open my virus
checker and run it to sweep this folder.

That contains the restore points. It is in one or more of them, but
It can do no harm there, unless you restore to the point concerned. So
wait for a new clean one to have been made (or go to Start - All
Programs - Accessories - System Tools - System Restore and create one
manually) then Start - All Programs - Accessories - System Tools - Disk
Cleanup and on the More Options use the button to delete all but the
more recent point - the virus will go along with the point it is in