Virus in System Volume Information

[Guest]

Hi All
Season's Greetings.

A trojan (I think Downloader.sizz) managed to get into my system and although AVG found it and deleted it but from time to time AVG's Resident Shield pops up and says the trojan has been detected in C:\System Volume Information\_restore directory and advises to run AVG. When AVG is run it does not find it. I want to delete it manually but I can't get into the directory, it says Access Denied.

How do I get into the System Volume Information directory? I am running WinXP Pro with all the updates and I am the PC administrator. Is there any other way to get rid of the trojan?

Many thanks
Mo >>

 

[Rick \Nutcase\ Rogers]

Hi Mo,

You want to purge the System Restore files. There are three ways to easily
remove restore points (you should not do this selectively).

1) Start/run cleanmgr.exe (disk cleanup), there is a "clean up" button on
the "more options" tab to remove all but the newest restore point.

2) Control Panel/System/System Restore tab, go to settings and reduce the
amount of space allotted to System Restore. This will remove older restore
points, how many depends on how much space you require for a point, and how
much space you leave.

3) Control Panel/System/System Restore tab, click the "turn off system
restore on all drives" box. This will eliminate all restore points. Once
reenabled, the system will begin creating new ones. You should reboot
inbetween doing this.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

Hi All
Season's Greetings.

A trojan (I think Downloader.sizz) managed to get into my system and

although AVG found it and deleted it but from time to time AVG's Resident
Shield pops up and says the trojan has been detected in C:\System Volume
Information\_restore directory and advises to run AVG. When AVG is run it
does not find it. I want to delete it manually but I can't get into the
directory, it says Access Denied.

How do I get into the System Volume Information directory? I am running

WinXP Pro with all the updates and I am the PC administrator. Is there any
other way to get rid of the trojan?

 

[Alex Nichol]

Hi All
Season's Greetings.

A trojan (I think Downloader.sizz) managed to get into my system and although AVG found it and deleted it but from time to time AVG's Resident Shield pops up and says the trojan has been detected in C:\System Volume Information\_restore directory and advises to run AVG. When AVG is run it does not find it. I want to delete it manually but I can't get into the directory, it says Access Denied.

How do I get into the System Volume Information directory? I am running WinXP Pro with all the updates and I am the PC administrator. Is there any other way to get rid of the trojan?

That contains the System Restore points. The virus can do no harm
unless you restore to a point that contains it. So wait for a new,
clean point to be made (or make one manually at
Start - All Programs - Accessories - System Tools - System Restore)
and then run
Start - All Programs - Accessories - System Tools - Disk Cleanup
to use its 'More Options' button to delete all but the most recent
restore point - the virus will be deleted along with the point it is in