Virus

[Jim]

AVG advises a virus in C:\System Volume Information\_restore\1C.............
SIV is not accessable, so how do I delete the restore volume, or for that
matter, all restore points?

Jim

 

[Bert Kinney]

Hi Jim,

The SVI (System Volume Information) folder is where System Restore
stores it's restore points. Once the system is fully cleaned, the SVI
folder can be emptied. To do so, disable System Restore, then enable it.

How to Disable and Enable System Restore:
http://bertk.mvps.org/html/disablesr.html

 

[David H. Lipman]

From: "Jim" <[email protected]>

| AVG advises a virus in C:\System Volume Information\_restore\1C.............
| SIV is not accessable, so how do I delete the restore volume, or for that
| matter, all restore points?
|
| Jim
|

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

 

[Bert Kinney]

Also see, should I purge all my restore point before removing virus &
malware infection?
http://bertk.mvps.org/html/tips.html#PurgeAndClean

 

[Guest]

goto
http://www.faqfarm.com/Q/How_do_you_delete_the_virus_on_C_System_Volume_Information_restore_EXE

 

[Guest]

Jim if you don't want to do that on the web site then backup all your data
then reinstall and reformat.

 

[David H. Lipman]

From: "Vincent Isabelle" <firearms@fullchanneldotnet>

| Jim if you don't want to do that on the web site then backup all your data
| then reinstall and reformat.
|

Got any more ./*BAD*/ advice ?

There is absolutely NO reason to wipe the hard disk and re-install the OS and data just
because of a Trojan in the System Restore cache.

If the OP doesn't do a Restore, the Trojan will cache out in time.

Otherwise he can dump the cache and the re-enable the cache and create a new Restore Point.

 

[Bruce Chambers]

AVG advises a virus in C:\System Volume Information\_restore\1C.............
SIV is not accessable, so how do I delete the restore volume, or for that
matter, all restore points?

Jim

The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors. It's really not a good idea
for you, or an antivirus application, to directly access the contents
of that folder, unless you expect to have no future use for the
restore points, in which case it would be simpler just to turn off the
System Restore feature.

To clear viruses or other malware from the "System Volume
Information," simply turn off the System Restore feature (Start > All
Programs > Accessories > System Tools > System Restore, System Restore
Settings), reboot, then re-enable System Restore, and reboot one last
time. This will delete all of your Restore Points, including the
corrupted one(s), and allow you start with a clean slate.



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin