XP and McAfee

  • Thread starter Thread starter mears
  • Start date Start date
M

mears

I keep getting a virus alert from Mcafee stating that 'AD-Clicker' file
A00033.exe is in my C: system volume information (etc) and I have no such
folder. Doing a file search for this brings up nothing. Can't delete it,
move it, or quaarantine it. Doesn't seem to be doing anything except being
aggravating...any ideas on this? Pops up periodically
 
It is a hidden system file. You need to be sure that you set Explorer to
show hidden and system files. The only way to get rid of it is to turn off
system restore, reboot and turn system restore back on. Be aware that you
will lose all restore points. You should enable the firewall.


Bobby
 
The system volume folder is where restore points for system restore
are stored. Disable system restore and reboot. Then turn system
restore back on. This will delete all restore points.

|I keep getting a virus alert from Mcafee stating that 'AD-Clicker'
file
| A00033.exe is in my C: system volume information (etc) and I have no
such
| folder. Doing a file search for this brings up nothing. Can't delete
it,
| move it, or quaarantine it. Doesn't seem to be doing anything except
being
| aggravating...any ideas on this? Pops up periodically
|
|
 
Hmmm...I bring up system restore and click settings and get a Mcafee alert
for Hawk script - C:\WINDOWS\system32\Restore\rstrui.exe - it recommends you
stop the script, when I do, SR shuts down...?
 
This is the detail tab on the alert

Interface Name: IWshShell3
Interface Documentation: Shell Object Interface
Method Name: Run
Method Documentation:
 
Also...changed the hidden files to show all and now I see the System Volume
folder but click on it to open it and 'access is denied'.....vicious circle
here
 
Turn off/on System Restore to delete corrupted files:
Reboot
Start/All Programs/Accessories/System Tools/System Restore.
Click System Restore Settings on left side.
Check "Turn off System Restore", click OK, follow prompts and reboot.
This deletes ALL Restore Points including corruption.
Then go back and turn on system Restore and create a Restore Point.
 
Greetings --

The System Volume Information is the hidden, protected operating
system folder in which WinXP's System Restore feature stores
information used to recover from errors.

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
I bring up system restore and click settings and get a Mcafee alert
for Hawk script - C:\WINDOWS\system32\Restore\rstrui.exe - it recommends you
stop the script, when I do, SR shuts down
 
Allow it to run.


|I bring up system restore and click settings and get a Mcafee alert
| for Hawk script - C:\WINDOWS\system32\Restore\rstrui.exe - it
recommends you
| stop the script, when I do, SR shuts down
|
| | > Greetings --
| >
| > The System Volume Information is the hidden, protected
operating
| > system folder in which WinXP's System Restore feature stores
| > information used to recover from errors.
| >
| > To clear viruses from the "System Volume Information," simply
turn
| > off the System Restore feature (Start > All Programs > Accessories| > System Tools > System Restore, System Restore Settings), reboot,
then
| > re-enable System Restore, and reboot one last time. This will
delete
| > all of your Restore Points, including the corrupted one(s), and
allow
| > you start with a clean slate.
| >
| >
| > Bruce Chambers
| >
| > --
| > Help us help you:
| >
| >
| >
| >
| > You can have peace. Or you can have freedom. Don't ever count on
| > having both at once. -- RAH
| >
| >
| > | > >I keep getting a virus alert from Mcafee stating that
'AD-Clicker'
| > >file
| > > A00033.exe is in my C: system volume information (etc) and I
have no
| > > such
| > > folder. Doing a file search for this brings up nothing. Can't
delete
| > > it,
| > > move it, or quaarantine it. Doesn't seem to be doing anything
except
| > > being
| > > aggravating...any ideas on this? Pops up periodically
| > >
| > >
| >
| >
|
|
 
Umm..kinna scary to do that, especially when the alert says it could be
harmful to my computer. Not really wanting to harm my computer.
 
Thanks, Bruce Chambers. This is exactly the info I needed in the level of detail that I needed. And thanks for writing in literate English. This post should replace the item in the MS Knowledge Base "To gain access to the System Volume Information folder...", which does not work in the case of a virus.
 
Back
Top