Re: System Volume Information

[Will Denny]

Hi

The System Volume Information folder holds the files for System Restore. =
You can get rid of the virus by performing the following, although all =
existing checkpoints will be deleted:

Right click on My Computer, select Properties and then the System =
restore tab. Enable 'Turn off System Restore on all drives' - Apply>OK =
and then reboot your system. After that first reboot, go back into =
System Restore, uncheck 'Turn off System Restore on all drives' - =
Apply>OK - and then reboot again. After this second reboot the virus =
would have been eliminated and your system will have one new checkpoint.

Please do not try and access that folder directly. Changing anything =
there may make System Restore unusable at a later date.

--=20

Will Denny
MS-MVP Windows - Shell/User


"Steve B" > wrote in message =
...
| I recently purchased Norton Antivirus and It found 4 viruses and got =
rid of them. Great or so I thought.
|=20
| I was looking at all the settings and found that in the exclusions on =
Auto-protect was something called \System Volume Information.
|=20
| I removed this from the exclusion list and within 10 mintues it had =
found a worm virus, but it couldn't delete it as 'Access Is Denied'. So =
I clicked ok and every 10 mins it would come up with the same message. =
Even when playing a game it would interupt. Eventually, I replaced the =
exclusion.=20
|=20
| But is the virus going to cause me problems and if so how do I get rid =
of it.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.634 / Virus Database: 406 - Release Date: 18/03/2004

[Bruce Chambers]

Greetings --

To clear viruses from the "System Volume Information," simply turn
off the System Restore feature (Start > All Programs > Accessories >
System Tools > System Restore, System Restore Settings), reboot, then
re-enable System Restore, and reboot one last time. This will delete
all of your Restore Points, including the corrupted one(s), and allow
you start with a clean slate.


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html


You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Steve B" > wrote in message
...
>I recently purchased Norton Antivirus and It found 4 viruses and got
>rid of them. Great or so I thought.
>
> I was looking at all the settings and found that in the exclusions
> on Auto-protect was something called \System Volume Information.
>
> I removed this from the exclusion list and within 10 mintues it had
> found a worm virus, but it couldn't delete it as 'Access Is Denied'.
> So I clicked ok and every 10 mins it would come up with the same
> message. Even when playing a game it would interupt. Eventually, I
> replaced the exclusion.
>
> But is the virus going to cause me problems and if so how do I get
> rid of it.

[Earl F. Parrish]

"Steve B" > wrote in message
...
> I recently purchased Norton Antivirus and It found 4 viruses and
got rid of them. Great or so I thought.
>
> I was looking at all the settings and found that in the exclusions
on Auto-protect was something called \System Volume Information.
>
> I removed this from the exclusion list and within 10 mintues it
had found a worm virus, but it couldn't delete it as 'Access Is
Denied'. So I clicked ok and every 10 mins it would come up with
the same message. Even when playing a game it would interupt.
Eventually, I replaced the exclusion.
>
> But is the virus going to cause me problems and if so how do I get
rid of it.

An additional way to remove most of the System Restore files is
through the Disk Cleanup routine. You can delete all but the latest
System Restore files using the Options tab after the program
finishes analyzing the drive. When you click OK, it will be done.
If you still get the virus notice you can follow the instructions of
the other posters. What can happen in the turning off System
Restore is to forget to turn it back on when you restart your
computer if there is a long period between turning the System
Restore off and restarting your computer.

The System Restore files are not accessible by the operating system
or other programs so a file stored there cannot run without being
restored through the System Restore routine. Eventually old restore
points will be eliminated as newer ones are created. You set the
amount of disk space to dedicate to System Restore data. When you
approach the limit, the oldest restore point is deleted to make room
for the newer one.

--
Earl F. Parrish

--
Earl F. Parrish