How to remove " System volume information" virus completely?
by bspkumar - 6/4/08 11:36 PM
> i am using panda internet security 2008
> it is detecting the virus every time i scan but cant able to remove it.
by: bspkumar June 4, 2008 11:36 PM PDT
0 people like this thread
Total posts: 7 (Showing page 1 of 1)
Re: Remove System Volume Information virus
by Carol~ - 6/5/08 12:09 AM
In Reply to: How to remove " System volume information" virus completely? by bspkumar
Is this related to your recent post? Considering the lack of information in your post, it makes it difficult to help. If you're only asking how to flush out your restore points and nothing more, the below should help:
After reading "How to Disable System Restore" in the first link, scroll down the page where you see, "Deleting Restore Points". If none of the above helps, you might want to share with us exactly which virus Panda is detecting. And what you've done thus far to remove it. Knowing which system you're using might also help. The more information.. the better.
it was not about "system restore" ?
Some viruses are creating a folder ( system volume information)in every drive of my Pc.
ok. if u cant undertand that tell me how to remove viruses manually.
More Information Would Sure Help..
Which operating system? A
And YES, this IS about System Restore.. The System Restore program creates a "system volume information" on every drive that it is monitoring. Any and all infected files will get recreated there until you make those system restore volumes go away. To eliminate viruses from those "system volume information" folders (System Restore volumes), assuming you're using Windows XP, then RIGHT click on "My Computer", choose "Properties", then click on the "System Restore tab, and place a CHECK mark in the box next to "Turn OFF System Restore in all drives", then click on "apply", then OK.. Once that's done, restart the computer into Safe Mode..
How To Start In 'Safe Mode'
Once in Safe Mode, check to see that all "system volume information" folders are gone.. If they are not, then they have been artificially created by something.. RIGHT click on that folder, chose "Delete" to make it go away.
Hope this helps.
System Volume Information folder cannot delete
its saying ''cannot delete system volume information, access denied
Make sure the disk is not full or write protected.............
3 years old
You are posting in a discussion that is now 3 years old You would do better to create your own discussion and re-post.
Be sure to explain why you want to try and delete this protected folder and give FULL Details of the problem.
Actually, it is the OS that creates the ...
System volume Information" directory on every NTFS volume on the computer. NT has done this since it was first released as NY 3.1. Since XP was released the directories are also created on FAT32 partitions where they contain only the Restore Points.
With the advent of XP (NT 5.1) and its "System Restore" the restore points are contained in the directory but before XP and its Restore Points" the directory on all NTFS volumes was used for and is still used for -
1. Distributed Link Tracking Service databases for repairing your shortcuts and linked documents. That is included in the "tracking.log" file in the directory along with other tracking events (nothing to do with the Event Viewer).
2. Content Indexing Service databases for fast file searches. This is also the source of the cidaemon.exe process: That is the content indexer itself, busy scanning your files and building its database so you can search for them quickly. the database index file in the directory is "Catalog.wci".
3. other purposes such as documenting mount points etc. but unnecessary to delve into ...
If you want to see what is in there for yourself here is a link that tells you how to access the contents but BE AWARE that the security permissions for the directory are defaulted to System only for a very good reason.
How to gain access to the System Volume Information folder
Suffice it to say that while your AV product of choice may indicate a virus in the System Volume Information directory the indication means only that it has found viral signatures in files in restore points in the system directory. NO VIRUS "created" the directories.
Total posts: 7 (Showing page 1 of 1)