How to remove " System volume information" virus completely?
by bspkumar - 6/4/08 11:36 PM
> i am using panda internet security 2008
> it is detecting the virus every time i scan but cant able to remove it.
Attention forum users: We want you to try out the new CNET forums platform! Click here to read the details. Thanks!
by: bspkumar June 4, 2008 11:36 PM PDT
0 people like this thread
Total posts: 9 (Showing page 1 of 1)
Re: Remove System Volume Information virus
by Carol~ - 6/5/08 12:09 AM
In Reply to: How to remove " System volume information" virus completely? by bspkumar
Is this related to your recent post? Considering the lack of information in your post, it makes it difficult to help. If you're only asking how to flush out your restore points and nothing more, the below should help:
After reading "How to Disable System Restore" in the first link, scroll down the page where you see, "Deleting Restore Points". If none of the above helps, you might want to share with us exactly which virus Panda is detecting. And what you've done thus far to remove it. Knowing which system you're using might also help. The more information.. the better.
it was not about "system restore" ?
Some viruses are creating a folder ( system volume information)in every drive of my Pc.
ok. if u cant undertand that tell me how to remove viruses manually.
More Information Would Sure Help..
Which operating system? A
And YES, this IS about System Restore.. The System Restore program creates a "system volume information" on every drive that it is monitoring. Any and all infected files will get recreated there until you make those system restore volumes go away. To eliminate viruses from those "system volume information" folders (System Restore volumes), assuming you're using Windows XP, then RIGHT click on "My Computer", choose "Properties", then click on the "System Restore tab, and place a CHECK mark in the box next to "Turn OFF System Restore in all drives", then click on "apply", then OK.. Once that's done, restart the computer into Safe Mode..
How To Start In 'Safe Mode'
Once in Safe Mode, check to see that all "system volume information" folders are gone.. If they are not, then they have been artificially created by something.. RIGHT click on that folder, chose "Delete" to make it go away.
Hope this helps.
System Volume Information folder cannot delete
its saying ''cannot delete system volume information, access denied
Make sure the disk is not full or write protected.............
3 years old
You are posting in a discussion that is now 3 years old You would do better to create your own discussion and re-post.
Be sure to explain why you want to try and delete this protected folder and give FULL Details of the problem.
Actually, it is the OS that creates the ...
System volume Information" directory on every NTFS volume on the computer. NT has done this since it was first released as NY 3.1. Since XP was released the directories are also created on FAT32 partitions where they contain only the Restore Points.
With the advent of XP (NT 5.1) and its "System Restore" the restore points are contained in the directory but before XP and its Restore Points" the directory on all NTFS volumes was used for and is still used for -
1. Distributed Link Tracking Service databases for repairing your shortcuts and linked documents. That is included in the "tracking.log" file in the directory along with other tracking events (nothing to do with the Event Viewer).
2. Content Indexing Service databases for fast file searches. This is also the source of the cidaemon.exe process: That is the content indexer itself, busy scanning your files and building its database so you can search for them quickly. the database index file in the directory is "Catalog.wci".
3. other purposes such as documenting mount points etc. but unnecessary to delve into ...
If you want to see what is in there for yourself here is a link that tells you how to access the contents but BE AWARE that the security permissions for the directory are defaulted to System only for a very good reason.
How to gain access to the System Volume Information folder
Suffice it to say that while your AV product of choice may indicate a virus in the System Volume Information directory the indication means only that it has found viral signatures in files in restore points in the system directory. NO VIRUS "created" the directories.
how to remove "system volume information" folder
Please tell me how to remove "system volume information" folder from my computer
In a manual process
I am waiting here
The "System Volume Information" folder on the main C: (Windows) drive contains the System Restore items and other backups and is used for recovering various programs and registry data. It's needed by almost all users. Since the folder and files within it are System Files, Windows won't let you delete the entire folder. It is possible to remove large amounts of system restore points from the "System Volume Information" folder by running the "Disk Cleanup" utility, or simply by turning OFF System Restore, but removing the entire folder isn't an option.
If you'd like, you can gain access to the folder by following the steps in the link below, but be careful. You didn't mention your operating system, but the link should get you headed in the right direction.
Hope this helps.
Total posts: 9 (Showing page 1 of 1)