[Virus] System Volume Information

Published by netty5 - Last update on October 25, 2008 06:29 AM by netty5

[Virus] System Volume Information






The System Volume Information folder is used by Windows XP for storing data on system configuration and is also used by the System Restore tool to store information and restore points.
Restore points allows you to return to the previous configuration that preceded the installation of a driver or program.
Learn more: Managing Windows Restore Points
Normally the access to the System Volume Information folder is locked, but a virus can work around that.
The unlock procedure varies depending on the version of Windows XP used, disk format or network configuration.

As an example, here is the path of a virus found in the System Volume Information folder:

C:\System Volume Information\_restore{4E170950-50E0-453F-B281-59338F8EC32E}\RP16\A0003104.exe


Cleaning up the System Volume Information from viruses:

Right click on My Computer select the Properties Option.

Go to the System Restore sub menu.

Deactivate the Turn off System Restore on all drives and validate by clicking on the Ok button.



A message will inform the removal of all existing restore points.
Confirm with "Yes".

Reactivate the Turn off System Restore on all drives option and create a new restore point.
Your problem should be over.