Spyware, Viruses, & Security forum

General discussion

How to remove " System volume information" virus completely?

by bspkumar / June 4, 2008 4:36 PM PDT

> i am using panda internet security 2008
> it is detecting the virus every time i scan but cant able to remove it.

Post a reply
Discussion is locked
You are posting a reply to: How to remove " System volume information" virus completely?
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: How to remove " System volume information" virus completely?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Re: Remove System Volume Information virus
by Carol~ Forum moderator / June 4, 2008 5:09 PM PDT

bspkumar..

Is this related to your recent post? Considering the lack of information in your post, it makes it difficult to help. If you're only asking how to flush out your restore points and nothing more, the below should help:

http://www.bleepingcomputer.com/tutorials/tutorial56.html
http://www.pchell.com/virus/systemrestore.shtml

After reading "How to Disable System Restore" in the first link, scroll down the page where you see, "Deleting Restore Points". If none of the above helps, you might want to share with us exactly which virus Panda is detecting. And what you've done thus far to remove it. Knowing which system you're using might also help. The more information.. the better.

Carol

Collapse -
it was not about "system restore" ?
by bspkumar / June 5, 2008 2:51 AM PDT

Some viruses are creating a folder ( system volume information)in every drive of my Pc.

ok. if u cant undertand that tell me how to remove viruses manually.

Collapse -
More Information Would Sure Help..
by Grif Thomas Forum moderator / June 5, 2008 3:05 AM PDT

Which operating system? A

And YES, this IS about System Restore.. The System Restore program creates a "system volume information" on every drive that it is monitoring. Any and all infected files will get recreated there until you make those system restore volumes go away. To eliminate viruses from those "system volume information" folders (System Restore volumes), assuming you're using Windows XP, then RIGHT click on "My Computer", choose "Properties", then click on the "System Restore tab, and place a CHECK mark in the box next to "Turn OFF System Restore in all drives", then click on "apply", then OK.. Once that's done, restart the computer into Safe Mode..

How To Start In 'Safe Mode'

Once in Safe Mode, check to see that all "system volume information" folders are gone.. If they are not, then they have been artificially created by something.. RIGHT click on that folder, chose "Delete" to make it go away.

Hope this helps.

Grif

Collapse -
System Volume Information folder cannot delete
by perekisi / September 12, 2011 2:55 AM PDT

its saying ''cannot delete system volume information, access denied
Make sure the disk is not full or write protected.............

Collapse -
3 years old
by MarkFlax Forum moderator / September 12, 2011 3:10 AM PDT

You are posting in a discussion that is now 3 years old You would do better to create your own discussion and re-post.

Be sure to explain why you want to try and delete this protected folder and give FULL Details of the problem.

Mark

Collapse -
Actually, it is the OS that creates the ...
by Edward ODaniel / June 5, 2008 5:59 AM PDT

System volume Information" directory on every NTFS volume on the computer. NT has done this since it was first released as NY 3.1. Since XP was released the directories are also created on FAT32 partitions where they contain only the Restore Points.

With the advent of XP (NT 5.1) and its "System Restore" the restore points are contained in the directory but before XP and its Restore Points" the directory on all NTFS volumes was used for and is still used for -

1. Distributed Link Tracking Service databases for repairing your shortcuts and linked documents. That is included in the "tracking.log" file in the directory along with other tracking events (nothing to do with the Event Viewer).

2. Content Indexing Service databases for fast file searches. This is also the source of the cidaemon.exe process: That is the content indexer itself, busy scanning your files and building its database so you can search for them quickly. the database index file in the directory is "Catalog.wci".

3. other purposes such as documenting mount points etc. but unnecessary to delve into ...

If you want to see what is in there for yourself here is a link that tells you how to access the contents but BE AWARE that the security permissions for the directory are defaulted to System only for a very good reason.
How to gain access to the System Volume Information folder
http://support.microsoft.com/kb/309531/

Suffice it to say that while your AV product of choice may indicate a virus in the System Volume Information directory the indication means only that it has found viral signatures in files in restore points in the system directory. NO VIRUS "created" the directories.

Collapse -
how to remove "system volume information" folder
by Emranbu / November 2, 2013 6:06 PM PDT

Hi
Please tell me how to remove "system volume information" folder from my computer
In a manual process

I am waiting here

Collapse -
You Shouldn't...
by Grif Thomas Forum moderator / November 3, 2013 1:00 AM PDT

The "System Volume Information" folder on the main C: (Windows) drive contains the System Restore items and other backups and is used for recovering various programs and registry data. It's needed by almost all users. Since the folder and files within it are System Files, Windows won't let you delete the entire folder. It is possible to remove large amounts of system restore points from the "System Volume Information" folder by running the "Disk Cleanup" utility, or simply by turning OFF System Restore, but removing the entire folder isn't an option.

If you'd like, you can gain access to the folder by following the steps in the link below, but be careful. You didn't mention your operating system, but the link should get you headed in the right direction.

http://support.microsoft.com/kb/309531

Hope this helps.

Grif

Popular Forums
icon
Computer Help 49,613 discussions
icon
Computer Newbies 10,349 discussions
icon
Laptops 19,436 discussions
icon
Security 30,426 discussions
icon
TVs & Home Theaters 20,308 discussions
icon
Windows 10 360 discussions
icon
Phones 15,802 discussions
icon
Windows 7 7,351 discussions
icon
Networking & Wireless 14,641 discussions

Smartphone tip

Hoarding photos on your phone?

Those picture are hogging memory and could be slowing down your phone.