Solved

Virus

Posted on 2003-12-02
9
339 Views
Last Modified: 2010-04-11
Hello everyone,
     I have had McAfee come up saying that there is a virus in my C:\System Volume Information\ folder, I cannot delete the file from McAfee and I don't know what to do. Any idea's.

-Neocytrix
0
Comment
Question by:neocytrix
9 Comments
 
LVL 49

Expert Comment

by:sunray_2003
Comment Utility
Dear neocytrix,

Are you sure if never said about the virus name ? Did it not say whether it was able to delete the file or quarantine it

Use these online scanners to see if you can get the name of the virus

online virus scanner:
---------------------

http://housecall.trendmicro.com/

http://security.symantec.com/

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://www.pcpitstop.com/antivirus/default.asp

DOS based : http://www.f-prot.com/download/download_fpdos.html


Thanks,
Sunray
0
 
LVL 6

Accepted Solution

by:
Joseph_Moore earned 50 total points
Comment Utility
This is on WinXP, right? The System Volume Information folder is where XP holds the System Restore files. I have seen viruses get into a SR folder also.
Read this Technet article on working in the System Volume Information folder. It is locked pretty tight, so you need to go through a few steps to get in it and delete the infected files:
http://support.microsoft.com/?kbid=309531
I would do as the Technet article says, then try and re-scan with Mcafee.

hope this helps
0
 
LVL 5

Expert Comment

by:Hypoviax
Comment Utility
The first step i would take is to check the processes running in WINDOWS TASK MANAGER then terminate the suspect file.
Then i would attempt to delete the file specified by McAfee. If this does not work then try running the programs by sunray_2003.

Regards,

Hypoviax
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 1

Expert Comment

by:hgottfried
Comment Utility
Hello, there is nothing for you to terminate in the Windows Task manager as this file is residing in your "System Restore" folder.  What happens here is you either had a virus before and got rid of it or had one and didn't know it, but no matter Windows in its process to help you backed up the virus just like it would any other file if you had needed to restore it.

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Select "Turn off System Restore" or "Turn off System Restore on all drives" check box
5.      Click Apply.
6.      As noted in the message, this will delete all existing restore points. Click Yes to do this.
7.      Click OK.
8.      Proceed with what you need to do. For example, removing viruses. Restart the computer and follow the instructions in the next section to turn on System Restore.

 This MAY get rid of the virus for you, or place it in a temp folder as the restore points become deleted.

To turn it back on:

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Clear the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
5.      Click Apply, and then click OK.

0
 
LVL 4

Expert Comment

by:mrfixitpc
Comment Utility
What  Virus and  what  is the  exact file that it  states  is  the  error
0
 
LVL 5

Expert Comment

by:Hypoviax
Comment Utility
In my opinion a split of points between experts should occur as a suitable response to the authors problem has been made.

Hypoviax
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
By this time the large percentage of day-to-day transactions have shifted to mobile banking; here are some overriding areas QAs must investigate while testing mobile banking apps.  
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now