Virus

Hello everyone,
     I have had McAfee come up saying that there is a virus in my C:\System Volume Information\ folder, I cannot delete the file from McAfee and I don't know what to do. Any idea's.

-Neocytrix
neocytrixAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

sunray_2003Commented:
Dear neocytrix,

Are you sure if never said about the virus name ? Did it not say whether it was able to delete the file or quarantine it

Use these online scanners to see if you can get the name of the virus

online virus scanner:
---------------------

http://housecall.trendmicro.com/ 

http://security.symantec.com/

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://www.pcpitstop.com/antivirus/default.asp 

DOS based : http://www.f-prot.com/download/download_fpdos.html


Thanks,
Sunray
0
Joseph_MooreCommented:
This is on WinXP, right? The System Volume Information folder is where XP holds the System Restore files. I have seen viruses get into a SR folder also.
Read this Technet article on working in the System Volume Information folder. It is locked pretty tight, so you need to go through a few steps to get in it and delete the infected files:
http://support.microsoft.com/?kbid=309531
I would do as the Technet article says, then try and re-scan with Mcafee.

hope this helps
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
HypoviaxCommented:
The first step i would take is to check the processes running in WINDOWS TASK MANAGER then terminate the suspect file.
Then i would attempt to delete the file specified by McAfee. If this does not work then try running the programs by sunray_2003.

Regards,

Hypoviax
0
The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

hgottfriedCommented:
Hello, there is nothing for you to terminate in the Windows Task manager as this file is residing in your "System Restore" folder.  What happens here is you either had a virus before and got rid of it or had one and didn't know it, but no matter Windows in its process to help you backed up the virus just like it would any other file if you had needed to restore it.

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Select "Turn off System Restore" or "Turn off System Restore on all drives" check box
5.      Click Apply.
6.      As noted in the message, this will delete all existing restore points. Click Yes to do this.
7.      Click OK.
8.      Proceed with what you need to do. For example, removing viruses. Restart the computer and follow the instructions in the next section to turn on System Restore.

 This MAY get rid of the virus for you, or place it in a temp folder as the restore points become deleted.

To turn it back on:

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Clear the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
5.      Click Apply, and then click OK.

0
mrfixitpcCommented:
What  Virus and  what  is the  exact file that it  states  is  the  error
0
HypoviaxCommented:
In my opinion a split of points between experts should occur as a suitable response to the authors problem has been made.

Hypoviax
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.