Solved

Virus

Posted on 2003-12-02
9
342 Views
Last Modified: 2010-04-11
Hello everyone,
     I have had McAfee come up saying that there is a virus in my C:\System Volume Information\ folder, I cannot delete the file from McAfee and I don't know what to do. Any idea's.

-Neocytrix
0
Comment
Question by:neocytrix
9 Comments
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9863695
Dear neocytrix,

Are you sure if never said about the virus name ? Did it not say whether it was able to delete the file or quarantine it

Use these online scanners to see if you can get the name of the virus

online virus scanner:
---------------------

http://housecall.trendmicro.com/ 

http://security.symantec.com/

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://www.pcpitstop.com/antivirus/default.asp 

DOS based : http://www.f-prot.com/download/download_fpdos.html


Thanks,
Sunray
0
 
LVL 6

Accepted Solution

by:
Joseph_Moore earned 50 total points
ID: 9879421
This is on WinXP, right? The System Volume Information folder is where XP holds the System Restore files. I have seen viruses get into a SR folder also.
Read this Technet article on working in the System Volume Information folder. It is locked pretty tight, so you need to go through a few steps to get in it and delete the infected files:
http://support.microsoft.com/?kbid=309531
I would do as the Technet article says, then try and re-scan with Mcafee.

hope this helps
0
 
LVL 5

Expert Comment

by:Hypoviax
ID: 9946634
The first step i would take is to check the processes running in WINDOWS TASK MANAGER then terminate the suspect file.
Then i would attempt to delete the file specified by McAfee. If this does not work then try running the programs by sunray_2003.

Regards,

Hypoviax
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 1

Expert Comment

by:hgottfried
ID: 9981985
Hello, there is nothing for you to terminate in the Windows Task manager as this file is residing in your "System Restore" folder.  What happens here is you either had a virus before and got rid of it or had one and didn't know it, but no matter Windows in its process to help you backed up the virus just like it would any other file if you had needed to restore it.

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Select "Turn off System Restore" or "Turn off System Restore on all drives" check box
5.      Click Apply.
6.      As noted in the message, this will delete all existing restore points. Click Yes to do this.
7.      Click OK.
8.      Proceed with what you need to do. For example, removing viruses. Restart the computer and follow the instructions in the next section to turn on System Restore.

 This MAY get rid of the virus for you, or place it in a temp folder as the restore points become deleted.

To turn it back on:

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Clear the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
5.      Click Apply, and then click OK.

0
 
LVL 4

Expert Comment

by:mrfixitpc
ID: 10008542
What  Virus and  what  is the  exact file that it  states  is  the  error
0
 
LVL 5

Expert Comment

by:Hypoviax
ID: 12994209
In my opinion a split of points between experts should occur as a suitable response to the authors problem has been made.

Hypoviax
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Security Overview Report 8 62
Domain admin accounts get locked out 35 88
exchange, email gateway 2 51
sftp vs SendThisFile 9 27
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question