Solved

Virus

Posted on 2003-12-02
9
340 Views
Last Modified: 2010-04-11
Hello everyone,
     I have had McAfee come up saying that there is a virus in my C:\System Volume Information\ folder, I cannot delete the file from McAfee and I don't know what to do. Any idea's.

-Neocytrix
0
Comment
Question by:neocytrix
9 Comments
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9863695
Dear neocytrix,

Are you sure if never said about the virus name ? Did it not say whether it was able to delete the file or quarantine it

Use these online scanners to see if you can get the name of the virus

online virus scanner:
---------------------

http://housecall.trendmicro.com/ 

http://security.symantec.com/

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

http://www.pcpitstop.com/antivirus/default.asp 

DOS based : http://www.f-prot.com/download/download_fpdos.html


Thanks,
Sunray
0
 
LVL 6

Accepted Solution

by:
Joseph_Moore earned 50 total points
ID: 9879421
This is on WinXP, right? The System Volume Information folder is where XP holds the System Restore files. I have seen viruses get into a SR folder also.
Read this Technet article on working in the System Volume Information folder. It is locked pretty tight, so you need to go through a few steps to get in it and delete the infected files:
http://support.microsoft.com/?kbid=309531
I would do as the Technet article says, then try and re-scan with Mcafee.

hope this helps
0
 
LVL 5

Expert Comment

by:Hypoviax
ID: 9946634
The first step i would take is to check the processes running in WINDOWS TASK MANAGER then terminate the suspect file.
Then i would attempt to delete the file specified by McAfee. If this does not work then try running the programs by sunray_2003.

Regards,

Hypoviax
0
New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

 
LVL 1

Expert Comment

by:hgottfried
ID: 9981985
Hello, there is nothing for you to terminate in the Windows Task manager as this file is residing in your "System Restore" folder.  What happens here is you either had a virus before and got rid of it or had one and didn't know it, but no matter Windows in its process to help you backed up the virus just like it would any other file if you had needed to restore it.

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Select "Turn off System Restore" or "Turn off System Restore on all drives" check box
5.      Click Apply.
6.      As noted in the message, this will delete all existing restore points. Click Yes to do this.
7.      Click OK.
8.      Proceed with what you need to do. For example, removing viruses. Restart the computer and follow the instructions in the next section to turn on System Restore.

 This MAY get rid of the virus for you, or place it in a temp folder as the restore points become deleted.

To turn it back on:

1.      Click Start.
2.      Right-click My Computer, and then click Properties.
3.      Click the System Restore tab.
4.      Clear the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
5.      Click Apply, and then click OK.

0
 
LVL 4

Expert Comment

by:mrfixitpc
ID: 10008542
What  Virus and  what  is the  exact file that it  states  is  the  error
0
 
LVL 5

Expert Comment

by:Hypoviax
ID: 12994209
In my opinion a split of points between experts should occur as a suitable response to the authors problem has been made.

Hypoviax
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every computer eventually fails. When that happens, your valuable data is only as safe as your current backup.
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This is a video that shows how the OnPage alerts system integrates into ConnectWise, how a trigger is set, how a page is sent via the trigger, and how the SENT, DELIVERED, READ & REPLIED receipts get entered into the internal tab of the ConnectWise …

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now