C:\System Volume Information...Infacted by Trojan Horse

Posted 4/28/2004 4:20 PM
#454
User avatar

Chico Member

Date Joined Nov 2016
Total Posts: 1
The file <SPAN lang=EN-US style="mso-ansi-language: EN-US">C:\System Volume Information\_restore{92CE5895-FA0B-4F05-9A9C-D6D83EA5EB80}\RP127\A0054051.exe has been infacted by the virus <SPAN lang=EN-US style="mso-ansi-language: EN-US">Trojan Horse Downloader.Braidupdate.A. I have already tryed to restart on the safe mode to remove the file, but I cannot find this file in any folder. How can I remove this virus? <br/><SPAN lang=EN-US style="mso-ansi-language: EN-US"><SPAN lang=EN-US style="mso-ansi-language: EN-US"> <br/> <br/><SPAN lang=EN-US style="mso-ansi-language: EN-US"><SPAN lang=EN-US style="mso-ansi-language: EN-US">Thanks for helping.
Posted 4/29/2004 6:25 AM
#461
User avatar

Petria Advanced member

Date Joined Nov 2016
Total Posts: 52
This is a special, protected system folder.. no antivirus can modify it.. <br/> <br/>So all you have to do to get rid of this virus (which is not active by the way, but will be if you'll use the restore function of Windows) is to disable this Windows feature... <br/> <br/>On Windows XP you can do this by right clicking on "My Computer" icon then choose Properties, System Restore and check the box: "Turn off System Restore on all drives", hit apply, restart the system and then rescan with Bullguard to be sure everything is ok. <br/> <br/>This is all :)
Posted 5/9/2004 1:54 AM
#596
User avatar

ZmQ Member

Date Joined Nov 2016
Total Posts: 2
After you turn System Restore off and restart can it then be turned back on?
Posted 5/9/2004 11:32 AM
#597
User avatar

Destroyer Advanced member

Date Joined Nov 2016
Total Posts: 135
Simple answer, Yes :smile: <br/> <br/> <br/>Restart in mabye twice just to be sure
Posted 5/9/2004 3:27 PM
#599
User avatar

ZmQ Member

Date Joined Nov 2016
Total Posts: 2
Thanks :smilewinkgrin:
Posted 4/27/2007 11:51 AM
#46561
User avatar

asaygo Advanced member

Date Joined Nov 2016
Total Posts: 42
In the BullGuard Tech Guides you can find informations regarding the System Restore: How to disable System Restore in order to delete the contents of the System Volume Information folder
Posted 4/27/2007 3:20 PM
#46567
User avatar

Tron Advanced member

Date Joined Nov 2016
Total Posts: 208
You should also consider posting a HijackThis logfile for one of the professionals to examine, just to rule out the possibility of further infection.


Posted 9/30/2007 3:08 AM
#54407
User avatar

snigam Member

Date Joined Nov 2016
Total Posts: 1
okay, one wierd question: <br/> <br/>i've got 3 partitions, one of them has Windows only, and my antivirus indicates that the system volume information in my other two drives is affected by a virus.. <br/> <br/>so if i format my windows partition and reinstall windows, will the SVI be replaced by a new one? that is, will the virus be removed?
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Friday, December 9, 2016, 8:32 PM (GMT +1)
There are a total of 61,163 posts in 13,450 threads.
In the last 3 days there were 1 new threads and 3 reply posts.

Who's online

This forum has 37,969 registered members. Please welcome our newest member, Heisenberg.
There are currently no users on-line.