If adware is in my system volume information folder, can I just delete it with the program I have which is a-squared. A-squared is the one that detected it so can I just remove it with that program?

2 comments

  1. Jason P September 26th, 2009 4:40 am Reply
    #1


    System Volume Information is where System Restore keeps its checkpoints, hence the restricted access. Messing around in SVI (assuming you can gain access) could corrupt the System Restore checkpoints. If you subsequently wanted to restore up to – or to before – the SR point in question (RP154) the restore would likely fail due to a corrupted checkpoint chain.
    If you have malware detected in SVI, the simplest thing to do is to disable System Restore, reboot, then re-enable System Restore. That will delete all the checkpoints.”
    Thanks to namrehto at sysinternals

  2. Ken B September 26th, 2009 4:53 am Reply
    #2

    You should be able to remove it as long as you back it up first.
    I would check with the message board at bleepingcomputer.com though. They are very helpful and its totally free.

Leave a comment

HTML enabled

Powered by Yahoo! Answers

Powered by WordPress Lab