Computer Support Forum

recover deleted system volume information on external drive

Question: recover deleted system volume information on external drive

Honestly don't know y I deleted it but, I was cleaning files from my drives while in Linux and I deleted the system volume folder from one of my hdds and now all my data is inaccessible. Haven't touched the drive since, would like a surefire way to get it back. Here is my set up64gb ssd Windows 7
1tb hdd internal (deleted system volume folder)
1tb external hdd 50gb Linux partition 950gb ntfs partition
Thanks in advance

Relevance 100%
Preferred Solution: recover deleted system volume information on external drive

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: recover deleted system volume information on external drive

Have you had a look at the current version of the HIRENS boot CD. this has lots of free recovery tools on it. I have used it a few times for exactly the purpose you need it for...

Go here: Download Hiren

And scroll down about 3/4 of the way and you will a download link.

hth
Tanya

2 more replies
Relevance 102.91%

Hey guys:

I'm an idiot!!! Last night I deleted my System Volume Information folder off of a Raid-0 set of hard drives. As I mentioned, this raid set is not drive with my XP on it. This is just a drive for storage of pictures, video, and other programs I prefer not to have on my C:\. I did take go as far as to turn off System Restore before deleting it. Now when I boot up I cannot access the drive at all. It tells me that "The drive is not formatted. Do I want to format it now?."

I don't want to do that and I am wondering if there is a way to create a new System Volume Information folder so I can access the drive again???

Thanks

Answer:Deleted System Volume Information Folder on a Non-Operating system drive???

I think you are connecting the dots...where there is no connection.

Deleting a system volume folder...isn't possible by me, even when system restore is not used (I always disable SR immediately after a clean install). Even though the folders are empty and I don't have SR employed, the system won't allow me to delete these empty folders.

I believe that the problem is your RAID setup...perhaps you ought to try to repair it.

Louis

2 more replies
Relevance 99.63%

I have an external hard drive where I keep things like drive images, backup files (CrashPlan), offline data, etc.

I'm beginning to get concerned about available space. I ran a report using an application called TreeSize and noticed that I have a considerable amount of space being consumed by System Volume Information, which I understand are Restore Points.



But I also have the same folder on my Drive C, so do I really need the information contained on the external HDD? I know I will not be able to delete the folder. If I do, Windows will automatically replace it. But do I need to keep this restore point information on the external HDD?

Cheers

Answer:System Volume Information on an external hard drive

There will be a "System Volume Information" folder on each drive for which system protection is enabled. It will contain data relevant only to that drive.

9 more replies
Relevance 99.63%

If an anti-virus software such as Avira tells you that it has detected Trojans in the System Volume Information of an external USB hard drive and gives you the opportunity to quarantine them - if you agree to do that will you still be able to open the drive and access your data properly ? I don't want to take a rash decision and lose access to my information.Please advise.

Answer:Trojans in External Drive System Volume Information

Quarantining the infections shouldn't affect your ability to access the drive. Why is there a System Volume on that drive?

10 more replies
Relevance 91.43%

I used baku 2 weeks ago and deleted my sytem volume information. Win xp and now no restore,no help,no run etc. Still online and still lost ????
 

Answer:I deleted system volume information

I'm not understanding your problem very well as your post is somewhat brief and hard to comprehend.

1. I'm assuming by "baku" you mean backup? Please confirm.

2. When you say you deleted your system volume information do you mean the actual folder itself, or the contents of the folder?

3. When you say "no restore" do you mean you can not now set a restore point?

Any further details you can give as to what you did and what you are trying to do would be helpful.
 

12 more replies
Relevance 88.97%

Hi!
I am running Windows 7 Enterprise with Bitlocker.
Unfortunately I ran into problems booting up and eventually it looked like the harddrive (SSD) was malfunctioning. My backup solution was fresh so I haven't given it much thought, just replaced the drive, but I would still like to know if it's possible to
recover data from the drive while it's encrypted with Bitlocker?
I have searched the net for info but none of them seem to focus on my problem; the drive itself shows no volume information, so I'm unable to run any decryption protocols on it. Therefore I'm unable to run any recovery software on it either.
I'm afraid I might've made the situation worse with my attempts at recovery, but still, any help is appreciated!

Best Regards,
Heini

More replies
Relevance 82.41%

I had deleted a folder of important files by mistake and I really need them back.
is there any program to recover them or something? Please help!:cry
 

Answer:Can I Recover Files Deleted On a External Hard Drive?

Hi

You should be able too, so long as you have not been saving more files to that exHDD as the more files you save the less likely it is that you will recover what you want, as you delete a file its flagged up as an empty block to the OS but the data is still their (caveat to this is if you use secure deletion apps) so can be recovered, that is until the data block is needed.


So try the following apps

Recuva
PC Inspector File Recovery

Do remember not to save the recovered filed to your external drive during recovery, save them to your C Drive.

If you are using the likes of Vista or Windows 7 then try right clicking the folder or drive the deleted folder was in and choose Properties > Previous Versions tab and look to see for a backup of before the folder was deleted and then double click that date to open then navigate to the folder you need and rigth click copy and paste to your desktop.

Pervious Versions is good tool but doesnt always work in XP or for external drives but worth a try.
 

1 more replies
Relevance 82.41%

Hi Is it possible to recover deleted files from an external hard drive or flash memory? If so, can someone explain how this is possible? I thought that once you had deleted a file, that was it..?

Answer:Can i recover deleted files from an external hard drive?

  
Quote: Originally Posted by Double


Hi Is it possible to recover deleted files from an external hard drive or flash memory


Not with certainty. It's hit and miss. Don't count on it.

"Deleting" in effect removes the file from the drive's "index" so it can't be found by standard means.

Specialized software may still be able to locate and recover the file if that space on the hard drive has not actually been overwritten and occupied by another file.

Recuva and GetDataBack are two such programs.

Some free software will tell you if the file can be recovered, but may make you pay to actually recover it.

The original file name may be lost.

Then there are professional data recovery services that examine the drive in a laboratory for a high fee--$1000 or more. Such services may have a higher degree of success.

I've fiddled with the free software a few times, but never had much luck.

8 more replies
Relevance 82.41%

I recently download a backup program that deleted everything off my external hard drive. There is now basically nothing on my external, so I doubt any data was overwritten. I have a Western Digital 800BB External USB 2 with FAT32. I've tried almost every program I can get a freeware/trial version of and haven't had any luck. A few of them have shown me some of the files I am interested in but are missing quite a few I want. I've also tried restoring a few .avi files that did show up and all I get is a bunch of my mp3 files oddly strung together. Any help would be greatly appreciated.
 

More replies
Relevance 82%

Hi, I accidentally deleted the volume on my 3rd hard drive and now my Windows Vista PC won't even recognize the drive. How can I fix this?

The problem started when I put my old Barracuda 160 gig drive in a usb external case and couldn't get it to work until I put the jumpers on 7-8. The problem was, it was asking me to format the drive which was full of files which I wanted to retrieve. Through a series of now obvious mistakes, I first shrunk the volume backwards, I meant to shrink only 50 MB but deleted all but 50 MB and then stupidly deleted the entire volume.

What I need now is to at least be able to have my PC recognize the drive again and to be able to restore the full volume but would ideally like to still be able to retrieve the data, if that's even possible at this point. Also, why does, or did my computer only recognize this drive in the 7-8 jumper configuration? Any help would be greatly appreciated.

Thanks,

Tony

Answer:I accidentally deleted the volume on an external drive

Hello Tony, and welcome to Vista Forums.

You might see if the method in the tutorial below may be able to work for this as well to recover it.

Partition - Recover Deleted Partitions in Windows

Hope this helps,
Shawn

1 more replies
Relevance 80.77%

Hi, i'm new in this forum. I have a problem with Sytem Volume Information in my Drive D: (239GB), enlarged from 5GB to 60GB (Check from My Defrag). and the free space down from 113 GB to 51 GB. I don't know how it works, it happen when my System is under Automatic Maintenance (in Windows 8). anyone can help with my problem ?. I want to save my disk space. I have check my disk using CHKDSK. i found error, and fix that. I check again, and found no Problems.

Answer:System Volume Information in My Hard Drive

Looks like you have all kinds of stuff resident on that drive; yes? However, I don't understand why you have a program files directory on that drive since C appears to have the OS installed. I also see that you are storing backups on your D drive and you have an additional backup folder as well. So, I am a bit perplexed by the contents of your D drive and (exactly) what you are doing with it. With that said, the only thing I can recommend is to download a free utility that will give you a "tree-view" of that drive and you can delete any large files that are unnecessary. I use the portable "Get Folder Size" or you can install "Folder Size" (from sourceforge) which gives you a pop-up view of your folder sizes as you navigate thru explorer. Good luck

6 more replies
Relevance 80.77%

I was wondering if anyone can help me please .. how one removes SVI from a non-fixed USB disk? I have system restore switched off on this drive..shows zero on scale but the disk has 623mb of SVI information possibly from a previous restore point setting..not sure where it came from Not sure if indexing is on this drive Can I remove this information... and how? TIA

Answer:How can I remove System Volume Information on a USB drive

If nothing else is on the stick, the quick, easy and painless way is to do a quick format.

Remember win 7 is going to reserve some space for file info.

1 more replies
Relevance 80.36%

Hi. I'm trying to get rid of files and this one is the main one that I have found so far that is getting stuck and not being deleted. It says that "change.log" is being used by other users.

Occasionally as well a chinese website pops up for some reason.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:33:25, on 17/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton PC Checkup\executables\mrHealthy\MrHealthy.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\S... Read more

More replies
Relevance 79.13%

I recently replaced my hard disk. The C: drive on the old disk was 350GB with 100GB free when I replaced it. I've made this partition 500GB and now there's only 20GB left.

I'm finding several files created just this month from 65Kb to 34.7GB in size. They are not all restore points from what I can tell either. I only have 1 restore point for each day over the past week, but 2 and 3 files on some days. The System Volume Information folder is now 311.8 GB in size.

Is there a way to get rid of some without clearing the restore points?

Could the System Restore configuration just be corrupted?

How can I fix this?

Answer:System Volume Information files filling hard drive

Create a new restore point then change the size allocated to system restore points.
By default Vista uses 15% of your disc space
Then delete old restore points
Try something like this in CMD as Administrator

vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=10GB

7 more replies
Relevance 79.13%

I have Vista Home Premium.
I have a separate partition (D:) which appears full. The files I have put their myself total 50% of the 120Gb partition. The other 50% I see from Treesize is about 30 files totalling 60Gb.
A typical file looks like this
D:\System Volume Information{db37075f-6b4f-11e1-b156-afc12c875f87}{3808876b-c176-4e48-b7ae-04046e6cc752}
I have turned off system restore and rebooted -as most answers suggest that these files are originating from system restore and would delete following system restore being turned off - but this has not effected the files at all.
Any idea where these files are coming from? I cannot access these files nor take ownership - so cannot manually delete.
I really need this space - I'm reaching the point of saving critical files to external drive and re-installing the O/s but want to avoid this if possible.
Any suggestions?

Answer:System information volume fields are eating my partitioned drive

To start with try the following:-
Download and Run CCleaner from here to clean out all of the temp.(rubbish) files.
enter link description here
Also download and install Smart Defrag (Free) enter link description here
You will see a noticeable difference.

9 more replies
Relevance 79.13%

I have a 232GB Hard Drive which is 97% full, I wanted to clear some stuff up so I downloaded a programme called WizTree, it told me that System Volume Information was taking up 74.4% of my hard drive space, I didn't want to start endlessly deleting files because they look pretty important, but they're taking up 168.1GB of space! Is there anyway I can decrease this number? What are these files even for?

Answer:System Volume Information - Taking up so much hard drive space?

Not sure what's implied here with ' System Volume Information '. It could be the shadowstorage where the restore points are stored. That could be easily fixed. Run the command below and post the result.

vssadmin list shadowstorage

8 more replies
Relevance 76.26%

I am looking for a program to recover or help to recover data/programs that were deleted off of a computer. It also would be good for evidence that this program had certain software istalled that should not have been there. Any ideas?

Also, if an installed program is not listed in control panel under add/remove programs...is there a way to tell when it was installed and last accessed? Any ideas would be appreciated. Also, if this is in the wrong category please feel free to move it. This is on a Win2K machine.
 

Answer:Software to recover Deleted FIles/Information

http://www.data-recovery-software.net/
http://www.file-recovery.net/
 

2 more replies
Relevance 75.44%

I accidentally deleted my portable hard drive volume when messing around with Disk Management on Windows 7. The hard drive is formatted using FAT32 and is about 120GB. Is there any way to recover it? I have all media and some important documents in there. Any help would be really appreciated.

Thank you.

Answer:Help recover deleted volume

Hi,

You can use the undelete option in a 3rd party partition manager. As long as you haven't attempted to change that partition in any way other than delete it, should work fine.

If you have a partition Manager - see if it has that option. Post back and let me know.

SIW2

9 more replies
Relevance 74.62%

A friend of mine, not me, accidently deleted a spanned volume, One of the disks is an IBM Deskstar 80GB and the other is a Maxtor 200GB with 8M Buffer. The Spanned volume was a total of 190 GB (using unallocated space from both). The volume was deleted using the MMC utility from windows. I was wondering if there is any software out there that would me, not me, my friend, recover the data that was in it.
 

Answer:Recover Deleted Spanned Volume

I would think that this is the app your looking for, but its not free. Most app's that are worth there salt aren’t.

File Scavenger
 

1 more replies
Relevance 72.16%

Hi I had 2 external hard drives connected and in disk manager I clicked delete on the wrong one? So now the drive wont show up, so I simply created a Simple volume and know it is a RAW drive? How do I recover the files there was over 100GB and some of them are really important such as records and work related stuff, it is currently a RAW partition and all the hard disk recovery softwares dont recognise it because it is a RAW drive? do i have to format it to recover the files? Please Help!?!

Answer:*Important* Accidently deleted volume in Disk Manager, how to recover?

Do not format the disk.
this would make your task more difficult or even impossible.

There are free partition recovery tools available on the net.

Question the deletion, was it your operating system or are you still able to boot into Windows. I have never been in this position but someone will post some software for you. Just don't muddle the disk any further.

If you are able to boot into Windows this link will give you an idea of what you are looking for. Hang on because I know some forum members have done this will be suggesting more software.

[email protected] Partition Recovery Freeware Toolkit.Recover Deleted Partition, Volume.Undelete NTFS,FAT,exFAT,HFS+,Ext2/Ext3.

2 more replies
Relevance 72.16%

Windows 7 is installed on C: . I want to take D: out of the system, and have it completely empty.

I have two directories on D:, System Volume Information and $Recycle Bin.

I understand I can get rid of the $Recycle Bin, but I don't know about System Volume Information.

Can I simply delete it, or is it part of the Windows Installation, or just info about the D: drive that is disposable?

Thanks!

Answer:D: drive has "System Volume Information", can I delete or move?

If you're referring to the 100 MB + of space on the C: drive, that contains vital OS boot information and should never be removed.

For clarification, could you post a screen shot of your Disk Management window.

2 more replies
Relevance 71.75%

The System Volume Information folder is taking up about 18% of one of my 2 external hard drives. (I can't remember if I have actively programmed anything to be stored in that file.) In any event, is it safe to delete some of all of the files in that SVI folder?

Thanks much!

Answer:Is it Safe to Delete Contents of System Volume Info in External Drive

Basically the system volume folder is restore points. I wouldn't really recommened deleting it. It does a lot to keep your links in order. Also is you delete it you probable wouldn't be able to open some applications on it. You can turn off system restore under system settings in control panel. But this will stop restore for you computer also.

9 more replies
Relevance 71.75%

Hi All

My external HDD has quite a lot of data contained in the system volume information folder. As system restore is not activate on this drive & the drive is used specifically for imaging purposes I take it the data relates to the Win indexing service.

As I am now using a third party search application can I now disable the windows search system & if the system is disabled will this by default empty the SVI folder.

Any relevant advice would be appreciated.

Cheers.

Ich

Answer:Disable & empty System Volume Info folder on external drive.

Windows Search stores nothing in System Volume Information.

1 more replies
Relevance 70.93%

i try to backup my laptop data using system image recovery.. In the process, the system told me that 'the backup could take up to 16 GB of disc space.' So, i just create another partition (17 GB) on my external hard disc as a backup location. The process went smoothly. But unfortunately, all my external hard disc partition has been deleted and there is only one partition (RECOVERY 31.9GB ) that include recovery data is created.. Is it any way that i can apply to get back my deleted partition?

Answer:System image recovery has deleted my external hard drive partition

Hi Fuadansari

Can you please tell us the manufacturer and the model of the hard drive that was overwritten.

I've done that process so I think that I understand what happened. Is it an Acer laptop?

The most important thing at this point is that you DO NOT WRITE ANYTHING TO THE AFFECTED DRIVE. That means do not format it or do anything that may alter the data that is currently on it.

James

3 more replies
Relevance 69.29%

Whilst trying to reformat one hard drive i didnt realise that an external hardrive was still connected. Noticing a second harddrive on the screen i just thought that xp was being weird. and like an idiot i deleted the partiton before realising. Now the drive dosnt show in my computer.

What steps can i take to make this drive accessible again?

thanks for your time
 

Answer:recover a deleted partition on external harddrive

In Disk Management, RIght click on the drive and set a partition and format it . . this will erase all data so be sure that is ok!

Right click on My Computer . . select Manage . . Disc Management
 

3 more replies
Relevance 69.29%

Hey, everyone!

Looking for some advice on getting my GB back, if possible.
I hope I'm posting in the right area.

The other day I had to do a System Restore on my Compaq (Windows XP) so far everything is working fine now. Though, I noticed my computer was running slower than usual. I checked my overall GB usage and found that it had dropped 20GB since the System Restore. My computer is currently 140GB in total and right now only 50% of it is left, making my computer run...not so quickly.

I used TreeSize and found that the missing 20GB was being used in "System Volume Information". I don't mean to sound like a newbie, but what exactly could be suddenly taking up 20GB of my space since the system restore? Is it possible for me to get it back without harming my computer? How do I go about doing that?

Someone mentioned that I should make sure it wasn't trojan/virus related, so I've run anti-virus, anti-malware, PC tuneups, etc. Everything is clean. Any advice?

Thanks so much!

EDIT: Okay well, after searching deeper into the "System Volume Information" I see that all the used GB is coming from a folder inside called "_restore{" and there must be 70+ different files inside, I'm guessing these are system restore points? Most of them are less than 1GB (though there are so many it apparently adds up) but one of them is a whopping 13.3GB by itself. What can I do about all these?

 

Answer:Help! Missing 20GB after System Restore, found in System Volume Information -- Why?

7 more replies
Relevance 69.29%

I am using Windows XP Pro and recently created a restore point in my System Restore program. This was over a month ago, and I no longer need that restore point. When I defrag with either Diskeeper or Norton Speedisk, I get a report on a good number of defragmented/defragmentable files, most of which are in the Restore folder in my System Volume Information folder. I was able to access my System Volume folder and found the offending file but hesitate to delete that file unless I can be assured that I can do so safely.

Would a simple delete be okay?

Attached is a screenshot of the folder in my Systems Information folder.
 

Answer:Safe to a Delete System Restore Folder from System Volume Information?

7 more replies
Relevance 69.29%

I experienced a serious problem over the weekend that is forcing me to restore my system using the Win7 (64 bit Home Premium) "System Image Recovery" tool. I'll cut to the chase because I cannot, unfortunately, access any of my system restore points nor is startup repair working.

My computer has 4 different hard drives. On the c: drive, I only keep the Win7 OS and my various programs. All my other files and data are stored in the other 3 HD's (my data only hard drives).

On one of these HD's I have a System Image from about 2 months ago. I would like to restore this image using the Win7 "System Image Recovery" tool. However, there are various other files and data on this HD in addition to the System Image I would like to restore.

If I use the Win7 "System Image Recovery" tool, will it only restore my c: drive (which is what I want) or will it restore all HD's to their original state from 2 months ago?

I plan on unplugging all of the HD's during the restore process except the c: drive and the backup drive containing the image. However, I do not want to lose any newer files on the backup drive containing the System Image.

Will I be able to restore my c: drive using "System Image Recovery" without losing any new files/data on my backup drive containing the recovery image?

Answer:System Image Recovery - Does it recover just the system volume or all volumes in the system?

It will only restore the drive that the image was taken from.

1 more replies
Relevance 68.88%

I had trouble defragging {dbcbca6a-9a27-11df-94f4-028037000300}{3808876b-c176-4e48-b7ae-04046e6cc752} in C:\System Volume Information using defragler. It is more than 2GB large. Is it normal for one system restore to be that large? Norton and MBAM says the my system is clean. Only 31.1 GB total used. Abou 250 GB (I think) total hard drive space

Also the tracking folder is showing weird characters:
?Cf????? ?O?8m   windellstudio15 NW?Dc`A??$??{?? =?e? ? ? ????  ?             ... Read more

Answer:ONE System File in System Volume Information more than 3GB large. Can't Defrag

Defragging does not reduce file size, it only moves files to improve speeds.

Do a disk cleanup maybe its system error storage, or something the operating system stores
Unless it is a virus that is hogging your hard drive space (Inwhich case I would do a scan with Malwarebytes anti malware from malwarebytes.org)
It could be a crucial file, but I would think it would be a bit smaller.

your hard drive has enough space to make that 3 GB look like megabytes....

Keep your eye on that file. If it continually gets bigger, chances are, it could be a virus.

7 more replies
Relevance 68.47%

there is a folder on my PC called "System Volume information" don't know how it got there, and all access to it is denied even for viewing.when i gointo safe mode to have a look or try to delete it, it is not shown, My OS is xp home, can anyone tell me anything on this

Answer:System Volume information

Do NOT delete it as Windows needs this file/folder..

2 more replies
Relevance 68.47%

hIYA FOLKS,MY FIRST POSTING - WELL HERE GOES,I HAVE A PROBLEM WITH A FOLDER OF THE ABOVE,(C:\RECYCLER-SYS VOL INFO)..I DELETED THE FOLDER BY MISTAKE,THE THING IS THAT 'TREND ANTI VIRUS' IS STATING THERE IS A SUSPICIOUS FILE THERE,SO HOW DO I GET THE FOLDER BACK IN C:/ KNOWING THAT THE FOLDER STILL EXISTS.I AM ON WINDOWS PROF XP.ALSO,A HARDWARE PROBLEM..MY MACHINE KEEPS GETTING VERY HOT,VERY.!!!!!!!..NOW.!! IS IT THE MOTOR FAN OR MAYBE SOME COMPONENT PROBLEM....THANKS PEOPLE.........WANE K....BOLTON LANCASHIRE - OF THE NORTHERN REGION
 

More replies
Relevance 68.47%

Recently my spyware programs get locked on the "System Volume Information\tracking.log" folder. They work okay in Safe Mode. I found instructions to allow access to the folder, even though Microsoft's Instructions were inaccurate. However, I deleted the file in Safe mode and it reappeared upon reboot.
 

Answer:System Volume Information

Instead of changing permissions on the folders and thus allowing malware possible access to them, just use Disk Cleanup to delete all but the last of the restore points. If the last one also is infected, make a new one (when your machine is clean, of course) and delete the previous one with Disk Cleanup.
 

3 more replies
Relevance 68.47%

I killed my Linux partition using Partition Magic, everything went as planned, however, now I have a folder under C:/ called "F Drive" which contains the contents of my Linux partitons. I however can't access or delete this folder, any ideas on why? I looked up the System Vol Info, and as far as that is concerend, I have system restore off.
 

More replies
Relevance 68.47%

Hi:

I am having problems trying to remove Trj/CI.A from the system volume information folder. I can't execute any .exe commands or even get to the command prompt (even in safe mode). My combofix results are listed below. Any help is greatly appreciated.
ComboFix 11-01-29.03 - Sports Xpress 01/30/2011 13:51:35.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.766.180 [GMT -6:00]
Running from: c:\documents and settings\Sports Xpress\My Documents\Downloads\ComboFix.exe
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}
c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}\chrome.manifest
c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}\chrome\xulcache.jar
c:\documents and settings\Sports Xpress\Appl... Read more

Answer:Trj/CI.A in system volume information

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It... Read more

2 more replies
Relevance 68.47%

My System Volume Information folder has 28 of those very large files
that take up 27.2 GB of disk space. The oldest is dated 11-01-2013. This seems to me to be too much . Is it too much? If it is too much, what could cause that to happen?

Answer:System Volume Information - Is it too big?

The System Volume Information folder contains your Windows restore points. Depending on the size of your hard drive, 27 GB isn't that much space.

You can adjust the amount of hard drive space the restore points use. In the Search Bar type Advanced then select View Advanced System Settings then click on the System Protection tab, from there you can adjust the percentage of hard drive used for restore points.

4 more replies
Relevance 68.47%

This post is my first; I'd like a second opinion from B C folks before I proceed to fool with VISTA's System Restore Points for the first time.

I run Home Premium 32-bit on a partitioned Gateway laptop with 221 GB allotted to C/ and 57 GB of C/ is in use. Of that 57 GB, 31GB is filled exclusively with -- guess what -- System Volume Information files! I'd like to prune this back a little, but only if doing so won't throw VISTA into a tizzy.

Anybody out there done this already? Anybody wanna try it first? I've searched the B C forums for this topic and haven't found one yet specifically adressing this issue. Here are my sources --

According to this page at TechRepublic:

<<http://techrepublic.com.com/5208-6230-0.html?forumID=228428&start=0&taq=rbxccnbdisc1>>

VISTA's SRP is set to delete old files after 136 years although its XP predecessor did so after a mere 90 days.

Indrajit Chatterjee's Blog 3/25/08 "Reclaiming disc space from 'system volume information' offers the following instructions:
<<http://indrajitc.wordpress.com/2008/03/25/reclaiming-disk-space-from-system-volume-information/>>

Thanks for your attention, folks.

Answer:System Volume Information

Here's a very similar link from the person I consider to be an authority on all things System Restore: http://bertk.mvps.org/html/diskspacev.htmlShouldn't be any problem.

7 more replies
Relevance 68.47%

I have an extremely large file (system volume information) which contains a file named:
"_restore (224E0294-7FFD-9D04-A63B49402B20)". In that file are daily "snapshots" of my files. Each daily snapshot is in a separate folder - consecutively numbered (example: RP460 up to RP561.

Each of these folders contain over 130mb of files and are using up my storage capacity on C drive.
Can I delete all but the last few of these folders?

Answer:System Volume Information

Quote:




Can I delete all but the last few of these folders?




NO.

By default the contents of the system volume information folder is not accessible to even an admin account. And for good reason. Any direct deletion or modification of it's contents can, and probably will, corrupt the system restore facility and render it useless.

The disk cleanup utility can delete old restore points and you can also specify how much disk space can be used but do not attempt direct modification of the folder.

Actually I would recommend setting the security attributes of the folder back to what they were to prevent accidental modification. There is really no need to to access the folder at all.

3 more replies
Relevance 68.47%

Hi,

I'm running Vista HP 64-bit on my home build PC, and I was trying to clean up my C: drive when I noticed how large the System Volume Information folder was (31Gb on a 120Gb HD). I investigated and I've tried to delete these files.

I've tried searching the problem and most of the answers are that the problem is system restore. I've turned System Restore off, so I know that these files are not associated with this. I've tried to take ownership and delete them. I've tried deleting them in Safe mode, I've tried using a file shredding software, and no joy.

I really need some advice!!!

Answer:System Volume Information

Hi -

Add TakeOwnership to your context menu. Download the .reg file, run it and allow Registry merger to occur -

http://jcgriff2.com/0x2/takeown_icac...ows7_Vista.reg

Bring up an elevated administrative cmd/DOS prompt -
START | type cmd.exe | RIGHT-click on cmd.exe above under "Programs" | select "Run as Administrator" | Paste the following -

Code:

attrib -h -s c:\system information volume\*.* /s /d

Go to the folder, RIGHT-click on it, select "Take Ownership"

See if you can open it now.

Regards. . .

jcgriff2

`

19 more replies
Relevance 68.47%

can anyone please help?for some strange reason my system volume information folder keeps growing by at least a couple of gigs every day.i have disabled system restore completley and deleted all my previous restore points.but it still keeps growing.
 

More replies
Relevance 68.47%

I am wondering what some of these files in the "system volume information" folder are.chkdsk (this is actually a folder)6373773drv.iswmdllog.datMountPointManagementRemoteDatabasetracking.logI saw these and got suspicious. Anyone know what they are?

Answer:System Volume Information

Sorry about the vagueness of my question, I've just never seen these before. I know what chkdsk is, I have never seen a folder named chkdsk though.

5 more replies
Relevance 68.47%

Is this the directory for the Windoze System Restore? If so....can it all be safely deleted? I don't use it anymore as I use GoBack exclusively.
 

Answer:C:\System Volume Information???

Yes and yes. You can clear your restore points . see here http://www.majorgeeks.com/vb/showthread.php?p=342176#post342176
 

11 more replies
Relevance 68.47%

I was defragging with defraggler and i noticed that there were a few defragmented files in System Volume Information but they were huge files which added to about 8gb. It could be more as only the fragmented files add to 8gb.

I was wondering where these files came from? They have long, random letter/number names and range from 200mb - 3gb each

Before my factory settings reset, i used to have only 1 huge file in system volume information which was ~2gb.

is it okay if i delete these files

thanks

Answer:~8-9 GB used in C:\System Volume Information\ ?

They are system restore points.

System Restore

You can safely delete all of them but the most recent one to get the space back if you like, but be aware that you won't have those points to go back to if you ever need to, except the most recent one made. They will be made again after a while, which you can then repeat if you want. Or you can just leave them be.

System Protection Restore Points - Delete

You can also change how much or how little space system restore will take up. Or just leave it like it is.

System Protection - Change Disk Space Usage

3 more replies
Relevance 68.47%

Hi guys and gals

This is just strange I have found a virus in one of my restore points but No problems are currently in existed. So I have a basic question.. How did a virus get in to my restore points? odd?

File C:\System Volume Information\_restore{736B8453-93FE-477D-9F4C-E9DBA07C5B6E}\RP400\A0039023.exe is infected by Win32:PSWtool-S [PUP], Moved to chest this is what the entry stated

After I found that I reset my System Protection. Going to create a Manuel Restore Point. and re run the select area tests.

Thanks

Answer:System Volume Information

Create a New Restore Point[/COLOR][/URL][/B] to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Restore.Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"Click Yes, then click Ok.Click Yes again when prompted with "Are you sure you want to perform these... Read more

4 more replies
Relevance 68.47%

I have this directory named System Volume Information on my hard drive. You can't even access it. So, what good is it and what is it?

Answer:System Volume Information

http://support.microsoft.com/kb/309531

2 more replies
Relevance 68.47%

My computer has been sluggish lately. I've scanned with everything. My active scan logs and HJT logs are clean and I've scanned for rootkits.

And Anivir's on access scanner has been detecting trojans in the System volume information
folder but I can't open the folder because access is denied.

This is one of three I've quarantied from the same location

C:\system volume information\_restore{082A6CE9-706C-4F27-9BC0-3693FCF3DE9E}\RP1052\
ao220720.dll

I've turned off and on system restore but that didn't seem to clear it out.

Should I try to delete this folder \RP1052\ with because that's where the 3 files were been found.

Any help would be appreciated
 

Answer:system volume information

http://support.microsoft.com/kb/263455
 

3 more replies
Relevance 68.47%

I built a new computer with a 160 gig drive in it. This drive has 2 partitions, one with Win XP Prof on it. I took my old 80 gig drive out of my old computer(which also has 2 partitions) to transfer files to the new drive. This drive had win 98 on one partition but I did not have it bootable. I've had it in the new computer for about 5 months now and want to reformat it to clean it all off. I noticed that there is a folder there that is called System Volume Information. The sub-folders are restore folders with current files in it. Why are the restore files being stored on this drive and not the new one with XP on it and is it all right to delete these files?
 

Answer:System Volume Information

I don't know why it would create the current files in those folders, but Iknow that the Vol Info on my C: drive is not accessible.

If you aren't sure what will happen if you reformat the secondary drive, just unplug it and run the PC as normal...give it some time, and if it all works properly, I wouldn't worry about it - just make sure that it is set to cable select or slave, replug it in, and reformat.

MBN
 

2 more replies
Relevance 68.47%

I've checked three of my four computers and only one of them has a folder named "RECYCLER". All the others have a folder named "Recycled", and there is the little recycle bin icon where there would otherwise be a folder icon.

If that's the case, you probably have two files in your root directory named "auto.exe" and "autorun.inf". These are malicious little buggers that seem impossible to get rid of, and they seem to be causing other types of problems in the operating system.

The only way I've been able to get them off of attached devices is to disconnect the host computer from any outside connection, i.e., cable modem, telephone. Then turn off the computer and unplug it for 30 seconds. Also, disconnect the attached device from the computer. Then plug in the host computer and boot it up. Make sure you do not have the above named files in the host. (They may be hidden in the Prefetch folder.)

Once you're sure they are completely out of the host, do the 'turn off', 'unplug', etc. cycle again. Reboot. (You may notice that the computer works a little differently. In my computer, the submenues started showing up when I run the cursor near any particular icon on the desktop. The submenues started working in other places too... but I digress.)

Recheck the host computer and verify that the two above named files are actually gone. If they are, your host computer is clean.

Here's the sad news. I still haven't figured out how to... Read more

Answer:System Volume Information

One other note... When I tried to download a file folder into the mass storage device on my laptop (from the host computer via the wireless router), BitDefender (anti-virus program) recognized "auto.exe" as a virus... I'm still researching that avenue...

4 more replies
Relevance 68.47%

what is system volume information? this has 12.6gb against it and when i opened it, it shows 12.6gb of _restore against it. when i opened restore folder, it shows folders giving size and number starting with RPxxxxx.

Answer:system volume information

madaboutplants,Some infoclick hereHTH

7 more replies
Relevance 68.47%

Is system volume information a virus? There are 2 folders in two seperate hard drives and on one i can delete it but it comes back like three seconds later. On a different hard drive i cant do anything to it at all
 

More replies
Relevance 68.47%

My system volume information folder is HUGE...it takes almost 20GB of storage, why is it so big?! can i delete stuff in it somehow? i dont want to screw anything up, so some help woul db every nice, thanks

Answer:System Volume Information

It's a very important folder used by System Restore...it's probably so big due to the amount of restore points you have but 20GB is a bit extreme.

You won't be able to access the folder unless you change the security permissions...but I would stronly advise against doing so.

What may help is if you disable System Restore which will delete the restore points, then re-enable it and change the settings.

You can do all that by right clicking 'My Computer' either on your Desktop or Start Menu then select 'Properties'. Choose the System Restore tab and you can turn it off by removing the tick and clicking Appy. When you re-enable, you can click the Settings button and reduce the amount of disk space usage.

Hope that helps :-)

6 more replies
Relevance 68.47%

I have Windows XP Home and I have a problem accessing the System Volume Information folder. My System Restore will not work at reboot, so I would like to do a manual restore with which I am familiar. I tried the cmd prompt command: C:\ cacls "C:\System Volume Information" /E /G SKYNEST:F and I get a corresponding good reply of: process dir: C:\System Volume Information. From what I know it should unlock the folder, but it doesn't. Access is still denied even after a reboot. So, after searching diligently I have come to majorgeeks.com because your community is the best! Can you get my system straightened out? Just so you know, I have no security tab under folder options in My Computer. Also, I cannot clear "Use simple file sharing" in the folder options View tab because it is not there! So, you see I have come a ways and am stuck.

I know I can do a manual restore using Windows Mini XP to access the folder from a CD, but it just seems to be such a round about way when I could just use Resore or get into the System Volume Information Folder.
 

Answer:System Volume Information

skynest said:





I have Windows XP Home and I have a problem accessing the System Volume Information folder. My System Restore will not work at reboot, so I would like to do a manual restore with which I am familiar. I tried the cmd prompt command: C:\ cacls "C:\System Volume Information" /E /G SKYNEST:F and I get a corresponding good reply of: process dir: C:\System Volume Information. From what I know it should unlock the folder, but it doesn't. Access is still denied even after a reboot. So, after searching diligently I have come to majorgeeks.com because your community is the best! Can you get my system straightened out? Just so you know, I have no security tab under folder options in My Computer. Also, I cannot clear "Use simple file sharing" in the folder options View tab because it is not there! So, you see I have come a ways and am stuck.

I know I can do a manual restore using Windows Mini XP to access the folder from a CD, but it just seems to be such a round about way when I could just use Resore or get into the System Volume Information Folder.Click to expand...

You may need to restart the computer to safe mode by pressing F8.

This is from the Microsoft site:

The following steps also work if you restart the computer to Safe mode because simple file sharing is automatically turned off when you run the computer in Safe mode.

Open My Computer, right-click the System Volume Information folder, an... Read more

10 more replies
Relevance 68.47%

Help! I have recently updated my AVG virus scan and it finds an I-worm virus sitting in my System Volume Information directory.However the virus program cannot access the folder as it can't see it!I can't see this folder in Windows, I can only see it if I go to DOS environment and dir/a:h the c: drive.I cannot access this folder as it says access is denied. Does anyone know how to access this folder? Or even make it visible to programs in Windows?I'm running Windows XP on a Celeron 2 GHz laptop and AVG version6. Thanks!Dave Woods

Answer:System Volume Information

Don't know if this is of any use..... cause don't really know what i'm talking about but....I had a folder that was causing problems a couple of months ago. I ran the virus checker and like you said it couldn't see it... I tried to manually delete it but it wouldn't let me. In the end i ran scandisk and and it found i and i was able to delete it from there.Like i said don't know if that helps but worth a try maybe :)

4 more replies
Relevance 68.47%

What the heck is in that file and why can't I open it?

In the C: drive, main area, there is a file called System Volume Information, I can't open it, it says access denied

When I defragged the HD it says that whatever the hell is in there is fragmented?

I got a torjan the other day, I thought AVG got rid of it, but AVG pops up a window every now and then saying it is still there, I think it says its in that damn folder Does AVG not detect it because the folder is blocked?

I noticed my computer is kinda slow, so how do I get in that dag folder?

Answer:System Volume Information.....

http://www.theeldergeek.com/system_v...on_folder1.htm

This is what you need to know.

after that, disable system restore and run your av

6 more replies
Relevance 68.47%

Help ! My System Volume Information folder on my PC has started increasing in size and gets bigger every time I reboot.It has now reached a size of over 20GB and still increasing. This is where all the restore points are held. I've run Norton anti-virus scan but no viruses have been found.Can this folder be recreated from scratch ?Has it somehow got corrupted ?Any ideas would be greatly appreciated.Mio

Answer:System Volume Information

You can disable system restore, reboot the machine and then set a new restore point. All the old ones will be gone.

3 more replies
Relevance 68.47%

Hi, I'd just like to know how to access system volume information on my hard drives if anyone knows how and if it's possible. Thanks.

Answer:Need help on system volume information

Windows XP Professional and Home Edition - FAT32 File System

In Windows Explorer click [Tools] [Folder Options]
Click the [View] tab, click [Show Hidden Files and Folders]
Clear [Hide protected operating system files (Recommended)] check box.
Click [Yes] on the change confirmation box and click [OK] to exit.
Double-click the System Volume Information folder to open.

Windows XP Professional using the NTFS File System on a Workgroup or Standalone Computer

In Windows Explorer click [Tools] [Folder Options]
Click the [View] tab, click [Show Hidden Files and Folders]
Clear [Hide protected operating system files (Recommended)] check box.
Click [Yes] on the change confirmation box and click [OK] to exit.
Right-click the System Volume Information folder in the root folder.
Click [Properties] and select the [Security] tab. Click [Add]
Enter the name of the user you are allowing access to the folder.
Click [OK], and then click [OK].
Double-click the System Volume Information folder to open.

Windows XP Professional Using the NTFS File System on a Domain

In Windows Explorer click [Tools] [Folder Options]
Click the [View] tab, click [Show Hidden Files and Folders]
Clear [Hide protected operating system files (Recommended)] check box.
Click [Yes] on the change confirmation box and click [OK] to exit.
Right-click the System Volume Information folder in the root folder.
Click [Properties] and select the [Security] tab. Click [Add]
Enter the name of the user y... Read more

3 more replies
Relevance 68.47%

Hi - I felt something was wrong so I ran Trend Housecall the free online virus and spyware checker. It came up with over 20 consecutive files stating trojan - spyware and all these were in D:\System Volume Information\.......\A0365396.exe to D:\System Volume Information\....\A0365416.exe.
Trend asked Do I want to fix it I responded yes
any one advise what is going on as I am receiveng numerous american based suspicious e-mails. a lot referring to Cheryl whoever that may be
regards

 

Answer:System Volume Information

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.


After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:


If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual update Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
If you cannot seem to login to an infected user account, try using a different user account ... Read more

2 more replies
Relevance 68.47%

Does anyone know WHERE I can FIND:
C:\System Volume Information\ ???

I just can't find it anywhere under WINDOWS or as System 32 subfolder. My anti-spy app, says I got all kinds of
INFESTED trojans, droppers, keyloggers etc. located there.

Answer:C:\System Volume Information\ ???

i believe its a hidden folder, make sure u make all hidden folders and OS files viewable by going to windows explorer, tools menu, folder options, vies tab

4 more replies
Relevance 68.47%

I took the ownership of System Volume Information folder.then i created a folder in it.but now i cant delete that folder.in xp i could do it but not in 7.please help me..

Answer:System Volume Information

  
Quote: Originally Posted by vajeen


I took the ownership of System Volume Information folder.then i created a folder in it.but now i cant delete that folder.in xp i could do it but not in 7.please help me..



Why on earth would you want to take ownership of "System Volume Information" and make a folder in it?

"System Volume Information" = system only and should remain hidden.

Hide it and forget about that folder, messing with "System Volume Information" could get you only deeper into trouble.

2 more replies
Relevance 68.47%

Vista is dumping System Volume information on every HDD ive got and its dumping it all over the place and i carnt defrag nore can i delete any of the files. Theres about 40gb in total..
There is no system protection enabled on the HDDs as i use Vista's backup tool once a week (then store it to a different HDD).
How can i unlock and delete these files, as it seem every other day it grows in size..

Answer:System Volume Information

Hi and welcome to TSF

First I would like you to go to "Folder Options". Click on the view tab and scroll all the way down. When you see " Simple file sharing (recommended) " uncheck that box. The go to each drive that has the System Volume Information. Right click the folder and go to the Security Tab. Click " Add... " and in the text box type in " Everyone ". Click chack names then hit Ok, Apply, and then Ok again. Then go through the folder System Volume Info -> Go through the next folder -> Delete everything that has a blue tint (meaning all the compressed folders.

* Personally I just shut off System Restore function because all it does is hug up drive space and it never fixes anything for me; If you turn it off then all the files will be deleted automatically without the above steps *

3 more replies
Relevance 68.47%

hi, i remember having viruses that couldnt be removed and heard that alot of spyware could be stored in this folder, obviously it restricts my access to it, im wondering if there is 1 way to take off this restriction so that i may access it. also curious about the permanent effects of deleting this folder. thanks

More replies
Relevance 68.47%

I have recently come up against this message:-The file or directory \System Volume Information \1 {3808876b-c176-4e48-b7ae-04046e6cc752} in corrupt and unreadable.This maeeage occures when I unlock a WesternDigital 'My Book essential 1TB' external USB Drive.I am advised to run chkdsk on this drive, but when i do windows advises me to restart windows to continue, but the drive automatically locks.Any help would be gratefully received.thanks in advance...

Answer:system volume information

It's system restore, if you disable it and reboot and then re-enable it it will most likely be fixed. If you do not use system restore then i would keep it disabled.

8 more replies
Relevance 68.47%

Hello. Im a novice so please enlighten me.

my AVG antivirus always displays this message (even though im not running the scan manually)

Threat Detected! while opening file: E:\System Volume Information\_restore{9E74D4F4-A15B-4496-A0F3-77B54401AA42}\A0032793.vbs
Virus Found VBS/small

What do i do? I have tried healing but it failed. if I press move to vault, it says object moved to vault. but then after a few minutes it pops up again.

Then another kind of threat, desktop.ini, pops up from time to time.

how seriously at threat is my laptop? it runs on xp 2000, intel celeron 1.3GHZ

THANKS SO MUCH in advance.
 

Answer:help please- system volume information

That is in the restore points

Turn off restore points, boot, turn them back on – here’s how

http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam
 

1 more replies
Relevance 68.47%

I have a virus or malware. Every time I run Ad-ware . I get malware that show up in C:\ System Volume Information.I keep removing it but it just comes back. I add my Hi-jack reporLogfile of Trend Micro HijackThis v2.0.2Scan saved at 2:30:58 PM, on 10/15/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18241)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC:\Program Files\iRacing\iRacingService.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS&#... Read more

Answer:C:\ System Volume Information

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.I get malware that show up in C:\ System Volume Information.The only way to clean that is like this:Turn off System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.RebootTurn ON System Restore, On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.UN-Check *Turn off System Restore*.Click Apply, and then click OK.I see a few other issues in this HJT log and would be glad to help you address them if you will post a fresh HJT log.Thanks

2 more replies
Relevance 68.47%

XP pro - p4 2.8AVG antivirus detecting worm (Lovsan.A) in C:\System Volume Information\_restore ......AVG will not delete this worm file.Can anyone please steer me to access this folder and delete file (Access Denied via My Computer route).Many thanksTerry

Answer:XP pro System Volume Information

The worm is hidden in your System Restore files which virus checkers don't have access (that's why you are getting the message that AVG cannot remove it.The cure is to turn off Systm Restore temporarily, run your A/V to remove the worm and then re-instate System Restore. It means you will have lost your restore points but that is a small price for getting rid of the nasties.?d

3 more replies
Relevance 68.47%

I could do with a bit of help here. While doing a bit of analysing I discovered that on my notebook the System Volume Information folder was using 12gb. This rather staggered me but I discovered this was caused by System Restore. I turned off System Restore and rebooted. This emptied the folder as I expected. I then turned it back on, set a restore point and all is fine. About 600mb now.
The thing that has me baffled though is that my desktop computer was showing zero in that folder. System restore was turned on and many restore points had been set. So where is all that information gone. I should point out that both computers are running Vista Home Premium with SP1 and all updates. I turned off System Restore, rebooted then turned System Restore on again, set a couple of restore points, but the folder is still zero. I tested a Restore point and that worked fine. I'm afraid I'm at a loss. Obviously the information is somewhere. Suggestions would be greatly appreciated.
 

Answer:System Volume Information

Read:--> How to gain access to the System Volume Information folder

Also:

Clear system restore points


Clear your existing system restore points and establish a new clean restore point:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
Select the More options tab
Choose the option to clean up system restore and OK it.
This will remove all restore points except the new one you just created.

 

5 more replies
Relevance 68.47%

In a recent attempt to clear some space on my hard disk to improve performance, I decided to perform a Treesize scan to identify the folders containing the largest amount of data. According to Treesize, the folder, "C:\System Volume Information" has a capacity of 42.3 GB and is easily the largest on my hard drive. From a search on here, it seems to be the location for System Restore points, even though I've configured that to use just 200 MB of disk space, and only the most recent System Restore point is available to return to.

I'm running Windows XP Home Edition SP2, with a 146 GB hard disk. Any suggestions as to how I can clear this space would be gratefully appreciated. Thanks.
 

Answer:C:\System Volume Information

16 more replies
Relevance 68.47%

So, I set configs to allow 111 GB for System Restore, thinking I'd buy some extra insurance, on a 1.5 TB HDD. And now looking why I can't create Drive Image backup on 250 GB Drive, when I used to. Turns out, the last "critical" update for Win7 restore point is using a whopping 70 GB of space. What's up with that? Usually the restore point directories are in the single digits. Windoze 7, Home Premium, x64.

Answer:System Volume Information 109 GB !!

If we are talking about shadows and shadowstorage, this would be very strange. Usually a shadow (restore point) is between 250MB and 1GB (approximately). Are you sure that those 70GBs are only 1 shadow. I suggest you do the following:

1. Open an elevated Command Prompt (run as admin) and type: vssadmin list shadowstorage That will show 3 numbers - Used, Allocated and Maximum. Allocated is the amount that has been reserved at this point in time and Maximum should be your 111GBs.

2. Again in Command Prompt type: vssadmin list shadows That will list all the restore points you have (on all partitions). They are dated. If you want a convenient program to look at your restore points, get Shadow Explorer.

6 more replies
Relevance 68.47%

Hey guys,

Just a quick question, I've a 80gig hard drive, partitioned in two; 52gig on C, & 24gig on D,

When I ran Treesize pro while doing a spring clean to clear some space, It shows that System Volume Information is occuping 22 GIG on my C Drive - ?!?!?!?!

What is System Volume Information within windows??

I can't open the folder within treesize, and I don't want to delete it wothout knowing what exactly it's purpose is...

Screenshot

Please help!!

Cheers

Sticker
 

Answer:System Volume Information - XP - ???

Have a look here.......

http://www.theeldergeek.com/system_volume_information_folder1.htm
Debe
 

1 more replies
Relevance 68.47%

does anyone know why w2k has system volume information ?

i know that xp holds the restore points there but w2k does not have system restore,
i have 2 files in the one on my C drive - MountPointManagerRemoteDatabase and tracking.log, all the rest just have tracking.log

ta
 

Answer:system volume information

Hi

Its part of Distributed Link Tracking (DLT) Client
http://technet.microsoft.com/en-gb/library/bb742605.aspx
 

2 more replies
Relevance 68.47%

Seems I have a problem. I left my house for about 20 minutes, come back to my computer and Norton is open saying it found and quarantined a trojan horse. I don't know how I got it, considering I was gone and everything on my computer was closed.

This was the exact file and location:

File: C:\System Volume Information\_restore{E9431B88-3A8B-4B9F-B2B1-ABBDE576F6FD}\RP339\A0202805.dll

I want to make sure there is nothing else, because with just a .dll it makes me think there is more infected files.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:31:45 PM, on 5/13/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.... Read more

Answer:C:\System Volume Information\

8 more replies
Relevance 68.47%

I have a hidden files called System Volume Information it is 2.11GB in size , does anyone know what it is and is it ok to delete ??cheersbeemerman

Answer:what is System Volume Information ??

click here

3 more replies
Relevance 68.47%

When I turn off System Restore on my partitioned D drive, there is a still a subfolder in the System Volume Information folder named: _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}, that remains. When I go to explore it, it contains many files that have long been deleted. Can I go ahead and delete this whole folder? Not the System Volume Information, but just the subfolder; _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}. BTW, shouldn't that subfolder be automatically erased upon turning the sytem restore off? Thanks
 

Answer:System Volume Information

Tranceaddict said:



When I turn off System Restore on my partitioned D drive, there is a still a subfolder in the System Volume Information folder named: _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}, that remains. When I go to explore it, it contains many files that have long been deleted. Can I go ahead and delete this whole folder? Not the System Volume Information, but just the subfolder; _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}. BTW, shouldn't that subfolder be automatically erased upon turning the sytem restore off? ThanksClick to expand...

I am not sure about the auto erasing part of the question, but you can always place the folder in your recycle bin for a bit and see if anything goes screwy (unlikely). It seems to me it is just an old restore point file. You could probably safely delete but, it is always safer to have it handy for a little while before deleting permanently.
 

2 more replies
Relevance 68.47%

I am having win7 home basic(64-bit) operating system on my laptop.In each
drive of my hard disk $RICYCLE.BIN,System volume Information and sys folders
of 0 byte size get created before some days. When I unchecked option to show hidden files from folders option folders got hidden.I tried to delete these folders but it's not working.I also tried to delete folder by taking ownership of folder form properties menu of folder.This is decreasing speed of my laptop.I am not understanding if they are system folders or due to virus.Plz reply.

More replies
Relevance 68.47%

Hi All,Plz explain what is System Volume Information and how to clean the viruses from System Volume Information.[/font][/size]Regards SSK

Answer:System Volume Information

Hello, It is a part of System Restore; the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where XP stores these points and associated information that makes them accessible. The Elder GeekCreate a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under Sys... Read more

1 more replies
Relevance 68.47%

C:\System Volume Information

I have system protection(restore) turned off.
And it has 4GB of data in C:\System Volume Information.

How can this be. It is also allowing me to go back to a restore point.

Windows 7RC 64Bit.

Answer:C:\System Volume Information

Its part of the system restore feature. So if you dont use that you could disable it and it should remove that folder.

9 more replies
Relevance 68.47%

Just installed a 2nd hard drive as a slave and I accidentally copied a bunch of files from the 1st one to the System Volume Information folder on the 2nd.

To delete these files and put them elsewhere, I have run the

cacls "G:\System Volume Information" /E /G username:F and press ENTER

routine in CMD and get

"Are you sure (Y/N)?"

even with "Y", I get "Access Denied."

Any hints? Safe mode a sure bet? I have Win XP Home, master hard disk FAT32, and new slave hard disk NTFS.
 

Answer:System Volume Information

It may be that the FAT 32 and NTFS file systems on the different drive aren't compatible. From the best of my knowledge, FAT 32 systems/drives can't write to NTFS formatted volumes or partitions. An option may be to convert your master hard drive to the NTFS file system, or to convert your slave drive to the FAT 32 system. I'm sure that there will be more members join the thread to give advice.
 

2 more replies
Relevance 68.06%

I bought my computer used and have never been able to make a System Image disc for back-up purposes and I've had some other problems with "Backup and Restore" as well. I always get this error: "The backup application could not start due to an internal error: Server execution failed (0x80080005)." By doing research I discovered that this happens because the SYSTEM does not own the "System Volume Information" file, the user does instead (me).
When I got the computer I took ownership of the entire C drive because I kept having permission problems. Now I know better and would not do that again, but I guess the only problem it caused was with "Backup and Restore" - two years on and I haven't had any other problems.
Anyways, I've tried changing ownership of System Volume Information, but it won't let me. I've found several ways to take ownership, but how can I get Windows to let me give ownership back to the SYSTEM? Or is there a way to return the file to its default state, or maybe copy a new version and delete the old one? Thanks for your help.

Here is the post where I found the solution to my backup problem:
Starting Windows 7 Backup : Server execution failed(0x80080005) ????

I apologize if I'm not supposed to post links - I'm new here

Answer:Need to give ownership of System Volume Information to SYSTEM

Links are OK as long as they're not advertising, objectionable material, solutions that would harm a computer etc.

2 more replies
Relevance 67.65%

Im trying to cleanup after my daughter opened an unknown file on messenger and infected the computer with a version of Isass.My mainproblem now is that I can't get into System volume information.Any suggestions would be appreciated.

Answer:Can't open system volume information

click heregood luck...

10 more replies
Relevance 67.65%

Is this normal?
How can I free up some space?
Thank you!

More replies
Relevance 67.65%

hey guys.
I have a problem... I am using a portable hdd.
and theres a problem- all of a sudden when I connect it to the usb, it asks me to format the drive. There are files on the drive. My guess is- it is because I deleted the "system volume information" folder via the hard disk itself, and not from windows. so now, I can't read the drive.
What can I do, to extract those files for safe keeping? PLS help

Answer:help! System volume information? format?

a fairly fail safe way is to try and put it IN a pc by removing the hdd from the case and installing it

5 more replies
Relevance 67.65%

Hello everyone. I can't access to System Volume Information on xp home, NOT PROFESSIONAL. I read Microsoft tutorials, but nothing. Could any help me, please?
A jpg of what I see.
Thankyou

Answer:System Volume Information on Xp sp3 home

Hello everyone. I can't access to System Volume Information on xp home, NOT PROFESSIONAL. I read Microsoft tutorials, but nothing. Could any help me, please?A jpg of what I see.ThankyouIs there a reason you want to access this folder? It is kept locked out because of its sensitive nature in dealing with system restore.

1 more replies
Relevance 67.65%

I have turned off "System Restore" by going to "Control Panel/System" and I also disabled the "System Restore Service". I gave myself full permission for the folder and deleted it and later on it reappeared so I gave myself permission again and deleted it again and it came back again and so on. It only takes up 20.0k so I'm not doing this to free up space it's just that I like to keep the root directory clean and it's an eyesore for me. I like things fairly perfect when it comes to my hard drive. Also I do not use System Restore because I don't mess up often but when I do it's time to find the Windows CD. Thanks in advance.
 

Answer:How do I keep System Volume Information from reappearing?

6 more replies
Relevance 67.65%

I intend to delete the file below but cannot find it on my computer ( Windows XP Pro )
# C:\System Volume Information\_restore{A9810597-5075-486E-AD8B-945DDC602D99}\RP565\A0119712.exe
Can anybody explain where this file is located and how to find it ?

Thanks

Anton ABC
 

Answer:Where to find c:\System Volume Information

10 more replies
Relevance 67.65%

Hi All
I've got this virus C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP294\A0017770.EXE and I would like to know what it does and how it appears. I note from other postings it is quite popular but no one has explained how dangerous it is.
Paul
 

Answer:what does c system volume information virus do?

7 more replies
Relevance 67.65%

As there are malware to be removed in my System Volume Information folder, I must access the folder to remove them. The solution for access, provided by MS is incomplete. It states that once I have provided access to the Hidden Files, etc, I click on Properties & then on the Security Tab. However, there is NO Security tab.I am running XP Pro SP3. Anyone have a resolution?

Answer:System Volume Information folder

The link below ahould be of some help.System Volume Information Folderhttp://www.theeldergeek.com/system_...As far as getting rid of the infected files in that folder the normal way is to turn off System Restore, restart the computer then turn on System Restore again. This will purge all of the System Restore files including the virus infected files."Make sure that you turn System Restore on again. How to turn off and turn on System Restore in Windows XPhttp://support.microsoft.com/kb/310405Tufenuf

4 more replies
Relevance 67.65%

Hey all! So first my specs: Vista Home Premium SP2,  AMD Phenom 9500 Quad-core Processor 2.20 GHz, 6GB RAM, 64 Bit OS.
 
  Ok so the problem:  My c:/ drive is filling up with unaccountable data.  Seems like its lost 120+ GB in the last couple months!  I ran WinStatDir and came up with about 290GB of "unknown" data.  Ran disk cleanup, went to "restore and shadow copies" and erased all but recent.  Gained about 12 GB. Did some research, then ran SpaceMonger (in administrator).  Came up with up 284.4 GB of unscannable data in 2 folders: c:/SystemVolumeInformation and c:/windows/system32/logfiles/Wmi/RtBackup.  the windows folder has about 6kb.  System volume information contains about 285GB!  It seems most people having this problem, it appears to be system restore backups.  I've deleted them a couple times through disk cleanup now ,but the files in systemvolumeinformation persist.  Any ideas if these are backups and if I can get rid of them?  Any help is greatly appreciated.  Thanks.
 

Answer:280 gb of data in system volume information!!!

Hi pipermac These are indeed "restore points" used by the System Restore feature of Windows. To delete them, right-click on Computer and select Properties. Click on Advanced System Settings in the left pane, and click on the System Protection tab. From there, click on the Configure... button followed by Delete at the bottom. This will delete all the current restore points. Once this is done, I suggest you to create a new one, just in case.

6 more replies
Relevance 67.65%

According to my virus checker i have a virus in the above folder but,when i try to open the folder it tells me access is denied, and if i run the virus checker manually it doesnt find it it just tells me its in there on start up

Answer:virus in system volume information

ME or XP?click here

2 more replies
Relevance 67.65%

I just finished reformatting my machine and when I run a full scan with Avast it see this in the logs "C:\System Volume Information [E] Access is denied". Doesn't Avast scan this folder? I actually get the same messege when I try and open the Sys Vol Info folder as well (double clicking on it)... As far I as I can remember I should have access to opening this folder... Any ideas?
 

Answer:System Volume Information folder

XP does not allow write access to that folder for AVs.

That's why if you discover you have a virus you need to dump your restore points to prevent reinfection.
 

2 more replies
Relevance 67.65%

I have searched the forums and found some of what I needed. Ran a complete scan and came up with 41 of these C:\SYSTEM VOLUME INFORMATION\_RESTORE{678154B0-CAC5-42FC-84FB-B848B662BEF1}\RP386\A0046563.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{678154B0-CAC5-42FC-84FB-B848B662BEF1}\RP386\A0046561.EXE

Couldn't figure out why and decided to consult those with much more knowledge than myself. Logs attached as you have requested. Not sure if/what type of issue I have. Please assist. Thank you..
Ashley.

I thought Avast was disabled and I was wrong. I couldn't get to it in time.
 

Answer:C:\system volume information\_restore

Welcome to Major Geeks!




ahauck00 said:





Ran a complete scan and came up with 41 of these C:\SYSTEM VOLUME INFORMATION\_RESTORE{678154B0-CAC5-42FC-84FB-B848B662BEF1}\RP386\A0046563.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{678154B0-CAC5-42FC-84FB-B848B662BEF1}\RP386\A0046561.EXEClick to expand...

What scan are you referring too? Do you have a log? All you are showing above are system restore points. You are not showing me any problems and your current logs are clean.

What malware problems are you currently having?
Have you had some malware issues in the past and never disabled System Restore after removing the malware?

Where is the requested log from SUPERAntiSpyware?
 

23 more replies
Relevance 67.65%

Right now System Volume Information is taking up 60GB+ on a 218GB drive. I tried limiting the size of the shadow copies but due to registry errors caused by some cleaner I can't run VSS or anything regarding System Restore. I'm not comfortable with messing with my registry, so is it okay for me to delete all the files?

Thanks.

Answer:Deleting System Volume Information Okay?

Hi welcome to the forum.
Have you tried this to see if it helps:-
How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

13 more replies
Relevance 67.65%

I know it's not recommended but I want to backup my restore points for 3 reasons. 1) In case malware wipes them out. I know W7 permissions are designed to prevent just that (which could be the problem), but this is a precaution. 2) My C drive is very small and can't hold too many restore points. Right now the RP allotted space is something like 14gb which is all I'm willing to give. 3) My PC is configured to create a restore on boot so frequent restarts of course lead to deletion of older restore points. My plan is to create a bi-weekly reminder to backup my restore points. When it reminds me I'll give myself permission to the folder, back it up, set permissions back to the way it was for security reasons. By the way, I prefer system restore over IMG backups because they are long, troublesome, and take a lot of space.

I got permission to the SVI folder but permissions won't let me copy the restore points. I went to the permissions settings of an individual restore point file and I don't even have access to the permissions. I only have access to the owner tab but it won't let me add an owner. What am I missing?
 

Answer:System Volume Information Permissions

Any suggestions?
 

1 more replies