Computer Support Forum

Deleted System Volume Information Folder on a Non-Operating system drive???

Question: Deleted System Volume Information Folder on a Non-Operating system drive???

Hey guys:

I'm an idiot!!! Last night I deleted my System Volume Information folder off of a Raid-0 set of hard drives. As I mentioned, this raid set is not drive with my XP on it. This is just a drive for storage of pictures, video, and other programs I prefer not to have on my C:\. I did take go as far as to turn off System Restore before deleting it. Now when I boot up I cannot access the drive at all. It tells me that "The drive is not formatted. Do I want to format it now?."

I don't want to do that and I am wondering if there is a way to create a new System Volume Information folder so I can access the drive again???

Thanks

Relevance 100%
Preferred Solution: Deleted System Volume Information Folder on a Non-Operating system drive???

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Deleted System Volume Information Folder on a Non-Operating system drive???

I think you are connecting the dots...where there is no connection.

Deleting a system volume folder...isn't possible by me, even when system restore is not used (I always disable SR immediately after a clean install). Even though the folders are empty and I don't have SR employed, the system won't allow me to delete these empty folders.

I believe that the problem is your RAID setup...perhaps you ought to try to repair it.

Louis

2 more replies
Relevance 83.23%

Honestly don't know y I deleted it but, I was cleaning files from my drives while in Linux and I deleted the system volume folder from one of my hdds and now all my data is inaccessible. Haven't touched the drive since, would like a surefire way to get it back. Here is my set up64gb ssd Windows 7
1tb hdd internal (deleted system volume folder)
1tb external hdd 50gb Linux partition 950gb ntfs partition
Thanks in advance

Answer:recover deleted system volume information on external drive

Have you had a look at the current version of the HIRENS boot CD. this has lots of free recovery tools on it. I have used it a few times for exactly the purpose you need it for...

Go here: Download Hiren

And scroll down about 3/4 of the way and you will a download link.

hth
Tanya

2 more replies
Relevance 79.17%

Hi. I'm trying to get rid of files and this one is the main one that I have found so far that is getting stuck and not being deleted. It says that "change.log" is being used by other users.

Occasionally as well a chinese website pops up for some reason.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:33:25, on 17/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton PC Checkup\executables\mrHealthy\MrHealthy.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\S... Read more

More replies
Relevance 78.01%

I am using Windows XP Pro and recently created a restore point in my System Restore program. This was over a month ago, and I no longer need that restore point. When I defrag with either Diskeeper or Norton Speedisk, I get a report on a good number of defragmented/defragmentable files, most of which are in the Restore folder in my System Volume Information folder. I was able to access my System Volume folder and found the offending file but hesitate to delete that file unless I can be assured that I can do so safely.

Would a simple delete be okay?

Attached is a screenshot of the folder in my Systems Information folder.
 

Answer:Safe to a Delete System Restore Folder from System Volume Information?

7 more replies
Relevance 75.98%

I used baku 2 weeks ago and deleted my sytem volume information. Win xp and now no restore,no help,no run etc. Still online and still lost ????
 

Answer:I deleted system volume information

I'm not understanding your problem very well as your post is somewhat brief and hard to comprehend.

1. I'm assuming by "baku" you mean backup? Please confirm.

2. When you say you deleted your system volume information do you mean the actual folder itself, or the contents of the folder?

3. When you say "no restore" do you mean you can not now set a restore point?

Any further details you can give as to what you did and what you are trying to do would be helpful.
 

12 more replies
Relevance 103.73%

Moved a few drives from a server running winxp to one running 2k.
Any special way you guys know of to delete these folders? I cannot uncheck the 'Hidden' attribute because it is greyed out.
 

Answer:System Volume Information folder

turn off system restore

http://support.microsoft.com/default.aspx?scid=kb;en-us;309531
 

4 more replies
Relevance 103.73%

Hello to all,
I have a folder called system volume information on all my partitions and when I try to open it I get a message saying "access denied".
Can anyone explain what it is and should it be there?
 

Answer:What is system volume information folder?

This is where XP stores System Restore information. The inaccessibility is related to your drive being formatted in NTFS, I think, since I have one drive that is FAT32 and one that is NTFS, and the FAT32 allows me to see the contents of the folder you are talking about, whereas the other does not.
 

2 more replies
Relevance 103.73%

Hi,

I have a 40gb hd. Found a folder on it called 'System Volume Information'. It's 3.5gb

Is this where all my sys restore info goes? Explorer wont let me look at the files

Any ideas?
cheers

Answer:System Volume Information folder

i believe u r correct. really wanna find out since it wont let u in is delete all but the most recent restore point in disk clean up and see what the size of the folder is afterwards. that is alot of restore points to be using up 3.5 gigs and my restores fail neways when i try to go back to more than a week or 2 prior. so i would reclaim ur disc space to use for better things than holding useless old restore points.

2 more replies
Relevance 103.73%

Hello all!

I've screwed up, I don't know how it happened but I was moving around some stuff and something happened with the open windows (got stucked to the cursor) and when I got it to stop (I've got a new mouse with some small buttons on the side, and I've not managed to get used to them .. however I will disable those)

Well the problem is that when I got to unhook that window from my cursor my 300Gb + mp3 folder was gone .. man it almost gave me a heartattack, cause I've been working on that thing for years basically ...

I found it, it's somehow inside the "D:\system volume information" folder, and if I dragg it out to the root of the D drive it dissapears from the sys vol dir, but doesn't show up in the root at the D drive .. ?? and then if I go out from the sys vol dir and go back in again (basically refresh) then there it is again ..

summary: ... cannot move my mp3 folder back to the D:\ folder since it accidently got moved to d:\system volume information ..

please help .. I'm nervous like a cat on a hot tin roof

Thanks

//Ken1

Answer:system volume information folder

  
Quote: Originally Posted by Ken1


Hello all!

I've screwed up, I don't know how it happened but I was moving around some stuff and something happened with the open windows (got stucked to the cursor) and when I got it to stop (I've got a new mouse with some small buttons on the side, and I've not managed to get used to them .. however I will disable those)

Well the problem is that when I got to unhook that window from my cursor my 300Gb + mp3 folder was gone .. man it almost gave me a heartattack, cause I've been working on that thing for years basically ...

I found it, it's somehow inside the "D:\system volume information" folder, and if I dragg it out to the root of the D drive it dissapears from the sys vol dir, but doesn't show up in the root at the D drive .. ?? and then if I go out from the sys vol dir and go back in again (basically refresh) then there it is again ..

summary: ... cannot move my mp3 folder back to the D:\ folder since it accidently got moved to d:\system volume information ..

please help .. I'm nervous like a cat on a hot tin roof

Thanks

//Ken1


Lets try the easy way first. Just go to back up and restore, to a point prior to the problem, and restore. If you are not sure how thats done just follow instructions below:



Just go to help and information, and type back up and restore, follow instructions. You will be good to go in no time. In the case of problems, just return and we will... Read more

9 more replies
Relevance 103.73%

hi

i'm on win2k pro and have ntfs file system; i just installed an additional 300g seagate on my pc as storage; however, i notice that it doesnt have a system volume information folder like all my other hd's; should i worry? in the past, after i create a partition to set it up, this hidden folder shows after a reboot except this time

i wonder why

thanks
 

Answer:no system volume information folder on new hd

Check Device Manager to see if the drive is designated as "removable".

You need only worry if you want System Restore to monitor that drive so that you can restore it. That may not be necessary in this case.
 

3 more replies
Relevance 103.73%

C:\System Volume Information" /E /G Zombie :F

None of the cmd commands would work at all I've tried everything and its says the commands aren't real.

The command above is my example it did nothing.

I have a virus inside my Sysem Volume Information folder I wanted to see what VirusTotal.com would say if I sent the file to them. But dumb enough I'm not allowed to get into that folder even know I can see it. The OS doesn't allow me to just click into the folder its self.

C:\System Volume Information\_restore{7DC0BD25-810A-4646-9B02-25E7BB3740C2}\RP38\A0014125.exe (The A0014125.exe is the virus and the only file in the folder.

Anybody have any ideas what I should do?

Because this "virus" or spying .exe file came from FreeMake Video Converter.

Yet, I can only view with add now Quarantined Items.

Answer:Trying to get into System Volume Information Folder.

How to gain access to the System Volume Information folder

3 more replies
Relevance 103.73%

I just finished reformatting my machine and when I run a full scan with Avast it see this in the logs "C:\System Volume Information [E] Access is denied". Doesn't Avast scan this folder? I actually get the same messege when I try and open the Sys Vol Info folder as well (double clicking on it)... As far I as I can remember I should have access to opening this folder... Any ideas?
 

Answer:System Volume Information folder

XP does not allow write access to that folder for AVs.

That's why if you discover you have a virus you need to dump your restore points to prevent reinfection.
 

2 more replies
Relevance 103.73%

I tried to format my 2GB USB drive in NTFS Format in WINDOWS XP. When i format the drive, it was formatted successfully, but inside the formatted drive one of the folder is created named as "System Volume Information". I tried to delete the folder, it says "Access Denied" also remove my USB drive safely but it show and error like "the Generic Volume is used in another program...". why it will happens, the folder "System Volume Information" is a virus?.. how can i overcome this problem... reply me as soon as possible.. thanks to all...

Answer:System Volume Information Folder in USB?

It's not a virus.

It's a system folder present on most NTFS volumes and is used primarily for system restore points (this folder is where they're saved to). It's intentionally set up so you can't simply delete it. To do that, you'll have to give yourself ownership of the folder and then assign yourself full access permissions.

If this folder bothers you, you might format your USB stick as FAT32 instead.

3 more replies
Relevance 103.73%

As there are malware to be removed in my System Volume Information folder, I must access the folder to remove them. The solution for access, provided by MS is incomplete. It states that once I have provided access to the Hidden Files, etc, I click on Properties & then on the Security Tab. However, there is NO Security tab.I am running XP Pro SP3. Anyone have a resolution?

Answer:System Volume Information folder

The link below ahould be of some help.System Volume Information Folderhttp://www.theeldergeek.com/system_...As far as getting rid of the infected files in that folder the normal way is to turn off System Restore, restart the computer then turn on System Restore again. This will purge all of the System Restore files including the virus infected files."Make sure that you turn System Restore on again. How to turn off and turn on System Restore in Windows XPhttp://support.microsoft.com/kb/310405Tufenuf

4 more replies
Relevance 103.73%

Hi,

I have two partitions on my disk. One for the the operating system (xp pro) and the other one for data and so on. The other day decided to unmark the "hide system files and folders" option, just to try and experience.

Now, on my data partition root appeared a folder that names itself "system volume information". I cant acess that folder, and the system alerts me of some kind of nfts allocation table error, or something like that, when i try to acees it
What is that folder? Should i be worried?

Regards...
 

Answer:System Volume Information Folder

System Volume Information Folder

How to gain access to the System Volume Information folder
 

3 more replies
Relevance 103.73%

I cannot see any sign of the System Volume Information folder in Explorer or any other file browser program I try.
It is not grayed out, it is not there. When I enter Tools, Folder Options, View, the Show hidden files and folders
is selected. As a matter of fact, if I then select Do not show hidden files and folders, the next time I open View,
it has gone back to Show hidden files and folders!
Even though hidden folders should therefore show, the SVI folder remains hidden.
I have examined my system by booting with BartPE XPE and there is the SVI folder with all the restore points, etc.
I am using XPPRO, NTFS.
Thanks in advance for any help.
Ken Gash

Answer:Cannot See System Volume Information Folder

How to Show Hidden Files in Xp:http://www.bleepingcomputer.com/forums/t/43032/how-to-show-hidden-files-in-xp/

4 more replies
Relevance 103.73%

Is it safe to delete the hidden System Volume Information Folder if I am not using the system restore feature under Windows XP Pro?
 

More replies
Relevance 102.5%

When I first bought my 1TB Iomega Network Drive, I tried to do a copy or clone or something of my entire hard-drive. It didn't work out well, because I was doing it wirelessly and about half-way through every time, it crashed. I could never get it to finish. I went through and tried to delete all the files in the folder I saved them into (called backups) and was able to delete nearly everything (some things I had to right-click and go to properties and uncheck "Read-Only" to make it go away) but for some reason I cannot get rid of the folder leftover called "System Volume Information." I tried unchecking "Read-Only," but it doesn't seem to help. I tried also using a program that allows you to "Take Ownership," but that doesn't help either.Please see the photos and the contents of the folder:<a href="http://s167.photobucket.com/albums/u122/heavyjavadrinker/internet/?action=view&amp;current=3rd-folder.jpg" target="_blank"><img src="http://i167.photobucket.com/albums/u122/heavyjavadrinker/internet/3rd-folder.jpg" border="0" alt="Photobucket"></a>

Answer:How to delete SYSTEM VOLUME INFORMATION FOLDER

You can delete the contents of the System Volume Information folders, but not the folders themselves. If you don't use system restore just disable it. All restore points will be deleted immediately.

8 more replies
Relevance 102.5%

I have 2 x patitions on my Notebook which runs WinXp Sp2. The C:\ drive is around 14GB and the D:\ which is around 16GB. When I right click on my C:\ Drive it says that I have less than 1GB free space. This is after I have tidied up the drive. I have around 5 Gb free on the D:\ Drive. If I try and analyse the C:\ with Disk Defragmenter, it gives an error saying that C:\System Volume Information file is corrupt. I believe that the C:\ drive has maybe 6GB of free space but currently the performance is very slow as it thinks it has very little space. Whenever, I try and clean up the disk, it won't let me. How can I fix this c:\system Volume information file so that I can get the system to recognise the free space on the c:\ drive?

Answer:system volume information folder corruption

Try this.How to Turn On and Turn Off System Restore in Windows XPhttp://support.microsoft.com/kb/310...

8 more replies
Relevance 102.5%

Hello, everyone. I have a HJT log for you guys to take a look at. I got a message from my AVG telling me I had a threat detected, and it came up under my E:/System Volume Information (E:/ is a secondary drive) with four different files saying A0051366.exe. AVG was able to get rid of one of these files, but the other three say they aren't accessible. I'm not sure how to access that folder or those files. I figured I'd run a HijackThis log too, to make sure everything else was going okay.Here's the log, and many thanks in advance:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:57:54 PM, on 4/29/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\Program Files\Common Files\Java\Jav... Read more

Answer:HJT Log and a trojan in System Volume Information folder

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

4 more replies
Relevance 102.5%

How can I view the System Volume Information folder?
 

Answer:How can I view the System Volume Information folder?

Right-click, Properties. Give yourself permission under the Security tab.
 

1 more replies
Relevance 102.5%

i have a problem with the spybot.worm.gen virus and McAfee is telling me that the virus is located in the System Volume Information folder. However, even when I uncheck to show all folders and files, I cannot see it. I have searched over and over and cannot put a location on it. What can I do??? Many thanks!
 

Answer:Can't find folder, C:/System Volume Information

8 more replies
Relevance 102.5%

Does anyone know how I can get access to the System Volume Information folder to delete Trojan horse Dialer.8.P that is in my secondry E: drive? If I try to open it I am denied permission.AVG Resident shield found the virus and said to run AVG for Windows but it did not find anything. SpyBot S&D and Avast both found nothing either (not sure whether they scan this folder anyway).

Answer:Access to System Volume Information folder

click here good luck

5 more replies
Relevance 102.5%

I've got this Keylog-Briss virus in my system volume information folder. Maybe I'm wrong, but doesn't that folder pertain to my restore points and whatnot? If so, I'm pretty sure that McAfee can't scan that folder because of access rights. So how do I get in there and get it out?
 

Answer:Virus in system volume information folder. How do I get rid of it?

Turn off system restore by following instructions here
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039 for Xp
or here
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239 for ME

That will purge the restore folder and clear any malware that has been put in there. Then reboot & then re-enable sytem restore & create a new restore point.
 

1 more replies
Relevance 102.5%

Dear gurus,
My antivirus detected (in Windows XP drived computer) Trojan.PWS.Panda.20 in System Volume Information folder.
The messages are:
C:\System Volume Information\_restore(8C5911F4-B9DB-47F2-B998-767C59C667B6)\RP178\A0059154.exe\gziped.gz is infected by Trojan.PWS.Panda.20
and
C:\System Volume Information\_restore(8C5911F4-B9DB-47F2-B998-767C59C667B6)\RP178\A0059154.exe &#8211; archive contains infected objects.

How dangerows this infection and how can I cure it?
 

Answer:Trojan in System Volume Information folder -what to do?.

Turn off System Restore, then turn it back on. That usually flushes those out.
 

3 more replies
Relevance 102.5%

Is it normal for a brand new external drive bought in year 2013 to have a system volume information folder that is created in 2012? I thought the folder should be the date it is first plug into a computer?

Answer:Question regarding system volume information folder

The folder would keep the time stamp of when it was created. It's not unheard of, the seller may have had it a long time or the vendor they got it from. I have bought new drives with a year-old production date.

3 more replies
Relevance 102.5%

Hi. I recently installed a dual boot system with Windows 7 64 bit on one partition of my 1tb "C:" drive & Windows XP Pro 32 bit on the other half of the drive. I also have a "D:" drive that I use for storing "My Document's" & lot lot of other non system files. It's basically a backup drive in case my "C:" drive crashes. I also have a 500gb removeable hard drive "H:" where I store the "official" PC backup created by Windows 7 (In case the "D:" drive crashes). Windows doesn't seem to realise that this is a removeable drive & has put the System Volume Information folder on it, along with $Recycle.bin, they are also on the "D:" drive. How do I get rid of these folders off both disks & do I need to somehow let Windows know the my "H:" drive is removeable, thanks.

Answer:Remove System Volume Information Folder.

First you should disable System Restore on external drive. System Restoreonly protects operating system files so there is no need to have itrunning on drives or partitions that contain only data files and/orbackup images.Use Control Panel - System and go to the System Restore Second now that they have been created you may find that they are difficult to delete while the system is running as these are system files.The easiest way is to boot up with a live CD and delete the files that way.___________________________________________? When everything else fails, read the instructions.

17 more replies
Relevance 102.5%

I cannot see any sign of the System Volume Information folder in Explorer or any other file browser program I try.
It is not grayed out, it is not there. When I enter Tools, Folder Options, View, the Show hidden files and folders is selected. As a matter of fact, if I then select Do not show hidden files and folders, the next time I open View, it has gone back to Show hidden files and folders!
Even though hidden folders should therefore show, the SVI folder remains hidden.
I have examined my system by booting with BartPE XPE and there is the SVI folder with all the restore points, etc.
I am using XPPRO, NTFS.
Thanks in advance for any help.
Ken Gash
 

Answer:Solved: System Volume Information folder

10 more replies
Relevance 102.5%

I have been noticing recently, my C drive gets occupied fully even if there are no bigger programs installed.
Out of 150gb, after uninstalling few programs, the space left was 30gb. Day by day it started decreasing and i saw 20gb today.

I used the disk cleanup tool and it shows only 100mb after selecting all fields.

I was worried still that space was not freeing and ran this program WinDirStat. Here are the screenshots.


System Volume information folder occupies 75% of space - meaning 100gb.
There are lot of files which were around 1gb - 2gb and they are created from 2013.

Can somebody tell me why 100 gb? I read that this service is important but why is it taking this much of space..please help to remove these unwanted older files if any.

FYI, I tried below options after googling and also searching in this forum:
Used disk clean up tool and selected more options > system restore and shadow copies > deleteDisabling and Enabling System restoreDeleting shadow copies through VSSAdmin Delete Shadows commandVirus scan in System Volume Information folder (after taking ownership of that folder) through Kaspersky and ESET SSManual delete of the files.Selecting delete option in System Protection > ConfigureChanging maximum usage to some x%

I have tried all these methods but still those files are existing. Please help

Answer:System Volume Information folder occupied 100 gb

System Volume Information contains:
System Restore pointsDistributed Link Tracking Service databases for repairing your shortcuts and linked documents.Content Indexing Service databases for fast file searchesInformation used by the Volume Shadow Copy.

Since you cannot delete anything from this folder while Windows is running. The quick way is to delete the whole folder using Linux Slacko Puppy.
Download the ISO (160MB) :Slacko Puppy Linux . Click one of the link shown on screen shot #1.Create a bootable USB Using Rufus - Create bootable USB drives the easy wayBoot from USB, the screen should look like the screen shot. From the bottom left #2 of the screen. The HDs mounted as sda1, sda2 ... and one of these is your C: Drive.Find the System Volume Information, right click and delete it.Disconnect the USB and reboot Windows, a new System Volume Information folder should be created

14 more replies
Relevance 102.5%

I use an external portable hard drive for backups of my downloaded programs and system backup (not scheduled just manual backups). There is an empty folder "System Volume Information" but i can't remove it.

Answer:Unwanted System Volume Information folder

  
Quote: Originally Posted by LM2008


I use an external portable hard drive for backups of my downloaded programs and system backup (not scheduled just manual backups). There is an empty folder "System Volume Information" but i can't remove it.


That probably came with the drive. And it may not be empty - just hidden files. I would not delete it.

4 more replies
Relevance 102.5%

Win7 SP1
My System Volume folder is gigantic right now, almost 10GB.

I thought I could decrease that by deleting some older restore points with CrapCleaner.

When I looked at the SR points in CC, there is only one there, the most receont one, created today.

Is that possible---one restore point ten GB in size?

Or---has something gone wrong? If so, any way to fix it?

Anyone have an idea what could be going wrong with that--a 10 GB SV folder with only one restore point in it?

Of course, one solution would be to turn off system restore, so that everything in that folder is deleted, then start it again. However, if something goes wrong with the computer, that SR point could be a lifesaver, necessary to restore the system.

--------------
One other question--can the contents of the SVI folder be copied to an external HDD for backup (I have taken ownership of the folder, and given myself full permission on it and subfolders), before turning SR off and on? Then if necessary to use that saved SR point, copy those contents back to the SVI folder of the original drive?

Answer:Giant System Volume Information Folder

Well, you can actually start system restore and then click "Choose a different restore point" to display the other available points, see this tut.

System Restore

You can also a 3rd party tool like QRM Plus manager to take a look at the points.

How To Delete Individual Restore Points In Windows 7

Its possible the previous restore points got deleted for some reason or theres insufficient space allotted to them. You can set that space this way.

System Protection - Change Disk Space Usage

9 more replies
Relevance 102.5%

In one it swelled from 40 something MB to almost 800MB.here is a HijackThis Log:Logfile of HijackThis v1.99.1Scan saved at 10:13:37 PM, on 6/23/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AntiVir PersonalEdition Classic\sched.exeC:\Program Files\AntiVir PersonalEdition Classic\avguard.exeC:\WINDOWS\system32\CTsvcCDA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\... Read more

Answer:Huge System Volume Information Folder

Hello IHateAbnormalities and welcome to the BC HijackThis forum. I see no signs of viruses or malware in this log. It is clean.

The System Volume Information folder is where system restore points are stored. The disk space used is a percentage of the disk size so 800MB is not an unreasonable amount of space for this folder to use. You can specify the amount of space used by system restore by going to the Control Panel and then the System applet. Click on the System Restore tab to see and/or set the current settings.

Cheers.

OT

3 more replies
Relevance 102.5%

Could someone help me understand how to access the System Volume Information in VISTA and if deleting very old versions of that folder can be harmful?Thank youThierry6644

Answer:Accessing System volume information folder

Look HERE for info on how to access. It describes the process in XP but it is the same for Vista. I do not beleive that you can delete this folder but in the event that you are successful, look for Windows to recreate it again. It is a system protected folder. It is quite OK to leave this folder in place. Just delete the contents and keep system restore off. This will ensure the folder remains empty.

2 more replies
Relevance 102.5%

Hi..

I have quite a small hard drive and am constantly battling for space on my c drive.

I use windirstat a lot and it tells me that a lot of items are in the system volume information _restore folder.. and some are taking a lot of space.

I checked Google and it says that this is the folder where my restore information is stored, now the thing is that I have disabled system restore. It was deactivated as soon as I started running short on space which was an year back.

So why is this folder still there? Is there a "safe" was to delete this?

Thanks

Answer:system volume information _restore folder

If SR is disabled...the folder is empty.

It cannot be deleted permanently, it's a Windows system folder and loads when Windows loads.

Louis

8 more replies
Relevance 102.5%

i'm running WinXP Home, SP3...last install of hotfixes was 3 or 4 days ago.

don't have much cause to go into my SVI, but wanted to because i keep getting a popup from Kaspersky that a worm (Win.MSSQL.worm.Helkern) has tried to access a port & been blocked. after a scan, Kaspersky Internet Security 2010 will let me access my SVI folder (i have it set to wait to do anything, if anything's found, until i tell it), if it finds anything, then i can delete, move to other folders, etc. once i leave, i'm denied access. "...not accessible. Access is denied" i can right click, but not open it.

i want to be able to access when I want to, not when "someone" feels like letting me. i searched the forums & the threads it returned weren't what i need to know. one referenced installing explorerXP, but that thread was from 2000/2001, with another reply from 2004, & wasn't comfortable trying that.

also, System Restore keeps changing the size of the restore points. i had manually set it at 2gb, now it's back up to 10gb. i have System Restore turned on for my internal drive but have it turned off on my external storage drive & occasionally i'll find that it's also been reset to max & turned back on.

i Googled & went to microsoft & got this:




Using CACLS with Windows XP Home Edition Using the NTFS File System
In Windows XP Home Edition with the NTFS file system, you can also use ... Read more

Answer:i can't open my System Volume Information folder

cake said:





i want to be able to access when I want to, not when "someone" feels like letting me.Click to expand...

Start > Run and type "cmd" and press ENTER key
Type "cd C:\" and press ENTER key
Type the following line ...
cacls "C:\System Volume Information" /E /G cake:F
and press ENTER key.
Type "exit" and press ENTER key.

Now you should be able to access System Volume Information.
 

3 more replies
Relevance 102.5%

First question, the winre.wim file is at 96% fragmented and I cannot defrag the system information folder. How can I get that fragmented file to defrag?

Second question, I have unchecked the hidden system folder so I can try and delete the system volume folder, which didn't work either, now I recheck the settings so the hidden files are hidden but now the system information folder is still showing, it won't go back to hidden, now what?

Thanks for and help.

More replies
Relevance 102.5%

Note: See Additional Information at the bottom first.

This is not an emergency at this time. I'm trying to understand it for future use, when it /could/ be an emergency.

I'm using Windows XP Pro SP2 (FAT32, not NTFS). When following Charlie White's "Windows Crashed? Here's Help" tutorial (3/14/02) [http://webcast.broadcastnewsroom.com...e.jsp?id=8658] to restore my crashed C: drive, I came to the part where he says "Open the System Volume Information folder." However, when I opened it, it was empty! I have done this same procedure before, and the folder was loaded with files, which I used as instructed in the tutorial, but this time the folder was empty. Somehow these files seem to have been deleted.

Here are the relevant instructions:
===============
1. Open My Computer
2. Click on the Tools menu, then click Folder Options.
3. Click the View tab.
4. Under Hidden files and folders, click to select Show hidden files and folders, and then click to clear the Hide protected operating system files (Recommended) check box.
5. Click Yes when the dialog box that confirms that you want to display these files appears.
In My Computer, Double-click the drive where you installed Windows XP (usually Drive C) to display a list of the folders. then double-click on the "System Volume Information" folder. This folder contains the system restore points stored on your computer. The folders will look similar to this:
_restore{EE42BEB8-700A-495F... Read more

More replies
Relevance 101.27%

Avast found a trojan in this location. Infected file is A0004750.exe. Not familiar with this folder, its significance or the files therein and their significance, so what action to take? Simply delete, or? Thanks.

Answer:Trojan in System Volume Information folder - What action to take?

System Volume Information refers to your System Restore files.  Basically, Avast is finding an old virus that may have already been removed, but Windows still has a copy of it stored in the System Restore.  To get rid of it, you can follow these steps...Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files.  This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)1. Turn off System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.2. Restart your computer.3. Turn ON System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.UN-Check Turn off System Restore.Click Apply, and then click OK.System Restore will now be active again.And if you have any other problems/concerns, you are more than welcome to read through this:http://www.computerhope.com/forum/index.php/topic,46313.0.html

1 more replies
Relevance 101.27%

I need to reinstall XP. I have 2 drives and they both used to have XP one XP32 and the other XP64. Now I've replaced the XP64 with vista64 for testing DX10 mainly. I usually boot the XP64 and backup all my docs/programs/windows folders and files in a folder called ROOT. I did this in vista OK but I can't delete a the System Volume Information folder thats now 7gig. I usually have no problem deleting this in XP64 but vista just wont let me delete it. System restore is OFF for the XP32 drive in system protection. I have tried enabling it rebooting and then disabling it and rebooting as that was supposed to automatically remove the folder. But that didn't work. I've tried taking ownership, I've even tried takedown/cacls from a dosbox, Please help. The more I use Vista the more I hate it and thats a first for me I was even OK with WindowsME when it first came out. I had noticed that vistaSP1 took almost 7 minutes to MOVE (yes move, not copy) my docs/progs/windows folders into another folder on a samsung F1 512Gig SATA2 drive that usually takes XP a few seconds.
 

More replies
Relevance 101.27%

in my computer all the hard drives show a recycler and a system volume information folder.even when i insert a pendrive into my computer these two folders are shown. when i delet them it disappears only to come back after a few seconds. is this something to worry?moreover, when i turn on my computer the desktop icons are not the actual ones but after some seconds it becomes ok. please help

Answer:procreating receycler and System volume information folder

Hi .

I think you meant...recreating, not procreating . In any case, I understand the question.

Those folders automatically appear on any drive (other than optical) which is attached/installed on a system...it's the way Windows operates.

So there is nothing to worry about and they are system files/folders which are there for a reason.

Same for the icon thing, nothing to worry about...perfectly normal, it takes a while for things to get settled.

Louis

1 more replies
Relevance 101.27%

I did google a few times but couldn't find a way to solve. I'm using Windows 7 pro x64 (I think I upgraded from windows 7 home edition). I had same problem last week but while I was cleaning out some stuff windows was updated so I had to restart....and then there suddenly was 17 gbs free space. But ever since last update my HDD is down to attachments.

I'm on laptop with followings:

ASUS N61JQ-X1 16-Inch Laptop
1.6 GHz Intel Core i7-720QM Quad-Core Processor
4GB DDR3
320GB HDD
Windows 7 Home Premium

I'm using TuneUp Utilities 2011 (luckily the new guys who took over and messed up TuneUp stuff decided not to mess with anything before 2012 version) with Avast. As you guys can see from my attachments, Windows folder and System Volume Information alone are taking 50+ Gbs. I'm also wondering if I need all these crabs with amd64-microsoft-naturallanguages-blahblahblah? I have 84000 files of these craps. I do keep it hibernation which is about 3gbs. I moved system restore point to external HDD so no back up whatsoever in C drive, all games except few, which are located in D drive, are located in external HDD.

Is there any way I can possibly clean up from windows and system volume information without harming my computer? btw, I didn't do a single format ever since I bought this computer because it still runs smoothly. The only thing that's bothering me right now is C drive space, and I don't want to format because I'm going to grab a new machine for programming at th... Read more

Answer:Window folder and System Volume information too large.

Note: I see you moved System Restore to another drive, no idea how that affects the following! Follow it regardless.

Avast Bug

Please read https://forum.avast.com/index.php?topic=162041.0
Also check https://forum.avast.com/index.php?topic=166697.0

Avast sets System Restore disk usage % to 50.

You can try:
- go to control panel-> programs and features -> Avast -> change
- remove the component NG (down below).
- change % back to 10% (windows default) or whatever you like it
- restart
- check if % is what you set
- check restore points (seems this NG delete old restore points when run out of space)
- manually create a restore point if there are none
- open command prompt ->vssadmin list shadowstorage
- see how much space it takes.

You can also try uninstalling Grimefighter if above won't solve your problem.

For Windows folder:
Did you run Disk Cleanup yet?

7 more replies
Relevance 101.27%

I was browsing a web page and suddenly firefox gave me an security alert that my computer might be in danger therefore all my harddrives should be scanned.Unfortunately , I clicked OK.After that a fake online-scanner webpage came out , according to that web-page it was scanning my harddrives in order to find the viruses.So I immediately closed that fake web-page within 5 or 6 seconds and turned off Adsl modem and disconnected from internet.Although I do not have problems with my computer at this moment ; no slowdowns , ram and cpu usage is normal , I am still not sure whether my computer is infected by any kind of viruses or not.I made a full scan with malwarebytes and kaspersky internet security 2010 (trial version) in safe mode.No viruses found.But I would like to indicate that during scanning with kaspersky ,the scanning process stucked at 91% ,and I was able to complete the scanning process by stopping and then resuming the scan.So should I generate a HijackThis log now or what prodecure should I follow?I also have another question to ask: I have windows 7 installed as OS.I checked the System Volume Information folders for all the partitions for a possible virus infection.I have C: D: (my first harddisk)and G: (my second harddisk) partitions.I've seen that regarding the D: and G: partitions ,for System Volume Information subfolders (SPP etc..), only SYSTEM has the permission (full control) . On the other hand , regarding the C: ,for the subfolders(SPP ,System Rest... Read more

Answer:Am I infected?And a question about System Volume Information folder

Hello.

Are you experiencing any symptoms that lead you to believe that you may be infected?

As for the SVI folders, you should not alter those permissions.

~Blade

3 more replies
Relevance 101.27%

on delete it show "this folder is in used by another process"

Answer:Cant delete XP System Volume Information folder files

Don't try to delete System Volume Information! The "format" command is a quicker way to get the same result.

8 more replies
Relevance 101.27%

On my Dell Windows 7 laptop (Studio 1555) I have the System Volume Information showing (despite checking "hide system files" and hide hidden folder options enabled). The folder is also accessable from my admin account (not the root admin but the admin of the PC).

Dell Studio 1555
Windows 7 SP1 x64 (all updates installed)
Norton Internet Security 2013.

Answer:System Volume Information folder showing on my Dell PC

I've done a factory re-install of Windows and the folders are still showing.  I think it's showing by default for that particular Dell model.

1 more replies
Relevance 100.04%

I had a 160 gig drive partitioned into one 20 gig drive (for the system) and the rest a separate partition for data. I used Partition Magic to combine the drives into one - I combined them into C and chose the option to put the contents of the other drive into a folder on C. Now, inside this folder on C is the System Volume Information folder that was on the other partition, and I can't delete it. Is there another way to delete this folder?
 

Answer:deleting System Volume Information folder after using Partition Magic

You need to change the permissions on the folder and give yourself full control.
 

3 more replies
Relevance 100.04%

Hi,
i'm suspect it had been infected since it turn into blue screen and it reboot once, right after that my laptop acting strange with the following symptoms:

1. There is these additional folder in C:/ which are Recycler & System volume information which would appear again after reboot even it were deleted.

2. I was once able to trace that svchost.exe to run in C:/winxp/system32/ locking the folder System volume information by using Unlocker but unable to run for second time.

3. The svchost.exe is using great amount of memory usage (49,000K) as shown in Task Manager.

4. As i'm browsing Internet, Outlook express and Windows Messenger would pop out automatically without i'm clicking it.

5. When i'm browsing using Firefox, it would appear another unknown webpage for about 1 second before display the correct webpage.

6. I'm using Kaspersky Internet security (chinese version) but could not detect any virus thread .

7. Folder in Windows explorer would display a pop up showing the details of the folder even the view type is tiles.

Appreciate your help in advance
DDS (Ver_10-12-12.02) - NTFSx86
Run by Admin at 14:00:14.98 on 04-Jan-11
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.1248 [GMT 8:00]

FW: ZoneAlarm Firewall *Enabled*

============== Running Processes ===============

C:\WINXP\system32\svchost -k DcomLaunch
svchost.exe
C:\WINXP\System32\svchost.exe ... Read more

Answer:Couldn't delete svchost.exe in system volume information folder

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

11 more replies
Relevance 100.04%

i have just recently installed avast antivirus. the first scan came up with 2 viruses. i deleted the first one because it just infected a game. the second, i didnt, because i dont know what harm it could do to my computer.

the scan came up with:

c:/system volume information\_restore{05779BB2...SomeMoreNumbers....34.des is infected with Win32:sdbot_47

i didnt delete it yet. what can i do???

before installing avast, i have mcafee antivir installed but the virus didnt show up.

currently, these are on my computer: mcafee antivirus, avast, zone alarm, ad aware, spybot. i just downloaded all of these 2 days ago except for mcafee which i have had forever.

Answer:System Volume Information Folder Infected With Win32:sdbot

Hi some info here......... http://www3.ca.com/securityadvisor/pest/pe...px?id=453088763 it also appeers that it is in your system restore,you might have to disable system restore to delete it..... Hope this helps...

1 more replies
Relevance 100.04%

This is really bothering me. I disabled the System Restore function, but my SVI folder still contains over 10GB of data! And I find it hard to believe that the indexing service uses up this much space... so, what can I do to free up all this space?
 

Answer:System Volume Information folder taking up over 10GB of space

7 more replies
Relevance 100.04%

Over the last two months, for no apparent reason, the SVI grew 44 GB, eating up precious HD space. For what I can see the system is creating Restore Points at a pace exceeding one each 7 days or each time a system update is made.
I need to a) eliminate about 32 GB of restore points (averaging 3.5 GB each) since Nov 2014 and b) set restore point pace back to normal.
Thanks in advance

Answer:SYSTEM VOLUME INFORMATION folder grew 50% in 2 months. Need to trim

Check the registry entry shown in This Post

Personally I reckon it's best to disable system restore entirely and make regular system image backups.

7 more replies
Relevance 100.04%

Hello friends!

I am working with Windows XP SP2. I am facing a problem in accessing the folder alled "Syatem Volume Information". I found this folder in all the drives of my HDD, but whenever I click in any of them using Windows Explorer, I get an error saying "System Volume Information is not accessable, Access is denied".

I have disabled the System Restore feature and I guess this folder is used to store files of System Restore. Even after disabling System Restore, there are files left in this folder which is using a good amount of my HDD space.

Please tell me as to how can I access the contents of this folder and is it safe to delete whatever is in that folder. Moreover, as I already disabled the system restore feature, is there a way to completely remove this folder.

Thank you.
 

Answer:Solved: Problem to access System Volume Information Folder?

Hi,

Yes, the SVI (System Volume Information) folder is where SR (System Restore) restore points are stored. SR will place a SVI folder on every partition it sees. This will include external hard drives and some flash drives. There is no way to permanently remove the SVI folder, other than hiding the partition with 3ed party partitioning software. Normally disabling SR empties the SVI folder.

Here are instruction on how to access the SVI folder.
http://bertk.mvps.org/html/tips.html#SRFileLocation

If the Indexing Service is turned on you will see a catalog.wci folder in the SVI folder.
 

3 more replies
Relevance 100.04%

Hi, and thanks in advance for any help. I definitely have a little spyware on this computer. It's Windows XP. It only manifests itself by either turning my master wave volume all the way down or random audio ads that come from nowhere. Also Internet Explorer windows open infrequently with ads out of nowhere.

I've run Malwarebytes Anti-Malware, rkill, SuperAntiSpyware, and Spybot Search and Destroy and they pick up nothing. Hitman is the only thing to pick up two problems (labeled "smss.exe" and "services.exe") in the C:\System Volume Information\Microsoft folder. I've gained access to it by changing view and security settings and tried to manually delete the two files (which are labeled as "File Loaders" and "Black Internet"). It always says 'access is denied,' even when using Unlocker. Any attempt to delete upon reboot using Unlocker hasn't worked.

Hitman finds them, says it's removing them, and then says they will be removed upon reboot. I reboot and either one or both are still there. Any ideas?

Incidentally, when it starts up after rebooting, Spybot picks up that 'an important registry entry has been changed' and asks if I want to allow the change to the entry "BootExecute. Old data: autocheck autochk *\bootdelete. New data: autocheck autochk *\" I've tried both allowing it and denying it, and the trojans are still there.

Thanks for any help!

Answer:How do I delete services.exe and smss.exe from my System Volume Information folder?

Hello, the C:\System Volume Information\Microsoft folder is the System Restore Point folder.Now you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Restore.Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"Click... Read more

33 more replies
Relevance 100.04%

I'm on a Windows XP computer. My C drive (which is main) has a total of 19.5 GB of space but I only have 192 KB of free space left! The hidden System Volume Information folder is taking up 14.3 GB of space! Meaning I am only using like 5 GB for program and personal files. And as we all know, you can't just directly delete the System Volume Information folder since it has something to do with the System Restore stuff (which is turned off!) I have tried every method on the internet to help me, but nothing is working! I tried installing CCleaner but that can't be installed as I only have 192 KB left on the C drive... and when I try to download it into a flash drive and install it from there to use the program, it won't work... I NEED TO GET RID OF THIS SYSTEM VOLUME INFORMATION folder. I think I've come to a point where I don't care if I screw up the system restore by directly deleting the folder. I NEED THOSE 14.3 GB. Is there ANY safe way to get rid of it? I can't even start a new restore point...

Also another problem I'm having is whenever I drag, cut, or copy a folder or item from any of the drives on My Computer, it freezes.

I'll be VERY thankful to those who help!
 

Answer:How to remove SYSTEM VOLUME INFORMATION folder? [Please help, it's driving me INSANE]

10 more replies
Relevance 100.04%

I am unable to rid my system of a trojan since it is located in the System Volume Information folder which I am unable to access. I've researched methods of gaining access to this area, but have still been unsuccessful. Any suggestions or assistance would be greatly appreciated. Thank you!

Here is the excerpt from my Avira AntiVirus scan log denoting the location of the trojan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\System Volume Information\_restore{04376BDB-457D-47BC-A091-B7E57E45A466}\RP6\A0000419.dll
[DETECTION] Is the TR/Fakeinit.17408 Trojan
C:\System Volume Information\_restore{04376BDB-457D-47BC-A091-B7E57E45A466}\RP8\A0000715.dll
[DETECTION] Is the TR/Fakeinit.17408 Trojan
C:\WINDOWS\system32\ndisdrv.sys
[DETECTION] Contains recognition pattern of the RKIT/Tiny.HL root kit

Next, here is my HijackThis scan log:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 11:41:09 PM, on 01.21.10
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system3... Read more

More replies
Relevance 100.04%

okay, so I think i got this virus a while ago, but the pop-ups werent too bad. so i would just ignore them (i know that probably wasnt the best idea) but now they are super annoying and i really want to get rid of this stupid virus or whatever it is. I have ran, Malwarebytes, Spybot Search & Destroy, and Avast, and so far only Symantec Antivirus has been able to detect the virus. Im not the best with figuring out things on the computer, so i think im gonna need a lot of help!
 

More replies
Relevance 99.22%

i have windows xp pro sp2. some days ago, i installed avast antivirus. and with avast, after you install it, it does a quick scan of your hard drive upon boot up. the scan starts before i log in to windows (so its just the blue screen and the scanning). it is said that the scanning only happens once. avast managed to find 2 infected files. i deleted the other one. the second one was this:c:/system volume information\_restore{05779BB2...SomeMoreNumbers....34.des is infected with Win32:sdbot_47 [trj]

i didnt delete that file because i was afraid that something wrong might happen.
so after researching and asking people about it, i have been adviced to disable system restore and do a scan in safe mode.

i didnt disable the system restore because all my restore points would be deleted and there are people who adviced against this.

so i did a full scan on safe mode. some files could not be scanned. actually, around 288 of them. an example is...
local settings/temp/..... unable to scan:CAB archive is corrupted
what does this mean?
others are unable to scan:archive is password protected.

after the scan, there werent any infected files found! i am quite sure that the win32:sdbot is still there because i have not deleted it! why wasnt avast able to find this? i have done online scans too but it came up with nothing.

also, when i run spybot, these 2 files always come up after deleting them lots of ... Read more

Answer:System Volume Information Folder Infected With Win32:sdbot... Trojan?

You SHOULD turn off restore points to flush that out, then boot and then turn them on to set a clean restore point - log looks fineHere's howhttp://service1.symantec.com/SUPPORT/tsgen...src=sec_doc_nam

1 more replies
Relevance 96.35%

I was wondering if anyone can help me please .. how one removes SVI from a non-fixed USB disk? I have system restore switched off on this drive..shows zero on scale but the disk has 623mb of SVI information possibly from a previous restore point setting..not sure where it came from Not sure if indexing is on this drive Can I remove this information... and how? TIA

Answer:How can I remove System Volume Information on a USB drive

If nothing else is on the stick, the quick, easy and painless way is to do a quick format.

Remember win 7 is going to reserve some space for file info.

1 more replies
Relevance 96.35%

Hi, i'm new in this forum. I have a problem with Sytem Volume Information in my Drive D: (239GB), enlarged from 5GB to 60GB (Check from My Defrag). and the free space down from 113 GB to 51 GB. I don't know how it works, it happen when my System is under Automatic Maintenance (in Windows 8). anyone can help with my problem ?. I want to save my disk space. I have check my disk using CHKDSK. i found error, and fix that. I check again, and found no Problems.

Answer:System Volume Information in My Hard Drive

Looks like you have all kinds of stuff resident on that drive; yes? However, I don't understand why you have a program files directory on that drive since C appears to have the OS installed. I also see that you are storing backups on your D drive and you have an additional backup folder as well. So, I am a bit perplexed by the contents of your D drive and (exactly) what you are doing with it. With that said, the only thing I can recommend is to download a free utility that will give you a "tree-view" of that drive and you can delete any large files that are unnecessary. I use the portable "Get Folder Size" or you can install "Folder Size" (from sourceforge) which gives you a pop-up view of your folder sizes as you navigate thru explorer. Good luck

6 more replies
Relevance 95.53%

I have an external hard drive where I keep things like drive images, backup files (CrashPlan), offline data, etc.

I'm beginning to get concerned about available space. I ran a report using an application called TreeSize and noticed that I have a considerable amount of space being consumed by System Volume Information, which I understand are Restore Points.



But I also have the same folder on my Drive C, so do I really need the information contained on the external HDD? I know I will not be able to delete the folder. If I do, Windows will automatically replace it. But do I need to keep this restore point information on the external HDD?

Cheers

Answer:System Volume Information on an external hard drive

There will be a "System Volume Information" folder on each drive for which system protection is enabled. It will contain data relevant only to that drive.

9 more replies
Relevance 95.53%

If an anti-virus software such as Avira tells you that it has detected Trojans in the System Volume Information of an external USB hard drive and gives you the opportunity to quarantine them - if you agree to do that will you still be able to open the drive and access your data properly ? I don't want to take a rash decision and lose access to my information.Please advise.

Answer:Trojans in External Drive System Volume Information

Quarantining the infections shouldn't affect your ability to access the drive. Why is there a System Volume on that drive?

10 more replies
Relevance 94.3%

I have a 232GB Hard Drive which is 97% full, I wanted to clear some stuff up so I downloaded a programme called WizTree, it told me that System Volume Information was taking up 74.4% of my hard drive space, I didn't want to start endlessly deleting files because they look pretty important, but they're taking up 168.1GB of space! Is there anyway I can decrease this number? What are these files even for?

Answer:System Volume Information - Taking up so much hard drive space?

Not sure what's implied here with ' System Volume Information '. It could be the shadowstorage where the restore points are stored. That could be easily fixed. Run the command below and post the result.

vssadmin list shadowstorage

8 more replies
Relevance 94.3%

I recently replaced my hard disk. The C: drive on the old disk was 350GB with 100GB free when I replaced it. I've made this partition 500GB and now there's only 20GB left.

I'm finding several files created just this month from 65Kb to 34.7GB in size. They are not all restore points from what I can tell either. I only have 1 restore point for each day over the past week, but 2 and 3 files on some days. The System Volume Information folder is now 311.8 GB in size.

Is there a way to get rid of some without clearing the restore points?

Could the System Restore configuration just be corrupted?

How can I fix this?

Answer:System Volume Information files filling hard drive

Create a new restore point then change the size allocated to system restore points.
By default Vista uses 15% of your disc space
Then delete old restore points
Try something like this in CMD as Administrator

vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=10GB

7 more replies
Relevance 94.3%

I have Vista Home Premium.
I have a separate partition (D:) which appears full. The files I have put their myself total 50% of the 120Gb partition. The other 50% I see from Treesize is about 30 files totalling 60Gb.
A typical file looks like this
D:\System Volume Information{db37075f-6b4f-11e1-b156-afc12c875f87}{3808876b-c176-4e48-b7ae-04046e6cc752}
I have turned off system restore and rebooted -as most answers suggest that these files are originating from system restore and would delete following system restore being turned off - but this has not effected the files at all.
Any idea where these files are coming from? I cannot access these files nor take ownership - so cannot manually delete.
I really need this space - I'm reaching the point of saving critical files to external drive and re-installing the O/s but want to avoid this if possible.
Any suggestions?

Answer:System information volume fields are eating my partitioned drive

To start with try the following:-
Download and Run CCleaner from here to clean out all of the temp.(rubbish) files.
enter link description here
Also download and install Smart Defrag (Free) enter link description here
You will see a noticeable difference.

9 more replies
Relevance 92.66%

Hey, everyone!

Looking for some advice on getting my GB back, if possible.
I hope I'm posting in the right area.

The other day I had to do a System Restore on my Compaq (Windows XP) so far everything is working fine now. Though, I noticed my computer was running slower than usual. I checked my overall GB usage and found that it had dropped 20GB since the System Restore. My computer is currently 140GB in total and right now only 50% of it is left, making my computer run...not so quickly.

I used TreeSize and found that the missing 20GB was being used in "System Volume Information". I don't mean to sound like a newbie, but what exactly could be suddenly taking up 20GB of my space since the system restore? Is it possible for me to get it back without harming my computer? How do I go about doing that?

Someone mentioned that I should make sure it wasn't trojan/virus related, so I've run anti-virus, anti-malware, PC tuneups, etc. Everything is clean. Any advice?

Thanks so much!

EDIT: Okay well, after searching deeper into the "System Volume Information" I see that all the used GB is coming from a folder inside called "_restore{" and there must be 70+ different files inside, I'm guessing these are system restore points? Most of them are less than 1GB (though there are so many it apparently adds up) but one of them is a whopping 13.3GB by itself. What can I do about all these?

 

Answer:Help! Missing 20GB after System Restore, found in System Volume Information -- Why?

7 more replies
Relevance 92.25%

I had trouble defragging {dbcbca6a-9a27-11df-94f4-028037000300}{3808876b-c176-4e48-b7ae-04046e6cc752} in C:\System Volume Information using defragler. It is more than 2GB large. Is it normal for one system restore to be that large? Norton and MBAM says the my system is clean. Only 31.1 GB total used. Abou 250 GB (I think) total hard drive space

Also the tracking folder is showing weird characters:
?Cf????? ?O?8m   windellstudio15 NW?Dc`A??$??{?? =?e? ? ? ????  ?             ... Read more

Answer:ONE System File in System Volume Information more than 3GB large. Can't Defrag

Defragging does not reduce file size, it only moves files to improve speeds.

Do a disk cleanup maybe its system error storage, or something the operating system stores
Unless it is a virus that is hogging your hard drive space (Inwhich case I would do a scan with Malwarebytes anti malware from malwarebytes.org)
It could be a crucial file, but I would think it would be a bit smaller.

your hard drive has enough space to make that 3 GB look like megabytes....

Keep your eye on that file. If it continually gets bigger, chances are, it could be a virus.

7 more replies
Relevance 91.43%

Transferred all files to the D drive & windows 10 operating system included! Deleted it from my hard drive thinking that I was just clearing space on my hard drive. Now the computers control panel & everything is on the d drive. Tried to reinstall windows 10 with the disk but computer won't install it because it's saying it's already installed. Help!!!!

Answer:Accidentally deleted Windows 10 operating system from my hard drive, I can't get it to reinstall?

Originally Posted by Windows Central Question Transferred all files to the D drive & windows 10 operating system included! Deleted it from my hard drive thinking that I was just clearing space on my hard drive. Now the computers control panel & everything is on the d drive. Tried to reinstall windows 10 with the disk but computer won't install it because it's saying it's already installed. Help!!!! .
How do you know everything is on D? You can access normally your pc?
If yes, swap drive letters in Control Panel -> Administrative -> Manage Computer -> Disk management

2 more replies
Relevance 91.43%

I bought my computer used and have never been able to make a System Image disc for back-up purposes and I've had some other problems with "Backup and Restore" as well. I always get this error: "The backup application could not start due to an internal error: Server execution failed (0x80080005)." By doing research I discovered that this happens because the SYSTEM does not own the "System Volume Information" file, the user does instead (me).
When I got the computer I took ownership of the entire C drive because I kept having permission problems. Now I know better and would not do that again, but I guess the only problem it caused was with "Backup and Restore" - two years on and I haven't had any other problems.
Anyways, I've tried changing ownership of System Volume Information, but it won't let me. I've found several ways to take ownership, but how can I get Windows to let me give ownership back to the SYSTEM? Or is there a way to return the file to its default state, or maybe copy a new version and delete the old one? Thanks for your help.

Here is the post where I found the solution to my backup problem:
Starting Windows 7 Backup : Server execution failed(0x80080005) ????

I apologize if I'm not supposed to post links - I'm new here

Answer:Need to give ownership of System Volume Information to SYSTEM

Links are OK as long as they're not advertising, objectionable material, solutions that would harm a computer etc.

2 more replies
Relevance 91.02%

Hi all.

So i upgraded from xp to 7.So i am now on windows 7.The first thing i did is download and install Avira,I updated it and did a full system scan.It found around 20-30 viruses,trojans,malware,irc bots in "C:\System Volume Information\_restore{5E03FC9B-BBC4-4FA8-96F7-D40CC10DBA4A}\RP7"

So i let avira delete all the detected files in RP7 folder.I went to the folder and found like icons,.dll files,etc from xp..So i deleted every file in the RP7 folder..


Is it safe to delete the folder "System Volume Information" located in my C:\ driver?

Thank You.

Answer:Is it safe to delete the" System Volume Information" folder.

You are not addressing the root problem. The System Volume Information folder stores the restore points created by System Restore on enabled drives. These points let you take your system back to an earlier point of time, should it start misbehaving and you cannot rectify the problem directly. If the system is infected at the time a restore point is created there's a good chance it will exist within the restore point.

System Restore is an excellent tool and I would not suggest disabling it or deleting the SIV folder. What you can do is delete all existing restore points to avoid reinfection on running restore, then clean your system thoroughly, then create fresh restore points.

The best course of action is to prevent infection/malware in the first place. In combination with a good backup strategy System Restore is an excellent tool.

4 more replies
Relevance 91.02%

Hello,

I just bought myself new HW and a new SSD for my computer, and I also installed a fresh Windows 7 on the new SSD. I put my old HDD with Vista on D: and copied a couple of documents over to "my documents" folder to my C: drive + a couple of other files.

I am now cleaning up my D: drive to get rid of all the Vista files which I don't need any more, and I have stumbled over "System volume information" folder. This folder was last modified at the date I installed Windows 7 (5 days ago). Can I just remove this folder without any repercussion?

Answer:"System volume information" folder on my old Vista installation

It's actually a part of System Restore; the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where OS stores these points and associated information that makes them accessible.
If you're not using System Restore feature, you can delete it. I recommend you to keep it untouched.
Fore more information, refer here:
Tips Fixes & FAQs
Take Care

6 more replies
Relevance 91.02%

My virus scanner detected a virus in the System Volume Information directory, the problem is this folder is unaccessable for some reason. It is a hidden folder but i cant find it and in safe mode i still cant access it. My virus cant get rid of it for this reason as well I am guessing. Please help me someone.

When i start my PC an error with a message such as this pops up: AVG has detected the virus worm/agobot in C:/System Volume Information/ etc. etc, the rest is a bunch of numbers then an exe. file.
 

Answer:How do i access "System Volume Information folder"? Virus in it.

Right click "My Computer" > select Properties > System Restore tab > tag the box to disable System Restore. Affirm the action and close the screen. Reboot for good measure.

You may then reenable System Restore if you like, the virus it had in its memory will be long gone now.

Regards.
 

3 more replies
Relevance 91.02%

I'm using Windows XP SP2 Home Edition and am trying to access the C:\System Volume Information folder, but I keep getting an "Access is denied" message, even after following the below directions.

1. Click Start, click Run, type cmd, and then click OK.

2. Make sure that you are in the root folder of the partition for which you want to gain access to the System Volume Information folder. For example, to gain access the C:\System Volume Information folder, make sure that you are in the root folder of drive C (at a "C:\" prompt).

3. Type the following line, and then press ENTER:
cacls "driveletter:\System Volume Information" /E /G username:F
Make sure to type the quotation marks as indicated. This command adds the specified user to the folder with Full Control permissions.

4. Double-click the System Volume Information folder in the root folder to open it.

5. If you need to remove the permissions after troubleshooting, type the following line at a command prompt:
cacls "driveletter:\System Volume Information" /E /R username
This command removes all permissions for the specified user.

My problem may be with step #2, as I'm not sure what to do what it says in the last sentence. How do I get to a C:\ prompt?

Here is a screenshot of what the command prompt window looks like when I first open it.
 

Answer:Trouble Accessing The "C:\System Volume Information" Folder

16 more replies
Relevance 91.02%

When I attempt to open the C:\System Volume Information folder so I can view the contents of the _restore folder, I receive the message seen in this screenshot.

If I do a "search" for the _restore folder, nothing appears.

What gives?

I don't recall having this problem before the hard drive was replaced and Windows XP SP2 was reinstalled from scratch.

I know that System Restore is working because I've created several restore points before installing new or updated hardware drivers.

----------------------------------------------------------------
 

Answer:Problem Opening "System Volume Information" Folder

9 more replies
Relevance 91.02%

I have a SIMPLE and easy way to remove viruses from system restore without losing all your restore points.

In command prompt type:

cacls "c:\system volume information" /e /g "username":F

(username = your user name eg. Administrator)

it will say 'processed dir.....'

run the virus scanner again to remove the virus.

I do this in safe mode, in the administrator account so that my standard account can't access the system restore and screw something up.

Shaelesand.
 

Answer:Remove Viruses from XP Pro "System Volume Information" folder

That's a good suggestion for users running Windows XP Pro. Basically that command is granting authority to the "System Volume Information" folder to the user you specify on the command to get around the "Access Denied ...." error.

The other way to accomplish it is to disable "Simple File Sharing" under the Folder Options. Then right click on the "System Volume Information .." folder and select Properties. Then click on the "Security" which appears since you disabled "Simple File Sharing". At that point you can grant the user authority to the folder.

Anyway, thanks for the shortcut. It will come in handy in the future.
 

1 more replies
Relevance 90.61%

Hello,

Let start off saying I know what this folder is for (System Restore) and know how to typically get rid of the space it takes up (merely disable system restore). However, in this particular case, it's not working and need to figure out how to make Win 7 delete it.

In this particular situation this is an external hard drive that I hook up to other PCs quite often in transferring data and imaging PCs (I'm a PC tech). As such, the hard drive has accumulated quite a few restore points on it from these various systems. Disabling system restore from mine does not remove these other restore points.

Windows XP I remember would let me remove it if I took ownership of the files, Win 7 will not (although it does not kick back any error messages). So... how do I get rid of it? Or at the very least, the multiple restore points within?

Thank you.

Solved: See Schmik and alan10's posts on page 3, posts 22 and 24, respectively. Thank you both.

Answer:How to delete "System Volume Information" folder on Win 7

  
Quote: Originally Posted by FuryoftheStars


Hello,

Let start off saying I know what this folder is for (System Restore) and know how to typically get rid of the space it takes up (merely disable system restore). However, in this particular case, it's not working and need to figure out how to make Win 7 delete it.

In this particular situation this is an external hard drive that I hook up to other PCs quite often in transferring data and imaging PCs (I'm a PC tech). As such, the hard drive has accumulated quite a few restore points on it from these various systems. Disabling system restore from mine does not remove these other restore points.

Windows XP I remember would let me remove it if I took ownership of the files, Win 7 will not (although it does not kick back any error messages). So... how do I get rid of it? Or at the very least, the multiple restore points within?

Thank you.


You need to disable system restore on the external hard drive. To do this, go to start, then right click on computer, then click properties. In the top left, there will be an option that says system protection. Click on that.nAfter that it will show all of the drives amd you will see a "yes" or a "no." Find the external hard drive, and if it says yes, click on configure. You can now turn off system resotre for that drive.

9 more replies
Relevance 87.74%

I am trying to reinstall win 7, but when i get to the point where I have to choose partition, there is no partition to install win on. And I am not allowed to create any new partitions. Any ideas on how to proceed.

Answer:System partition deleted and no operating system either.

Work through the steps to Troubleshoot Windows 7 Installation Failures - Windows 7 Help Forums.

Is this an EFI BIOS? Look in BIOS setup for settings for CSM, Legacy BIOS, EFI, UEFI to enable or Secure Boot to disable. If an EFI BIOS the disk needs to be booted as an EFI device, then delete all partitions to reset the hard drive formatting.

1 more replies
Relevance 86.92%

Hi All

My external HDD has quite a lot of data contained in the system volume information folder. As system restore is not activate on this drive & the drive is used specifically for imaging purposes I take it the data relates to the Win indexing service.

As I am now using a third party search application can I now disable the windows search system & if the system is disabled will this by default empty the SVI folder.

Any relevant advice would be appreciated.

Cheers.

Ich

Answer:Disable & empty System Volume Info folder on external drive.

Windows Search stores nothing in System Volume Information.

1 more replies
Relevance 86.1%

Windows 7 is installed on C: . I want to take D: out of the system, and have it completely empty.

I have two directories on D:, System Volume Information and $Recycle Bin.

I understand I can get rid of the $Recycle Bin, but I don't know about System Volume Information.

Can I simply delete it, or is it part of the Windows Installation, or just info about the D: drive that is disposable?

Thanks!

Answer:D: drive has "System Volume Information", can I delete or move?

If you're referring to the 100 MB + of space on the C: drive, that contains vital OS boot information and should never be removed.

For clarification, could you post a screen shot of your Disk Management window.

2 more replies
Relevance 84.46%

does anyone know why w2k has system volume information ?

i know that xp holds the restore points there but w2k does not have system restore,
i have 2 files in the one on my C drive - MountPointManagerRemoteDatabase and tracking.log, all the rest just have tracking.log

ta
 

Answer:system volume information

Hi

Its part of Distributed Link Tracking (DLT) Client
http://technet.microsoft.com/en-gb/library/bb742605.aspx
 

2 more replies
Relevance 84.46%

Is system volume information a virus? There are 2 folders in two seperate hard drives and on one i can delete it but it comes back like three seconds later. On a different hard drive i cant do anything to it at all
 

More replies
Relevance 84.46%

Help ! My System Volume Information folder on my PC has started increasing in size and gets bigger every time I reboot.It has now reached a size of over 20GB and still increasing. This is where all the restore points are held. I've run Norton anti-virus scan but no viruses have been found.Can this folder be recreated from scratch ?Has it somehow got corrupted ?Any ideas would be greatly appreciated.Mio

Answer:System Volume Information

You can disable system restore, reboot the machine and then set a new restore point. All the old ones will be gone.

3 more replies
Relevance 84.46%

Recently my spyware programs get locked on the "System Volume Information\tracking.log" folder. They work okay in Safe Mode. I found instructions to allow access to the folder, even though Microsoft's Instructions were inaccurate. However, I deleted the file in Safe mode and it reappeared upon reboot.
 

Answer:System Volume Information

Instead of changing permissions on the folders and thus allowing malware possible access to them, just use Disk Cleanup to delete all but the last of the restore points. If the last one also is infected, make a new one (when your machine is clean, of course) and delete the previous one with Disk Cleanup.
 

3 more replies
Relevance 84.46%

I built a new computer with a 160 gig drive in it. This drive has 2 partitions, one with Win XP Prof on it. I took my old 80 gig drive out of my old computer(which also has 2 partitions) to transfer files to the new drive. This drive had win 98 on one partition but I did not have it bootable. I've had it in the new computer for about 5 months now and want to reformat it to clean it all off. I noticed that there is a folder there that is called System Volume Information. The sub-folders are restore folders with current files in it. Why are the restore files being stored on this drive and not the new one with XP on it and is it all right to delete these files?
 

Answer:System Volume Information

I don't know why it would create the current files in those folders, but Iknow that the Vol Info on my C: drive is not accessible.

If you aren't sure what will happen if you reformat the secondary drive, just unplug it and run the PC as normal...give it some time, and if it all works properly, I wouldn't worry about it - just make sure that it is set to cable select or slave, replug it in, and reformat.

MBN
 

2 more replies
Relevance 84.46%

I could do with a bit of help here. While doing a bit of analysing I discovered that on my notebook the System Volume Information folder was using 12gb. This rather staggered me but I discovered this was caused by System Restore. I turned off System Restore and rebooted. This emptied the folder as I expected. I then turned it back on, set a restore point and all is fine. About 600mb now.
The thing that has me baffled though is that my desktop computer was showing zero in that folder. System restore was turned on and many restore points had been set. So where is all that information gone. I should point out that both computers are running Vista Home Premium with SP1 and all updates. I turned off System Restore, rebooted then turned System Restore on again, set a couple of restore points, but the folder is still zero. I tested a Restore point and that worked fine. I'm afraid I'm at a loss. Obviously the information is somewhere. Suggestions would be greatly appreciated.
 

Answer:System Volume Information

Read:--> How to gain access to the System Volume Information folder

Also:

Clear system restore points


Clear your existing system restore points and establish a new clean restore point:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
Select the More options tab
Choose the option to clean up system restore and OK it.
This will remove all restore points except the new one you just created.

 

5 more replies
Relevance 84.46%

Hi guys and gals

This is just strange I have found a virus in one of my restore points but No problems are currently in existed. So I have a basic question.. How did a virus get in to my restore points? odd?

File C:\System Volume Information\_restore{736B8453-93FE-477D-9F4C-E9DBA07C5B6E}\RP400\A0039023.exe is infected by Win32:PSWtool-S [PUP], Moved to chest this is what the entry stated

After I found that I reset my System Protection. Going to create a Manuel Restore Point. and re run the select area tests.

Thanks

Answer:System Volume Information

Create a New Restore Point[/COLOR][/URL][/B] to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Restore.Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"Click Yes, then click Ok.Click Yes again when prompted with "Are you sure you want to perform these... Read more

4 more replies
Relevance 84.46%

I have an extremely large file (system volume information) which contains a file named:
"_restore (224E0294-7FFD-9D04-A63B49402B20)". In that file are daily "snapshots" of my files. Each daily snapshot is in a separate folder - consecutively numbered (example: RP460 up to RP561.

Each of these folders contain over 130mb of files and are using up my storage capacity on C drive.
Can I delete all but the last few of these folders?

Answer:System Volume Information

Quote:




Can I delete all but the last few of these folders?




NO.

By default the contents of the system volume information folder is not accessible to even an admin account. And for good reason. Any direct deletion or modification of it's contents can, and probably will, corrupt the system restore facility and render it useless.

The disk cleanup utility can delete old restore points and you can also specify how much disk space can be used but do not attempt direct modification of the folder.

Actually I would recommend setting the security attributes of the folder back to what they were to prevent accidental modification. There is really no need to to access the folder at all.

3 more replies
Relevance 84.46%

When I turn off System Restore on my partitioned D drive, there is a still a subfolder in the System Volume Information folder named: _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}, that remains. When I go to explore it, it contains many files that have long been deleted. Can I go ahead and delete this whole folder? Not the System Volume Information, but just the subfolder; _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}. BTW, shouldn't that subfolder be automatically erased upon turning the sytem restore off? Thanks
 

Answer:System Volume Information

Tranceaddict said:



When I turn off System Restore on my partitioned D drive, there is a still a subfolder in the System Volume Information folder named: _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}, that remains. When I go to explore it, it contains many files that have long been deleted. Can I go ahead and delete this whole folder? Not the System Volume Information, but just the subfolder; _restore{2AA86FA6-CEB4-46B9-A260-A78C7302C6BF}. BTW, shouldn't that subfolder be automatically erased upon turning the sytem restore off? ThanksClick to expand...

I am not sure about the auto erasing part of the question, but you can always place the folder in your recycle bin for a bit and see if anything goes screwy (unlikely). It seems to me it is just an old restore point file. You could probably safely delete but, it is always safer to have it handy for a little while before deleting permanently.
 

2 more replies
Relevance 84.46%

My System Volume Information folder has 28 of those very large files
that take up 27.2 GB of disk space. The oldest is dated 11-01-2013. This seems to me to be too much . Is it too much? If it is too much, what could cause that to happen?

Answer:System Volume Information - Is it too big?

The System Volume Information folder contains your Windows restore points. Depending on the size of your hard drive, 27 GB isn't that much space.

You can adjust the amount of hard drive space the restore points use. In the Search Bar type Advanced then select View Advanced System Settings then click on the System Protection tab, from there you can adjust the percentage of hard drive used for restore points.

4 more replies
Relevance 84.46%

I have recently come up against this message:-The file or directory \System Volume Information \1 {3808876b-c176-4e48-b7ae-04046e6cc752} in corrupt and unreadable.This maeeage occures when I unlock a WesternDigital 'My Book essential 1TB' external USB Drive.I am advised to run chkdsk on this drive, but when i do windows advises me to restart windows to continue, but the drive automatically locks.Any help would be gratefully received.thanks in advance...

Answer:system volume information

It's system restore, if you disable it and reboot and then re-enable it it will most likely be fixed. If you do not use system restore then i would keep it disabled.

8 more replies
Relevance 84.46%

I am wondering what some of these files in the "system volume information" folder are.chkdsk (this is actually a folder)6373773drv.iswmdllog.datMountPointManagementRemoteDatabasetracking.logI saw these and got suspicious. Anyone know what they are?

Answer:System Volume Information

Sorry about the vagueness of my question, I've just never seen these before. I know what chkdsk is, I have never seen a folder named chkdsk though.

5 more replies
Relevance 84.46%

Does anyone know WHERE I can FIND:
C:\System Volume Information\ ???

I just can't find it anywhere under WINDOWS or as System 32 subfolder. My anti-spy app, says I got all kinds of
INFESTED trojans, droppers, keyloggers etc. located there.

Answer:C:\System Volume Information\ ???

i believe its a hidden folder, make sure u make all hidden folders and OS files viewable by going to windows explorer, tools menu, folder options, vies tab

4 more replies
Relevance 84.46%

I have a virus or malware. Every time I run Ad-ware . I get malware that show up in C:\ System Volume Information.I keep removing it but it just comes back. I add my Hi-jack reporLogfile of Trend Micro HijackThis v2.0.2Scan saved at 2:30:58 PM, on 10/15/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18241)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC:\Program Files\iRacing\iRacingService.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS&#... Read more

Answer:C:\ System Volume Information

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.I get malware that show up in C:\ System Volume Information.The only way to clean that is like this:Turn off System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.RebootTurn ON System Restore, On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.UN-Check *Turn off System Restore*.Click Apply, and then click OK.I see a few other issues in this HJT log and would be glad to help you address them if you will post a fresh HJT log.Thanks

2 more replies
Relevance 84.46%

XP pro - p4 2.8AVG antivirus detecting worm (Lovsan.A) in C:\System Volume Information\_restore ......AVG will not delete this worm file.Can anyone please steer me to access this folder and delete file (Access Denied via My Computer route).Many thanksTerry

Answer:XP pro System Volume Information

The worm is hidden in your System Restore files which virus checkers don't have access (that's why you are getting the message that AVG cannot remove it.The cure is to turn off Systm Restore temporarily, run your A/V to remove the worm and then re-instate System Restore. It means you will have lost your restore points but that is a small price for getting rid of the nasties.?d

3 more replies