Printable View
There is frequent occurrence of harmful or infected files/folders found in System Volume Information Folders by Avira AntiVir Premium from time and time. It happens once to twice in a month. What is the cause of this problem and how can I deal with this from now on besides normal scanning and quarantined/removal by Avira premium as usual.
Would Forum members advise any remedy actions or precaution measures to prevent future occurrence of existing problem.
Thanks for your kind assistance!
Those are system restore files. They must contain some infected files from a previous restore point.Quote:
Originally Posted by hakah
You must have quarantined/removed the infections after those system restore points were created.
Those files could be harmful, you can delete them.
check this thread at MBAM forum: Files Infected: F:\System Volume Information - Malwarebytes Forum
System restore files can be safely deleted if you are not facing any issues at the moment you are deleting those files. I usually clear up the system restore files in a week or month. These files may be infected.
I would also suggest you to check with some on demand scanners like MBAM/SAS (both free) to check whether its really infected or a false alert.
After getting the alert did you revome the files? If yes then how come they are coming back? Either a false positive or Avira not good enough to stop it??
I've already got reply from MBAM Forum to have system restore files deleted prior thorough scanning by AntiVirus software and MBAM as well. But I just want to make sure if there are any precautionary steps necessary to be performed first before going ahead for the removal.
Avinash:Can you advise the detailed steps on such removal since you are an expert on it. Any backup is necessary ? Many thanks !Quote:
System restore files can be safely deleted if you are not facing any issues at the moment you are deleting those files. I usually clear up the system restore files in a week or month. These files may be infected.
Alpha:I am surprised they just come back again and again after removal and I just don't know why? Any suggestion? Thanks!Quote:
After getting the alert did you revome the files? If yes then how come they are coming back? Either a false positive or Avira not good enough to stop it??
Ashwin:Many thanks for the advice!Quote:
Those are system restore files. They must contain some infected files from a previous restore point.
You must have quarantined/removed the infections after those system restore points were created.
Those files could be harmful, you can delete them.
check this thread at MBAM forum: Files Infected: F:\System Volume Information - Malwarebytes Forum
do the following in sequence:
1. delete all existing the restore points.
2. create a new restore point
3. restart system
4. disconnect from internet
5. create another restore point
6. scan
7. report here
Grr: how to delete and create the system restore point? Do we have to back it up first ? Thanks!
I am not a Expert. I just learn things on the way. Anyway, I made a post on blog just for you. Check it out.Quote:
Originally Posted by hakah
How to delete system restore files to gain hard disk space
Avinash :
Thanks for your kind assistance!Quote:
I am not a Expert. I just learn things on the way. Anyway, I made a post on blog just for you. Check it out.
How to delete system restore files to gain hard disk space
Delete:Quote:
Originally Posted by hakah
How to remove all System Restore points except the most recent one
To do this:-
Click Start > All Programs > Accessories > System Tools > Click Disc Cleanup
Now launch this utility and click More Options tab. Under which click System Restore and followed by that click Clean Up tab a message will popup -Are you sure you want to delete all but the most recent restore point?Click Yes then OK. Finally another message will popup-Are you sure you want to perform these actions?Click Yes.
Now, all the System Restore points except the most recent one are cleaned. As a result there will be more free space in hard disk.
How to remove all System Restore points except the most recent one
---------- Post added at 11:02 PM ---------- Previous post was at 11:01 PM ----------
Create new:
How do I create a System Restore point?
Click Start, All Programs, Accessories, System Tools, System Restore
For Classic Start Menu: Click Start, Programs, Accessories, System Tools, System Restore.
Click Create a restore point, and then click Next.
In the Restore point description box, type a name to identify this restore point. System Restore automatically adds to this name the date and time that this Restore Point is created.
To finish creating this restore point, click Create.
You can also launch System Restore window by typing the command below, in the RUN box:
%SystemRoot%\System32\restore\rstrui.exe
How do I create a System Restore point?
---------- Post added at 11:03 PM ---------- Previous post was at 11:02 PM ----------
No need to backup anything
All above assuming u have Windows XP. If not , specify ur OS
Grr: thanks for your detailed procedures of performing system restore point removal and creation. I will carry out and let you know the result!
Also disclose your Operating System :playful:Quote:
Originally Posted by hakah
Grr: My OS is WinXP Pro SP3. I can't continue as stopped on "Now launch this utility and click More Options tab. Under which click System Restore and followed by that click Clean Up tab a message will popup ..." as there is no More Options tab except only drivers for you to choose for clean up only.
Please advise accordingly!
do this:Quote:
Originally Posted by hakah
start>All programs>Accessories>System Tools>System Restore..
Avinash: thanks very very much and am really really appreciated of your great assistance in creating blog post of "How to delete system restore files to gain hard disk space" for my personal problem. I am still studying on it as I'm using Windows XP PRO SP3 and may have some deviations from Windows 7. I will come back to you again if there are still querries or problems encountered.
Thank you once again for the help!!!
I have closed my System Restore and have the whole system scanned by my Antivir Premium and MBAM respectively. There were files detected by both and were totally removed thereafter. But there is still one file left behind in MBAM quarantine area which cannot be removed.
The File is found in C:\Documents & Settings\funshion\historytorrent\十三刺客.mp4.fsp and is detected as Adware Funshion.
(that file is Chinese movie which I remembered have been deleted recently)
There is no way I can remove this file and hope Forum member can give a hand on it. Thanks for the kind assistance!
Try following:Quote:
Originally Posted by hakah
1. boot in safe mode & delete
2. try deleting using Unlocker
Oh,I will try