Virus System Volume Information

[Bosko]

The System Volume Information folder is used by Windows XP for data logging system configuration. This folder is used by the tool System Restore to store information and restore points.
Restore points can return to the stable configuration that preceded the installation of a driver or program.
In principle, access to the System Volume Information folder is locked, but a virus can work around that.
The unlock procedure varies depending on the version of Windows XP used, formatting the disk or network configuration.

Example

As an example, here is the path of a virus is found in the System Volume Information:

C: \ System Volume Information \ _restore (4E170950-50E0-B281-453F-59338F8EC32E) \ RP16 \ A0003104.exe

Remove a virus inside the System Volume Information folder in Windows XP

• Right-click on "My Computer" and choose "Properties".
• Select the tab "System Restore".
• Check "Turn off System Restore on all drives" or "Turn off System Restore" and then apply.
• A message will inform the removal of all existing restore points.
• Confirm with "Yes".
• Then reactivate System Restore by unchecking "Disable System Restore."
• Apply and OK.
• Then create a new restore point.