Tech Problem Aggregator

Window folder and System Volume information too large.

Q: Window folder and System Volume information too large.

I did google a few times but couldn't find a way to solve. I'm using Windows 7 pro x64 (I think I upgraded from windows 7 home edition). I had same problem last week but while I was cleaning out some stuff windows was updated so I had to restart....and then there suddenly was 17 gbs free space. But ever since last update my HDD is down to attachments.

I'm on laptop with followings:

ASUS N61JQ-X1 16-Inch Laptop
1.6 GHz Intel Core i7-720QM Quad-Core Processor
4GB DDR3
320GB HDD
Windows 7 Home Premium

I'm using TuneUp Utilities 2011 (luckily the new guys who took over and messed up TuneUp stuff decided not to mess with anything before 2012 version) with Avast. As you guys can see from my attachments, Windows folder and System Volume Information alone are taking 50+ Gbs. I'm also wondering if I need all these crabs with amd64-microsoft-naturallanguages-blahblahblah? I have 84000 files of these craps. I do keep it hibernation which is about 3gbs. I moved system restore point to external HDD so no back up whatsoever in C drive, all games except few, which are located in D drive, are located in external HDD.

Is there any way I can possibly clean up from windows and system volume information without harming my computer? btw, I didn't do a single format ever since I bought this computer because it still runs smoothly. The only thing that's bothering me right now is C drive space, and I don't want to format because I'm going to grab a new machine for programming at the end of the year (and for star citizen).

So yeah. Is there way to permanently free up to at least 10 gbs? That'll help me a lot with everything.

Thanks in advance!

A: Window folder and System Volume information too large.

Note: I see you moved System Restore to another drive, no idea how that affects the following! Follow it regardless.

Avast Bug

Please read https://forum.avast.com/index.php?topic=162041.0
Also check https://forum.avast.com/index.php?topic=166697.0

Avast sets System Restore disk usage % to 50.

You can try:
- go to control panel-> programs and features -> Avast -> change
- remove the component NG (down below).
- change % back to 10% (windows default) or whatever you like it
- restart
- check if % is what you set
- check restore points (seems this NG delete old restore points when run out of space)
- manually create a restore point if there are none
- open command prompt ->vssadmin list shadowstorage
- see how much space it takes.

You can also try uninstalling Grimefighter if above won't solve your problem.

For Windows folder:
Did you run Disk Cleanup yet?

7 more replies
Answer Match 97.44%

I am doing some "Spring Cleaning" on my HD, finding and deleting duplicate files and looking for large space-hogs to get rid of.

Noticed that my "System Volume Information" File was almost 3 Gbytes. I recall somewhere in the XP settings there is a place where you can adjust the percentage of HD space used for SOMETHING (system restore?).

Is this System Volume Information File the place I am thinking of ?

Is there an "optimum" size for this SVIF ? Is there such a thing as "too small".

Can I manually delete this thing safely ? If so, how much ?


Thanks in advance,

George

A:Large System Volume Information File

If it's related to system restore, turning off system restore should empty the file. just be sure you won't need to restore your system.

You can adjust the size of system restore:
control panel>system>system restore>settings

10 % is reccommended, but it depends on your needs.

start>run>all programs>accessories>system tools>system restore. Select restore my computer..

You will see a list of restore points. If you have restore points for six months, and you know you won't need to restore to a pont that long ago, you can reduce your size. It's really a judgement call from there.

1 more replies
Answer Match 95.76%

I had trouble defragging {dbcbca6a-9a27-11df-94f4-028037000300}{3808876b-c176-4e48-b7ae-04046e6cc752} in C:\System Volume Information using defragler. It is more than 2GB large. Is it normal for one system restore to be that large? Norton and MBAM says the my system is clean. Only 31.1 GB total used. Abou 250 GB (I think) total hard drive space

Also the tracking folder is showing weird characters:
?Cf????? ?O?8m   windellstudio15 NW?Dc`A??$??{?? =?e? ? ? ????  ?             ... Read more

A:ONE System File in System Volume Information more than 3GB large. Can't Defrag

Defragging does not reduce file size, it only moves files to improve speeds.

Do a disk cleanup maybe its system error storage, or something the operating system stores
Unless it is a virus that is hogging your hard drive space (Inwhich case I would do a scan with Malwarebytes anti malware from malwarebytes.org)
It could be a crucial file, but I would think it would be a bit smaller.

your hard drive has enough space to make that 3 GB look like megabytes....

Keep your eye on that file. If it continually gets bigger, chances are, it could be a virus.

7 more replies
Answer Match 89.46%

I cannot see any sign of the System Volume Information folder in Explorer or any other file browser program I try.
It is not grayed out, it is not there. When I enter Tools, Folder Options, View, the Show hidden files and folders
is selected. As a matter of fact, if I then select Do not show hidden files and folders, the next time I open View,
it has gone back to Show hidden files and folders!
Even though hidden folders should therefore show, the SVI folder remains hidden.
I have examined my system by booting with BartPE XPE and there is the SVI folder with all the restore points, etc.
I am using XPPRO, NTFS.
Thanks in advance for any help.
Ken Gash

A:Cannot See System Volume Information Folder

How to Show Hidden Files in Xp:http://www.bleepingcomputer.com/forums/t/43032/how-to-show-hidden-files-in-xp/

4 more replies
Answer Match 89.46%

Is it safe to delete the hidden System Volume Information Folder if I am not using the system restore feature under Windows XP Pro?
 

More replies
Answer Match 89.46%

Hello all!

I've screwed up, I don't know how it happened but I was moving around some stuff and something happened with the open windows (got stucked to the cursor) and when I got it to stop (I've got a new mouse with some small buttons on the side, and I've not managed to get used to them .. however I will disable those)

Well the problem is that when I got to unhook that window from my cursor my 300Gb + mp3 folder was gone .. man it almost gave me a heartattack, cause I've been working on that thing for years basically ...

I found it, it's somehow inside the "D:\system volume information" folder, and if I dragg it out to the root of the D drive it dissapears from the sys vol dir, but doesn't show up in the root at the D drive .. ?? and then if I go out from the sys vol dir and go back in again (basically refresh) then there it is again ..

summary: ... cannot move my mp3 folder back to the D:\ folder since it accidently got moved to d:\system volume information ..

please help .. I'm nervous like a cat on a hot tin roof

Thanks

//Ken1

A:system volume information folder

  
Quote: Originally Posted by Ken1


Hello all!

I've screwed up, I don't know how it happened but I was moving around some stuff and something happened with the open windows (got stucked to the cursor) and when I got it to stop (I've got a new mouse with some small buttons on the side, and I've not managed to get used to them .. however I will disable those)

Well the problem is that when I got to unhook that window from my cursor my 300Gb + mp3 folder was gone .. man it almost gave me a heartattack, cause I've been working on that thing for years basically ...

I found it, it's somehow inside the "D:\system volume information" folder, and if I dragg it out to the root of the D drive it dissapears from the sys vol dir, but doesn't show up in the root at the D drive .. ?? and then if I go out from the sys vol dir and go back in again (basically refresh) then there it is again ..

summary: ... cannot move my mp3 folder back to the D:\ folder since it accidently got moved to d:\system volume information ..

please help .. I'm nervous like a cat on a hot tin roof

Thanks

//Ken1


Lets try the easy way first. Just go to back up and restore, to a point prior to the problem, and restore. If you are not sure how thats done just follow instructions below:



Just go to help and information, and type back up and restore, follow instructions. You will be good to go in no time. In the case of problems, just return and we will... Read more

9 more replies
Answer Match 89.46%

Hi,

I have two partitions on my disk. One for the the operating system (xp pro) and the other one for data and so on. The other day decided to unmark the "hide system files and folders" option, just to try and experience.

Now, on my data partition root appeared a folder that names itself "system volume information". I cant acess that folder, and the system alerts me of some kind of nfts allocation table error, or something like that, when i try to acees it
What is that folder? Should i be worried?

Regards...
 

A:System Volume Information Folder

System Volume Information Folder

How to gain access to the System Volume Information folder
 

3 more replies
Answer Match 89.46%

hi

i'm on win2k pro and have ntfs file system; i just installed an additional 300g seagate on my pc as storage; however, i notice that it doesnt have a system volume information folder like all my other hd's; should i worry? in the past, after i create a partition to set it up, this hidden folder shows after a reboot except this time

i wonder why

thanks
 

A:no system volume information folder on new hd

Check Device Manager to see if the drive is designated as "removable".

You need only worry if you want System Restore to monitor that drive so that you can restore it. That may not be necessary in this case.
 

3 more replies
Answer Match 89.46%

I tried to format my 2GB USB drive in NTFS Format in WINDOWS XP. When i format the drive, it was formatted successfully, but inside the formatted drive one of the folder is created named as "System Volume Information". I tried to delete the folder, it says "Access Denied" also remove my USB drive safely but it show and error like "the Generic Volume is used in another program...". why it will happens, the folder "System Volume Information" is a virus?.. how can i overcome this problem... reply me as soon as possible.. thanks to all...

A:System Volume Information Folder in USB?

It's not a virus.

It's a system folder present on most NTFS volumes and is used primarily for system restore points (this folder is where they're saved to). It's intentionally set up so you can't simply delete it. To do that, you'll have to give yourself ownership of the folder and then assign yourself full access permissions.

If this folder bothers you, you might format your USB stick as FAT32 instead.

3 more replies
Answer Match 89.46%

C:\System Volume Information" /E /G Zombie :F

None of the cmd commands would work at all I've tried everything and its says the commands aren't real.

The command above is my example it did nothing.

I have a virus inside my Sysem Volume Information folder I wanted to see what VirusTotal.com would say if I sent the file to them. But dumb enough I'm not allowed to get into that folder even know I can see it. The OS doesn't allow me to just click into the folder its self.

C:\System Volume Information\_restore{7DC0BD25-810A-4646-9B02-25E7BB3740C2}\RP38\A0014125.exe (The A0014125.exe is the virus and the only file in the folder.

Anybody have any ideas what I should do?

Because this "virus" or spying .exe file came from FreeMake Video Converter.

Yet, I can only view with add now Quarantined Items.

A:Trying to get into System Volume Information Folder.

How to gain access to the System Volume Information folder

3 more replies
Answer Match 88.62%

i have a problem with the spybot.worm.gen virus and McAfee is telling me that the virus is located in the System Volume Information folder. However, even when I uncheck to show all folders and files, I cannot see it. I have searched over and over and cannot put a location on it. What can I do??? Many thanks!
 

A:Can't find folder, C:/System Volume Information

8 more replies
Answer Match 88.62%

In one it swelled from 40 something MB to almost 800MB.here is a HijackThis Log:Logfile of HijackThis v1.99.1Scan saved at 10:13:37 PM, on 6/23/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AntiVir PersonalEdition Classic\sched.exeC:\Program Files\AntiVir PersonalEdition Classic\avguard.exeC:\WINDOWS\system32\CTsvcCDA.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\... Read more

A:Huge System Volume Information Folder

Hello IHateAbnormalities and welcome to the BC HijackThis forum. I see no signs of viruses or malware in this log. It is clean.

The System Volume Information folder is where system restore points are stored. The disk space used is a percentage of the disk size so 800MB is not an unreasonable amount of space for this folder to use. You can specify the amount of space used by system restore by going to the Control Panel and then the System applet. Click on the System Restore tab to see and/or set the current settings.

Cheers.

OT

3 more replies
Answer Match 88.62%

Win7 SP1
My System Volume folder is gigantic right now, almost 10GB.

I thought I could decrease that by deleting some older restore points with CrapCleaner.

When I looked at the SR points in CC, there is only one there, the most receont one, created today.

Is that possible---one restore point ten GB in size?

Or---has something gone wrong? If so, any way to fix it?

Anyone have an idea what could be going wrong with that--a 10 GB SV folder with only one restore point in it?

Of course, one solution would be to turn off system restore, so that everything in that folder is deleted, then start it again. However, if something goes wrong with the computer, that SR point could be a lifesaver, necessary to restore the system.

--------------
One other question--can the contents of the SVI folder be copied to an external HDD for backup (I have taken ownership of the folder, and given myself full permission on it and subfolders), before turning SR off and on? Then if necessary to use that saved SR point, copy those contents back to the SVI folder of the original drive?

A:Giant System Volume Information Folder

Well, you can actually start system restore and then click "Choose a different restore point" to display the other available points, see this tut.

System Restore

You can also a 3rd party tool like QRM Plus manager to take a look at the points.

How To Delete Individual Restore Points In Windows 7

Its possible the previous restore points got deleted for some reason or theres insufficient space allotted to them. You can set that space this way.

System Protection - Change Disk Space Usage

9 more replies
Answer Match 88.62%

Hi..

I have quite a small hard drive and am constantly battling for space on my c drive.

I use windirstat a lot and it tells me that a lot of items are in the system volume information _restore folder.. and some are taking a lot of space.

I checked Google and it says that this is the folder where my restore information is stored, now the thing is that I have disabled system restore. It was deactivated as soon as I started running short on space which was an year back.

So why is this folder still there? Is there a "safe" was to delete this?

Thanks

A:system volume information _restore folder

If SR is disabled...the folder is empty.

It cannot be deleted permanently, it's a Windows system folder and loads when Windows loads.

Louis

8 more replies
Answer Match 88.62%

When I first bought my 1TB Iomega Network Drive, I tried to do a copy or clone or something of my entire hard-drive. It didn't work out well, because I was doing it wirelessly and about half-way through every time, it crashed. I could never get it to finish. I went through and tried to delete all the files in the folder I saved them into (called backups) and was able to delete nearly everything (some things I had to right-click and go to properties and uncheck "Read-Only" to make it go away) but for some reason I cannot get rid of the folder leftover called "System Volume Information." I tried unchecking "Read-Only," but it doesn't seem to help. I tried also using a program that allows you to "Take Ownership," but that doesn't help either.Please see the photos and the contents of the folder:<a href="http://s167.photobucket.com/albums/u122/heavyjavadrinker/internet/?action=view&amp;current=3rd-folder.jpg" target="_blank"><img src="http://i167.photobucket.com/albums/u122/heavyjavadrinker/internet/3rd-folder.jpg" border="0" alt="Photobucket"></a>

A:How to delete SYSTEM VOLUME INFORMATION FOLDER

You can delete the contents of the System Volume Information folders, but not the folders themselves. If you don't use system restore just disable it. All restore points will be deleted immediately.

8 more replies
Answer Match 88.62%

Note: See Additional Information at the bottom first.

This is not an emergency at this time. I'm trying to understand it for future use, when it /could/ be an emergency.

I'm using Windows XP Pro SP2 (FAT32, not NTFS). When following Charlie White's "Windows Crashed? Here's Help" tutorial (3/14/02) [http://webcast.broadcastnewsroom.com...e.jsp?id=8658] to restore my crashed C: drive, I came to the part where he says "Open the System Volume Information folder." However, when I opened it, it was empty! I have done this same procedure before, and the folder was loaded with files, which I used as instructed in the tutorial, but this time the folder was empty. Somehow these files seem to have been deleted.

Here are the relevant instructions:
===============
1. Open My Computer
2. Click on the Tools menu, then click Folder Options.
3. Click the View tab.
4. Under Hidden files and folders, click to select Show hidden files and folders, and then click to clear the Hide protected operating system files (Recommended) check box.
5. Click Yes when the dialog box that confirms that you want to display these files appears.
In My Computer, Double-click the drive where you installed Windows XP (usually Drive C) to display a list of the folders. then double-click on the "System Volume Information" folder. This folder contains the system restore points stored on your computer. The folders will look similar to this:
_restore{EE42BEB8-700A-495F... Read more

More replies
Answer Match 88.62%

I have been noticing recently, my C drive gets occupied fully even if there are no bigger programs installed.
Out of 150gb, after uninstalling few programs, the space left was 30gb. Day by day it started decreasing and i saw 20gb today.

I used the disk cleanup tool and it shows only 100mb after selecting all fields.

I was worried still that space was not freeing and ran this program WinDirStat. Here are the screenshots.


System Volume information folder occupies 75% of space - meaning 100gb.
There are lot of files which were around 1gb - 2gb and they are created from 2013.

Can somebody tell me why 100 gb? I read that this service is important but why is it taking this much of space..please help to remove these unwanted older files if any.

FYI, I tried below options after googling and also searching in this forum:
Used disk clean up tool and selected more options > system restore and shadow copies > deleteDisabling and Enabling System restoreDeleting shadow copies through VSSAdmin Delete Shadows commandVirus scan in System Volume Information folder (after taking ownership of that folder) through Kaspersky and ESET SSManual delete of the files.Selecting delete option in System Protection > ConfigureChanging maximum usage to some x%

I have tried all these methods but still those files are existing. Please help

A:System Volume Information folder occupied 100 gb

System Volume Information contains:
System Restore pointsDistributed Link Tracking Service databases for repairing your shortcuts and linked documents.Content Indexing Service databases for fast file searchesInformation used by the Volume Shadow Copy.

Since you cannot delete anything from this folder while Windows is running. The quick way is to delete the whole folder using Linux Slacko Puppy.
Download the ISO (160MB) :Slacko Puppy Linux . Click one of the link shown on screen shot #1.Create a bootable USB Using Rufus - Create bootable USB drives the easy wayBoot from USB, the screen should look like the screen shot. From the bottom left #2 of the screen. The HDs mounted as sda1, sda2 ... and one of these is your C: Drive.Find the System Volume Information, right click and delete it.Disconnect the USB and reboot Windows, a new System Volume Information folder should be created

14 more replies
Answer Match 88.62%

I cannot see any sign of the System Volume Information folder in Explorer or any other file browser program I try.
It is not grayed out, it is not there. When I enter Tools, Folder Options, View, the Show hidden files and folders is selected. As a matter of fact, if I then select Do not show hidden files and folders, the next time I open View, it has gone back to Show hidden files and folders!
Even though hidden folders should therefore show, the SVI folder remains hidden.
I have examined my system by booting with BartPE XPE and there is the SVI folder with all the restore points, etc.
I am using XPPRO, NTFS.
Thanks in advance for any help.
Ken Gash
 

A:Solved: System Volume Information folder

10 more replies
Answer Match 88.62%

I use an external portable hard drive for backups of my downloaded programs and system backup (not scheduled just manual backups). There is an empty folder "System Volume Information" but i can't remove it.

A:Unwanted System Volume Information folder

  
Quote: Originally Posted by LM2008


I use an external portable hard drive for backups of my downloaded programs and system backup (not scheduled just manual backups). There is an empty folder "System Volume Information" but i can't remove it.


That probably came with the drive. And it may not be empty - just hidden files. I would not delete it.

4 more replies
Answer Match 88.62%

I've got this Keylog-Briss virus in my system volume information folder. Maybe I'm wrong, but doesn't that folder pertain to my restore points and whatnot? If so, I'm pretty sure that McAfee can't scan that folder because of access rights. So how do I get in there and get it out?
 

A:Virus in system volume information folder. How do I get rid of it?

Turn off system restore by following instructions here
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039 for Xp
or here
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239 for ME

That will purge the restore folder and clear any malware that has been put in there. Then reboot & then re-enable sytem restore & create a new restore point.
 

1 more replies
Answer Match 88.62%

Dear gurus,
My antivirus detected (in Windows XP drived computer) Trojan.PWS.Panda.20 in System Volume Information folder.
The messages are:
C:\System Volume Information\_restore(8C5911F4-B9DB-47F2-B998-767C59C667B6)\RP178\A0059154.exe\gziped.gz is infected by Trojan.PWS.Panda.20
and
C:\System Volume Information\_restore(8C5911F4-B9DB-47F2-B998-767C59C667B6)\RP178\A0059154.exe &#8211; archive contains infected objects.

How dangerows this infection and how can I cure it?
 

A:Trojan in System Volume Information folder -what to do?.

Turn off System Restore, then turn it back on. That usually flushes those out.
 

3 more replies
Answer Match 88.62%

Hello, everyone. I have a HJT log for you guys to take a look at. I got a message from my AVG telling me I had a threat detected, and it came up under my E:/System Volume Information (E:/ is a secondary drive) with four different files saying A0051366.exe. AVG was able to get rid of one of these files, but the other three say they aren't accessible. I'm not sure how to access that folder or those files. I figured I'd run a HijackThis log too, to make sure everything else was going okay.Here's the log, and many thanks in advance:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:57:54 PM, on 4/29/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\Program Files\Common Files\Java\Jav... Read more

A:HJT Log and a trojan in System Volume Information folder

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

4 more replies
Answer Match 88.62%

Is it normal for a brand new external drive bought in year 2013 to have a system volume information folder that is created in 2012? I thought the folder should be the date it is first plug into a computer?

A:Question regarding system volume information folder

The folder would keep the time stamp of when it was created. It's not unheard of, the seller may have had it a long time or the vendor they got it from. I have bought new drives with a year-old production date.

3 more replies
Answer Match 88.62%

How can I view the System Volume Information folder?
 

A:How can I view the System Volume Information folder?

Right-click, Properties. Give yourself permission under the Security tab.
 

1 more replies
Answer Match 88.62%

Hey guys:

I'm an idiot!!! Last night I deleted my System Volume Information folder off of a Raid-0 set of hard drives. As I mentioned, this raid set is not drive with my XP on it. This is just a drive for storage of pictures, video, and other programs I prefer not to have on my C:\. I did take go as far as to turn off System Restore before deleting it. Now when I boot up I cannot access the drive at all. It tells me that "The drive is not formatted. Do I want to format it now?."

I don't want to do that and I am wondering if there is a way to create a new System Volume Information folder so I can access the drive again???

Thanks

A:Deleted System Volume Information Folder on a Non-Operating system drive???

I think you are connecting the dots...where there is no connection.

Deleting a system volume folder...isn't possible by me, even when system restore is not used (I always disable SR immediately after a clean install). Even though the folders are empty and I don't have SR employed, the system won't allow me to delete these empty folders.

I believe that the problem is your RAID setup...perhaps you ought to try to repair it.

Louis

2 more replies
Answer Match 88.62%

I am using Windows XP Pro and recently created a restore point in my System Restore program. This was over a month ago, and I no longer need that restore point. When I defrag with either Diskeeper or Norton Speedisk, I get a report on a good number of defragmented/defragmentable files, most of which are in the Restore folder in my System Volume Information folder. I was able to access my System Volume folder and found the offending file but hesitate to delete that file unless I can be assured that I can do so safely.

Would a simple delete be okay?

Attached is a screenshot of the folder in my Systems Information folder.
 

A:Safe to a Delete System Restore Folder from System Volume Information?

7 more replies
Answer Match 87.36%

I was browsing a web page and suddenly firefox gave me an security alert that my computer might be in danger therefore all my harddrives should be scanned.Unfortunately , I clicked OK.After that a fake online-scanner webpage came out , according to that web-page it was scanning my harddrives in order to find the viruses.So I immediately closed that fake web-page within 5 or 6 seconds and turned off Adsl modem and disconnected from internet.Although I do not have problems with my computer at this moment ; no slowdowns , ram and cpu usage is normal , I am still not sure whether my computer is infected by any kind of viruses or not.I made a full scan with malwarebytes and kaspersky internet security 2010 (trial version) in safe mode.No viruses found.But I would like to indicate that during scanning with kaspersky ,the scanning process stucked at 91% ,and I was able to complete the scanning process by stopping and then resuming the scan.So should I generate a HijackThis log now or what prodecure should I follow?I also have another question to ask: I have windows 7 installed as OS.I checked the System Volume Information folders for all the partitions for a possible virus infection.I have C: D: (my first harddisk)and G: (my second harddisk) partitions.I've seen that regarding the D: and G: partitions ,for System Volume Information subfolders (SPP etc..), only SYSTEM has the permission (full control) . On the other hand , regarding the C: ,for the subfolders(SPP ,System Rest... Read more

A:Am I infected?And a question about System Volume Information folder

Hello.

Are you experiencing any symptoms that lead you to believe that you may be infected?

As for the SVI folders, you should not alter those permissions.

~Blade

3 more replies
Answer Match 87.36%

in my computer all the hard drives show a recycler and a system volume information folder.even when i insert a pendrive into my computer these two folders are shown. when i delet them it disappears only to come back after a few seconds. is this something to worry?moreover, when i turn on my computer the desktop icons are not the actual ones but after some seconds it becomes ok. please help

A:procreating receycler and System volume information folder

Hi .

I think you meant...recreating, not procreating . In any case, I understand the question.

Those folders automatically appear on any drive (other than optical) which is attached/installed on a system...it's the way Windows operates.

So there is nothing to worry about and they are system files/folders which are there for a reason.

Same for the icon thing, nothing to worry about...perfectly normal, it takes a while for things to get settled.

Louis

1 more replies
Answer Match 87.36%

On my Dell Windows 7 laptop (Studio 1555) I have the System Volume Information showing (despite checking "hide system files" and hide hidden folder options enabled). The folder is also accessable from my admin account (not the root admin but the admin of the PC).

Dell Studio 1555
Windows 7 SP1 x64 (all updates installed)
Norton Internet Security 2013.

A:System Volume Information folder showing on my Dell PC

I've done a factory re-install of Windows and the folders are still showing.  I think it's showing by default for that particular Dell model.

1 more replies
Answer Match 86.52%

okay, so I think i got this virus a while ago, but the pop-ups werent too bad. so i would just ignore them (i know that probably wasnt the best idea) but now they are super annoying and i really want to get rid of this stupid virus or whatever it is. I have ran, Malwarebytes, Spybot Search & Destroy, and Avast, and so far only Symantec Antivirus has been able to detect the virus. Im not the best with figuring out things on the computer, so i think im gonna need a lot of help!
 

More replies
Answer Match 86.52%

Hi, and thanks in advance for any help. I definitely have a little spyware on this computer. It's Windows XP. It only manifests itself by either turning my master wave volume all the way down or random audio ads that come from nowhere. Also Internet Explorer windows open infrequently with ads out of nowhere.

I've run Malwarebytes Anti-Malware, rkill, SuperAntiSpyware, and Spybot Search and Destroy and they pick up nothing. Hitman is the only thing to pick up two problems (labeled "smss.exe" and "services.exe") in the C:\System Volume Information\Microsoft folder. I've gained access to it by changing view and security settings and tried to manually delete the two files (which are labeled as "File Loaders" and "Black Internet"). It always says 'access is denied,' even when using Unlocker. Any attempt to delete upon reboot using Unlocker hasn't worked.

Hitman finds them, says it's removing them, and then says they will be removed upon reboot. I reboot and either one or both are still there. Any ideas?

Incidentally, when it starts up after rebooting, Spybot picks up that 'an important registry entry has been changed' and asks if I want to allow the change to the entry "BootExecute. Old data: autocheck autochk *\bootdelete. New data: autocheck autochk *\" I've tried both allowing it and denying it, and the trojans are still there.

Thanks for any help!

A:How do I delete services.exe and smss.exe from my System Volume Information folder?

Hello, the C:\System Volume Information\Microsoft folder is the System Restore Point folder.Now you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Restore.Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"Click... Read more

33 more replies
Answer Match 86.52%

I'm on a Windows XP computer. My C drive (which is main) has a total of 19.5 GB of space but I only have 192 KB of free space left! The hidden System Volume Information folder is taking up 14.3 GB of space! Meaning I am only using like 5 GB for program and personal files. And as we all know, you can't just directly delete the System Volume Information folder since it has something to do with the System Restore stuff (which is turned off!) I have tried every method on the internet to help me, but nothing is working! I tried installing CCleaner but that can't be installed as I only have 192 KB left on the C drive... and when I try to download it into a flash drive and install it from there to use the program, it won't work... I NEED TO GET RID OF THIS SYSTEM VOLUME INFORMATION folder. I think I've come to a point where I don't care if I screw up the system restore by directly deleting the folder. I NEED THOSE 14.3 GB. Is there ANY safe way to get rid of it? I can't even start a new restore point...

Also another problem I'm having is whenever I drag, cut, or copy a folder or item from any of the drives on My Computer, it freezes.

I'll be VERY thankful to those who help!
 

A:How to remove SYSTEM VOLUME INFORMATION folder? [Please help, it's driving me INSANE]

10 more replies
Answer Match 86.52%

Hi,
i'm suspect it had been infected since it turn into blue screen and it reboot once, right after that my laptop acting strange with the following symptoms:

1. There is these additional folder in C:/ which are Recycler & System volume information which would appear again after reboot even it were deleted.

2. I was once able to trace that svchost.exe to run in C:/winxp/system32/ locking the folder System volume information by using Unlocker but unable to run for second time.

3. The svchost.exe is using great amount of memory usage (49,000K) as shown in Task Manager.

4. As i'm browsing Internet, Outlook express and Windows Messenger would pop out automatically without i'm clicking it.

5. When i'm browsing using Firefox, it would appear another unknown webpage for about 1 second before display the correct webpage.

6. I'm using Kaspersky Internet security (chinese version) but could not detect any virus thread .

7. Folder in Windows explorer would display a pop up showing the details of the folder even the view type is tiles.

Appreciate your help in advance
DDS (Ver_10-12-12.02) - NTFSx86
Run by Admin at 14:00:14.98 on 04-Jan-11
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.1248 [GMT 8:00]

FW: ZoneAlarm Firewall *Enabled*

============== Running Processes ===============

C:\WINXP\system32\svchost -k DcomLaunch
svchost.exe
C:\WINXP\System32\svchost.exe ... Read more

A:Couldn't delete svchost.exe in system volume information folder

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

11 more replies
Answer Match 86.52%

Hello friends!

I am working with Windows XP SP2. I am facing a problem in accessing the folder alled "Syatem Volume Information". I found this folder in all the drives of my HDD, but whenever I click in any of them using Windows Explorer, I get an error saying "System Volume Information is not accessable, Access is denied".

I have disabled the System Restore feature and I guess this folder is used to store files of System Restore. Even after disabling System Restore, there are files left in this folder which is using a good amount of my HDD space.

Please tell me as to how can I access the contents of this folder and is it safe to delete whatever is in that folder. Moreover, as I already disabled the system restore feature, is there a way to completely remove this folder.

Thank you.
 

A:Solved: Problem to access System Volume Information Folder?

Hi,

Yes, the SVI (System Volume Information) folder is where SR (System Restore) restore points are stored. SR will place a SVI folder on every partition it sees. This will include external hard drives and some flash drives. There is no way to permanently remove the SVI folder, other than hiding the partition with 3ed party partitioning software. Normally disabling SR empties the SVI folder.

Here are instruction on how to access the SVI folder.
http://bertk.mvps.org/html/tips.html#SRFileLocation

If the Indexing Service is turned on you will see a catalog.wci folder in the SVI folder.
 

3 more replies
Answer Match 86.52%

i have just recently installed avast antivirus. the first scan came up with 2 viruses. i deleted the first one because it just infected a game. the second, i didnt, because i dont know what harm it could do to my computer.

the scan came up with:

c:/system volume information\_restore{05779BB2...SomeMoreNumbers....34.des is infected with Win32:sdbot_47

i didnt delete it yet. what can i do???

before installing avast, i have mcafee antivir installed but the virus didnt show up.

currently, these are on my computer: mcafee antivirus, avast, zone alarm, ad aware, spybot. i just downloaded all of these 2 days ago except for mcafee which i have had forever.

A:System Volume Information Folder Infected With Win32:sdbot

Hi some info here......... http://www3.ca.com/securityadvisor/pest/pe...px?id=453088763 it also appeers that it is in your system restore,you might have to disable system restore to delete it..... Hope this helps...

1 more replies
Answer Match 86.52%

Over the last two months, for no apparent reason, the SVI grew 44 GB, eating up precious HD space. For what I can see the system is creating Restore Points at a pace exceeding one each 7 days or each time a system update is made.
I need to a) eliminate about 32 GB of restore points (averaging 3.5 GB each) since Nov 2014 and b) set restore point pace back to normal.
Thanks in advance

A:SYSTEM VOLUME INFORMATION folder grew 50% in 2 months. Need to trim

Check the registry entry shown in This Post

Personally I reckon it's best to disable system restore entirely and make regular system image backups.

7 more replies
Answer Match 86.52%

This is really bothering me. I disabled the System Restore function, but my SVI folder still contains over 10GB of data! And I find it hard to believe that the indexing service uses up this much space... so, what can I do to free up all this space?
 

A:System Volume Information folder taking up over 10GB of space

7 more replies
Answer Match 86.52%

I am unable to rid my system of a trojan since it is located in the System Volume Information folder which I am unable to access. I've researched methods of gaining access to this area, but have still been unsuccessful. Any suggestions or assistance would be greatly appreciated. Thank you!

Here is the excerpt from my Avira AntiVirus scan log denoting the location of the trojan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\System Volume Information\_restore{04376BDB-457D-47BC-A091-B7E57E45A466}\RP6\A0000419.dll
[DETECTION] Is the TR/Fakeinit.17408 Trojan
C:\System Volume Information\_restore{04376BDB-457D-47BC-A091-B7E57E45A466}\RP8\A0000715.dll
[DETECTION] Is the TR/Fakeinit.17408 Trojan
C:\WINDOWS\system32\ndisdrv.sys
[DETECTION] Contains recognition pattern of the RKIT/Tiny.HL root kit

Next, here is my HijackThis scan log:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 11:41:09 PM, on 01.21.10
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system3... Read more

More replies
Answer Match 85.68%

i have windows xp pro sp2. some days ago, i installed avast antivirus. and with avast, after you install it, it does a quick scan of your hard drive upon boot up. the scan starts before i log in to windows (so its just the blue screen and the scanning). it is said that the scanning only happens once. avast managed to find 2 infected files. i deleted the other one. the second one was this:c:/system volume information\_restore{05779BB2...SomeMoreNumbers....34.des is infected with Win32:sdbot_47 [trj]

i didnt delete that file because i was afraid that something wrong might happen.
so after researching and asking people about it, i have been adviced to disable system restore and do a scan in safe mode.

i didnt disable the system restore because all my restore points would be deleted and there are people who adviced against this.

so i did a full scan on safe mode. some files could not be scanned. actually, around 288 of them. an example is...
local settings/temp/..... unable to scan:CAB archive is corrupted
what does this mean?
others are unable to scan:archive is password protected.

after the scan, there werent any infected files found! i am quite sure that the win32:sdbot is still there because i have not deleted it! why wasnt avast able to find this? i have done online scans too but it came up with nothing.

also, when i run spybot, these 2 files always come up after deleting them lots of ... Read more

A:System Volume Information Folder Infected With Win32:sdbot... Trojan?

You SHOULD turn off restore points to flush that out, then boot and then turn them on to set a clean restore point - log looks fineHere's howhttp://service1.symantec.com/SUPPORT/tsgen...src=sec_doc_nam

1 more replies
Answer Match 78.96%

Hello,

I just bought myself new HW and a new SSD for my computer, and I also installed a fresh Windows 7 on the new SSD. I put my old HDD with Vista on D: and copied a couple of documents over to "my documents" folder to my C: drive + a couple of other files.

I am now cleaning up my D: drive to get rid of all the Vista files which I don't need any more, and I have stumbled over "System volume information" folder. This folder was last modified at the date I installed Windows 7 (5 days ago). Can I just remove this folder without any repercussion?

A:"System volume information" folder on my old Vista installation

It's actually a part of System Restore; the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where OS stores these points and associated information that makes them accessible.
If you're not using System Restore feature, you can delete it. I recommend you to keep it untouched.
Fore more information, refer here:
Tips Fixes & FAQs
Take Care

6 more replies
Answer Match 78.96%

When I attempt to open the C:\System Volume Information folder so I can view the contents of the _restore folder, I receive the message seen in this screenshot.

If I do a "search" for the _restore folder, nothing appears.

What gives?

I don't recall having this problem before the hard drive was replaced and Windows XP SP2 was reinstalled from scratch.

I know that System Restore is working because I've created several restore points before installing new or updated hardware drivers.

----------------------------------------------------------------
 

A:Problem Opening "System Volume Information" Folder

9 more replies
Answer Match 78.96%

I have a SIMPLE and easy way to remove viruses from system restore without losing all your restore points.

In command prompt type:

cacls "c:\system volume information" /e /g "username":F

(username = your user name eg. Administrator)

it will say 'processed dir.....'

run the virus scanner again to remove the virus.

I do this in safe mode, in the administrator account so that my standard account can't access the system restore and screw something up.

Shaelesand.
 

A:Remove Viruses from XP Pro "System Volume Information" folder

That's a good suggestion for users running Windows XP Pro. Basically that command is granting authority to the "System Volume Information" folder to the user you specify on the command to get around the "Access Denied ...." error.

The other way to accomplish it is to disable "Simple File Sharing" under the Folder Options. Then right click on the "System Volume Information .." folder and select Properties. Then click on the "Security" which appears since you disabled "Simple File Sharing". At that point you can grant the user authority to the folder.

Anyway, thanks for the shortcut. It will come in handy in the future.
 

1 more replies
Answer Match 78.96%

My virus scanner detected a virus in the System Volume Information directory, the problem is this folder is unaccessable for some reason. It is a hidden folder but i cant find it and in safe mode i still cant access it. My virus cant get rid of it for this reason as well I am guessing. Please help me someone.

When i start my PC an error with a message such as this pops up: AVG has detected the virus worm/agobot in C:/System Volume Information/ etc. etc, the rest is a bunch of numbers then an exe. file.
 

A:How do i access "System Volume Information folder"? Virus in it.

Right click "My Computer" > select Properties > System Restore tab > tag the box to disable System Restore. Affirm the action and close the screen. Reboot for good measure.

You may then reenable System Restore if you like, the virus it had in its memory will be long gone now.

Regards.
 

3 more replies
Answer Match 78.96%

Hi all.

So i upgraded from xp to 7.So i am now on windows 7.The first thing i did is download and install Avira,I updated it and did a full system scan.It found around 20-30 viruses,trojans,malware,irc bots in "C:\System Volume Information\_restore{5E03FC9B-BBC4-4FA8-96F7-D40CC10DBA4A}\RP7"

So i let avira delete all the detected files in RP7 folder.I went to the folder and found like icons,.dll files,etc from xp..So i deleted every file in the RP7 folder..


Is it safe to delete the folder "System Volume Information" located in my C:\ driver?

Thank You.

A:Is it safe to delete the" System Volume Information" folder.

You are not addressing the root problem. The System Volume Information folder stores the restore points created by System Restore on enabled drives. These points let you take your system back to an earlier point of time, should it start misbehaving and you cannot rectify the problem directly. If the system is infected at the time a restore point is created there's a good chance it will exist within the restore point.

System Restore is an excellent tool and I would not suggest disabling it or deleting the SIV folder. What you can do is delete all existing restore points to avoid reinfection on running restore, then clean your system thoroughly, then create fresh restore points.

The best course of action is to prevent infection/malware in the first place. In combination with a good backup strategy System Restore is an excellent tool.

4 more replies
Answer Match 78.96%

I'm using Windows XP SP2 Home Edition and am trying to access the C:\System Volume Information folder, but I keep getting an "Access is denied" message, even after following the below directions.

1. Click Start, click Run, type cmd, and then click OK.

2. Make sure that you are in the root folder of the partition for which you want to gain access to the System Volume Information folder. For example, to gain access the C:\System Volume Information folder, make sure that you are in the root folder of drive C (at a "C:\" prompt).

3. Type the following line, and then press ENTER:
cacls "driveletter:\System Volume Information" /E /G username:F
Make sure to type the quotation marks as indicated. This command adds the specified user to the folder with Full Control permissions.

4. Double-click the System Volume Information folder in the root folder to open it.

5. If you need to remove the permissions after troubleshooting, type the following line at a command prompt:
cacls "driveletter:\System Volume Information" /E /R username
This command removes all permissions for the specified user.

My problem may be with step #2, as I'm not sure what to do what it says in the last sentence. How do I get to a C:\ prompt?

Here is a screenshot of what the command prompt window looks like when I first open it.
 

A:Trouble Accessing The "C:\System Volume Information" Folder

16 more replies
Answer Match 78.54%

Hi. I'm trying to get rid of files and this one is the main one that I have found so far that is getting stuck and not being deleted. It says that "change.log" is being used by other users.

Occasionally as well a chinese website pops up for some reason.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:33:25, on 17/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton PC Checkup\executables\mrHealthy\MrHealthy.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\S... Read more

More replies
Answer Match 78.54%

Hello,

Let start off saying I know what this folder is for (System Restore) and know how to typically get rid of the space it takes up (merely disable system restore). However, in this particular case, it's not working and need to figure out how to make Win 7 delete it.

In this particular situation this is an external hard drive that I hook up to other PCs quite often in transferring data and imaging PCs (I'm a PC tech). As such, the hard drive has accumulated quite a few restore points on it from these various systems. Disabling system restore from mine does not remove these other restore points.

Windows XP I remember would let me remove it if I took ownership of the files, Win 7 will not (although it does not kick back any error messages). So... how do I get rid of it? Or at the very least, the multiple restore points within?

Thank you.

Solved: See Schmik and alan10's posts on page 3, posts 22 and 24, respectively. Thank you both.

A:How to delete "System Volume Information" folder on Win 7

  
Quote: Originally Posted by FuryoftheStars


Hello,

Let start off saying I know what this folder is for (System Restore) and know how to typically get rid of the space it takes up (merely disable system restore). However, in this particular case, it's not working and need to figure out how to make Win 7 delete it.

In this particular situation this is an external hard drive that I hook up to other PCs quite often in transferring data and imaging PCs (I'm a PC tech). As such, the hard drive has accumulated quite a few restore points on it from these various systems. Disabling system restore from mine does not remove these other restore points.

Windows XP I remember would let me remove it if I took ownership of the files, Win 7 will not (although it does not kick back any error messages). So... how do I get rid of it? Or at the very least, the multiple restore points within?

Thank you.


You need to disable system restore on the external hard drive. To do this, go to start, then right click on computer, then click properties. In the top left, there will be an option that says system protection. Click on that.nAfter that it will show all of the drives amd you will see a "yes" or a "no." Find the external hard drive, and if it says yes, click on configure. You can now turn off system resotre for that drive.

9 more replies
Answer Match 73.08%

Hello to All,

How can I get access to my Sytem Volume Information folder? It says access denied when I try to open it.

I want to permantly save a good system restore point in another folder so it will not get lost. Sytem Restore will not save a permanent restore point and I wanted to keep one forever.

Any help would be appreciated.

I have WINXP Pro Corp.
 

A:Sytem Volume Information Folder Access?

Quazar,
To access 'system volume information' folder, rt. click this folder and then select 'sharing and security'. I have xp home and in this OS, there is only a 'sharing' tab. Under this tab, checking both checkable squares under 'network sharing and security' and then clicking 'apply' will give access to 'system volume information' folder. After you have saved your selected Restore point subfolder to another place, again make this folder unaccessable so that it does not get corrupted.

My guess is that you will have to put back the saved restore point subfolder in the 'system volume information folder' before you will be able to use it, but I am not sure about this, as I have never tried it.

Preet
 

1 more replies
Answer Match 70.98%

All of the sudden my "System Volume Information" folders (the system restore folders) on all of my hard drives are shown even when viewing hidden files is off. Tried to mark them hidden, but it won't let me. Anyone have a clue as to why they would suddenly unhide themselves and not allow me to hide them again? This is on XP Pro with no service pack1 installed. Just bugs me they did that all of the sudden. Haven't installed anything recently except Paint Shop Pro 7 and Easy CD Creator 5.2 plus the update patch to 5.3.

Thanks,

Smith
 

A:"System Volume Information" folder won't go "hidden"

11 more replies
Answer Match 70.56%

Hey, everyone!

Looking for some advice on getting my GB back, if possible.
I hope I'm posting in the right area.

The other day I had to do a System Restore on my Compaq (Windows XP) so far everything is working fine now. Though, I noticed my computer was running slower than usual. I checked my overall GB usage and found that it had dropped 20GB since the System Restore. My computer is currently 140GB in total and right now only 50% of it is left, making my computer run...not so quickly.

I used TreeSize and found that the missing 20GB was being used in "System Volume Information". I don't mean to sound like a newbie, but what exactly could be suddenly taking up 20GB of my space since the system restore? Is it possible for me to get it back without harming my computer? How do I go about doing that?

Someone mentioned that I should make sure it wasn't trojan/virus related, so I've run anti-virus, anti-malware, PC tuneups, etc. Everything is clean. Any advice?

Thanks so much!

EDIT: Okay well, after searching deeper into the "System Volume Information" I see that all the used GB is coming from a folder inside called "_restore{" and there must be 70+ different files inside, I'm guessing these are system restore points? Most of them are less than 1GB (though there are so many it apparently adds up) but one of them is a whopping 13.3GB by itself. What can I do about all these?

 

A:Help! Missing 20GB after System Restore, found in System Volume Information -- Why?

7 more replies
Answer Match 70.14%

I've checked three of my four computers and only one of them has a folder named "RECYCLER". All the others have a folder named "Recycled", and there is the little recycle bin icon where there would otherwise be a folder icon.

If that's the case, you probably have two files in your root directory named "auto.exe" and "autorun.inf". These are malicious little buggers that seem impossible to get rid of, and they seem to be causing other types of problems in the operating system.

The only way I've been able to get them off of attached devices is to disconnect the host computer from any outside connection, i.e., cable modem, telephone. Then turn off the computer and unplug it for 30 seconds. Also, disconnect the attached device from the computer. Then plug in the host computer and boot it up. Make sure you do not have the above named files in the host. (They may be hidden in the Prefetch folder.)

Once you're sure they are completely out of the host, do the 'turn off', 'unplug', etc. cycle again. Reboot. (You may notice that the computer works a little differently. In my computer, the submenues started showing up when I run the cursor near any particular icon on the desktop. The submenues started working in other places too... but I digress.)

Recheck the host computer and verify that the two above named files are actually gone. If they are, your host computer is clean.

Here's the sad news. I still haven't figured out how to... Read more

A:System Volume Information

One other note... When I tried to download a file folder into the mass storage device on my laptop (from the host computer via the wireless router), BitDefender (anti-virus program) recognized "auto.exe" as a virus... I'm still researching that avenue...

4 more replies
Answer Match 70.14%

I have an extremely large file (system volume information) which contains a file named:
"_restore (224E0294-7FFD-9D04-A63B49402B20)". In that file are daily "snapshots" of my files. Each daily snapshot is in a separate folder - consecutively numbered (example: RP460 up to RP561.

Each of these folders contain over 130mb of files and are using up my storage capacity on C drive.
Can I delete all but the last few of these folders?

A:System Volume Information

Quote:




Can I delete all but the last few of these folders?




NO.

By default the contents of the system volume information folder is not accessible to even an admin account. And for good reason. Any direct deletion or modification of it's contents can, and probably will, corrupt the system restore facility and render it useless.

The disk cleanup utility can delete old restore points and you can also specify how much disk space can be used but do not attempt direct modification of the folder.

Actually I would recommend setting the security attributes of the folder back to what they were to prevent accidental modification. There is really no need to to access the folder at all.

3 more replies
Answer Match 70.14%

I have a virus or malware. Every time I run Ad-ware . I get malware that show up in C:\ System Volume Information.I keep removing it but it just comes back. I add my Hi-jack reporLogfile of Trend Micro HijackThis v2.0.2Scan saved at 2:30:58 PM, on 10/15/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18241)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC:\Program Files\iRacing\iRacingService.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS&#... Read more

A:C:\ System Volume Information

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.I get malware that show up in C:\ System Volume Information.The only way to clean that is like this:Turn off System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.RebootTurn ON System Restore, On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.UN-Check *Turn off System Restore*.Click Apply, and then click OK.I see a few other issues in this HJT log and would be glad to help you address them if you will post a fresh HJT log.Thanks

2 more replies
Answer Match 70.14%

I am having win7 home basic(64-bit) operating system on my laptop.In each
drive of my hard disk $RICYCLE.BIN,System volume Information and sys folders
of 0 byte size get created before some days. When I unchecked option to show hidden files from folders option folders got hidden.I tried to delete these folders but it's not working.I also tried to delete folder by taking ownership of folder form properties menu of folder.This is decreasing speed of my laptop.I am not understanding if they are system folders or due to virus.Plz reply.

More replies
Answer Match 70.14%

Hi guys and gals

This is just strange I have found a virus in one of my restore points but No problems are currently in existed. So I have a basic question.. How did a virus get in to my restore points? odd?

File C:\System Volume Information\_restore{736B8453-93FE-477D-9F4C-E9DBA07C5B6E}\RP400\A0039023.exe is infected by Win32:PSWtool-S [PUP], Moved to chest this is what the entry stated

After I found that I reset my System Protection. Going to create a Manuel Restore Point. and re run the select area tests.

Thanks

A:System Volume Information

Create a New Restore Point[/COLOR][/URL][/B] to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under System Restore.Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"Click Yes, then click Ok.Click Yes again when prompted with "Are you sure you want to perform these... Read more

4 more replies
Answer Match 70.14%

I have this directory named System Volume Information on my hard drive. You can't even access it. So, what good is it and what is it?

A:System Volume Information

http://support.microsoft.com/kb/309531

2 more replies
Answer Match 70.14%

Hi:

I am having problems trying to remove Trj/CI.A from the system volume information folder. I can't execute any .exe commands or even get to the command prompt (even in safe mode). My combofix results are listed below. Any help is greatly appreciated.
ComboFix 11-01-29.03 - Sports Xpress 01/30/2011 13:51:35.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.766.180 [GMT -6:00]
Running from: c:\documents and settings\Sports Xpress\My Documents\Downloads\ComboFix.exe
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}
c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}\chrome.manifest
c:\documents and settings\Sports Xpress\Application Data\Mozilla\Firefox\Profiles\vh8oec4d.default\extensions\{369ff373-e69e-472c-a5fd-9f264422d0f0}\chrome\xulcache.jar
c:\documents and settings\Sports Xpress\Appl... Read more

A:Trj/CI.A in system volume information

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It... Read more

2 more replies
Answer Match 70.14%

C:\System Volume Information

I have system protection(restore) turned off.
And it has 4GB of data in C:\System Volume Information.

How can this be. It is also allowing me to go back to a restore point.

Windows 7RC 64Bit.

A:C:\System Volume Information

Its part of the system restore feature. So if you dont use that you could disable it and it should remove that folder.

9 more replies
Answer Match 70.14%

Hi,

I'm running Vista HP 64-bit on my home build PC, and I was trying to clean up my C: drive when I noticed how large the System Volume Information folder was (31Gb on a 120Gb HD). I investigated and I've tried to delete these files.

I've tried searching the problem and most of the answers are that the problem is system restore. I've turned System Restore off, so I know that these files are not associated with this. I've tried to take ownership and delete them. I've tried deleting them in Safe mode, I've tried using a file shredding software, and no joy.

I really need some advice!!!

A:System Volume Information

Hi -

Add TakeOwnership to your context menu. Download the .reg file, run it and allow Registry merger to occur -

http://jcgriff2.com/0x2/takeown_icac...ows7_Vista.reg

Bring up an elevated administrative cmd/DOS prompt -
START | type cmd.exe | RIGHT-click on cmd.exe above under "Programs" | select "Run as Administrator" | Paste the following -

Code:

attrib -h -s c:\system information volume\*.* /s /d

Go to the folder, RIGHT-click on it, select "Take Ownership"

See if you can open it now.

Regards. . .

jcgriff2

`

19 more replies
Answer Match 70.14%

I built a new computer with a 160 gig drive in it. This drive has 2 partitions, one with Win XP Prof on it. I took my old 80 gig drive out of my old computer(which also has 2 partitions) to transfer files to the new drive. This drive had win 98 on one partition but I did not have it bootable. I've had it in the new computer for about 5 months now and want to reformat it to clean it all off. I noticed that there is a folder there that is called System Volume Information. The sub-folders are restore folders with current files in it. Why are the restore files being stored on this drive and not the new one with XP on it and is it all right to delete these files?
 

A:System Volume Information

I don't know why it would create the current files in those folders, but Iknow that the Vol Info on my C: drive is not accessible.

If you aren't sure what will happen if you reformat the secondary drive, just unplug it and run the PC as normal...give it some time, and if it all works properly, I wouldn't worry about it - just make sure that it is set to cable select or slave, replug it in, and reformat.

MBN
 

2 more replies
Answer Match 70.14%

In a recent attempt to clear some space on my hard disk to improve performance, I decided to perform a Treesize scan to identify the folders containing the largest amount of data. According to Treesize, the folder, "C:\System Volume Information" has a capacity of 42.3 GB and is easily the largest on my hard drive. From a search on here, it seems to be the location for System Restore points, even though I've configured that to use just 200 MB of disk space, and only the most recent System Restore point is available to return to.

I'm running Windows XP Home Edition SP2, with a 146 GB hard disk. Any suggestions as to how I can clear this space would be gratefully appreciated. Thanks.
 

A:C:\System Volume Information

16 more replies
Answer Match 70.14%

So, I set configs to allow 111 GB for System Restore, thinking I'd buy some extra insurance, on a 1.5 TB HDD. And now looking why I can't create Drive Image backup on 250 GB Drive, when I used to. Turns out, the last "critical" update for Win7 restore point is using a whopping 70 GB of space. What's up with that? Usually the restore point directories are in the single digits. Windoze 7, Home Premium, x64.

A:System Volume Information 109 GB !!

If we are talking about shadows and shadowstorage, this would be very strange. Usually a shadow (restore point) is between 250MB and 1GB (approximately). Are you sure that those 70GBs are only 1 shadow. I suggest you do the following:

1. Open an elevated Command Prompt (run as admin) and type: vssadmin list shadowstorage That will show 3 numbers - Used, Allocated and Maximum. Allocated is the amount that has been reserved at this point in time and Maximum should be your 111GBs.

2. Again in Command Prompt type: vssadmin list shadows That will list all the restore points you have (on all partitions). They are dated. If you want a convenient program to look at your restore points, get Shadow Explorer.

6 more replies
Answer Match 70.14%

Vista is dumping System Volume information on every HDD ive got and its dumping it all over the place and i carnt defrag nore can i delete any of the files. Theres about 40gb in total..
There is no system protection enabled on the HDDs as i use Vista's backup tool once a week (then store it to a different HDD).
How can i unlock and delete these files, as it seem every other day it grows in size..

A:System Volume Information

Hi and welcome to TSF

First I would like you to go to "Folder Options". Click on the view tab and scroll all the way down. When you see " Simple file sharing (recommended) " uncheck that box. The go to each drive that has the System Volume Information. Right click the folder and go to the Security Tab. Click " Add... " and in the text box type in " Everyone ". Click chack names then hit Ok, Apply, and then Ok again. Then go through the folder System Volume Info -> Go through the next folder -> Delete everything that has a blue tint (meaning all the compressed folders.

* Personally I just shut off System Restore function because all it does is hug up drive space and it never fixes anything for me; If you turn it off then all the files will be deleted automatically without the above steps *

3 more replies
Answer Match 70.14%

This post is my first; I'd like a second opinion from B C folks before I proceed to fool with VISTA's System Restore Points for the first time.

I run Home Premium 32-bit on a partitioned Gateway laptop with 221 GB allotted to C/ and 57 GB of C/ is in use. Of that 57 GB, 31GB is filled exclusively with -- guess what -- System Volume Information files! I'd like to prune this back a little, but only if doing so won't throw VISTA into a tizzy.

Anybody out there done this already? Anybody wanna try it first? I've searched the B C forums for this topic and haven't found one yet specifically adressing this issue. Here are my sources --

According to this page at TechRepublic:

<<http://techrepublic.com.com/5208-6230-0.html?forumID=228428&start=0&taq=rbxccnbdisc1>>

VISTA's SRP is set to delete old files after 136 years although its XP predecessor did so after a mere 90 days.

Indrajit Chatterjee's Blog 3/25/08 "Reclaiming disc space from 'system volume information' offers the following instructions:
<<http://indrajitc.wordpress.com/2008/03/25/reclaiming-disk-space-from-system-volume-information/>>

Thanks for your attention, folks.

A:System Volume Information

Here's a very similar link from the person I consider to be an authority on all things System Restore: http://bertk.mvps.org/html/diskspacev.htmlShouldn't be any problem.

7 more replies
Answer Match 70.14%

My computer has been sluggish lately. I've scanned with everything. My active scan logs and HJT logs are clean and I've scanned for rootkits.

And Anivir's on access scanner has been detecting trojans in the System volume information
folder but I can't open the folder because access is denied.

This is one of three I've quarantied from the same location

C:\system volume information\_restore{082A6CE9-706C-4F27-9BC0-3693FCF3DE9E}\RP1052\
ao220720.dll

I've turned off and on system restore but that didn't seem to clear it out.

Should I try to delete this folder \RP1052\ with because that's where the 3 files were been found.

Any help would be appreciated
 

A:system volume information

http://support.microsoft.com/kb/263455
 

3 more replies
Answer Match 70.14%

I was defragging with defraggler and i noticed that there were a few defragmented files in System Volume Information but they were huge files which added to about 8gb. It could be more as only the fragmented files add to 8gb.

I was wondering where these files came from? They have long, random letter/number names and range from 200mb - 3gb each

Before my factory settings reset, i used to have only 1 huge file in system volume information which was ~2gb.

is it okay if i delete these files

thanks

A:~8-9 GB used in C:\System Volume Information\ ?

They are system restore points.

System Restore

You can safely delete all of them but the most recent one to get the space back if you like, but be aware that you won't have those points to go back to if you ever need to, except the most recent one made. They will be made again after a while, which you can then repeat if you want. Or you can just leave them be.

System Protection Restore Points - Delete

You can also change how much or how little space system restore will take up. Or just leave it like it is.

System Protection - Change Disk Space Usage

3 more replies
Answer Match 70.14%

My System Volume Information folder has 28 of those very large files
that take up 27.2 GB of disk space. The oldest is dated 11-01-2013. This seems to me to be too much . Is it too much? If it is too much, what could cause that to happen?

A:System Volume Information - Is it too big?

The System Volume Information folder contains your Windows restore points. Depending on the size of your hard drive, 27 GB isn't that much space.

You can adjust the amount of hard drive space the restore points use. In the Search Bar type Advanced then select View Advanced System Settings then click on the System Protection tab, from there you can adjust the percentage of hard drive used for restore points.

4 more replies
Answer Match 70.14%

Hey guys,

Just a quick question, I've a 80gig hard drive, partitioned in two; 52gig on C, & 24gig on D,

When I ran Treesize pro while doing a spring clean to clear some space, It shows that System Volume Information is occuping 22 GIG on my C Drive - ?!?!?!?!

What is System Volume Information within windows??

I can't open the folder within treesize, and I don't want to delete it wothout knowing what exactly it's purpose is...

Screenshot

Please help!!

Cheers

Sticker
 

A:System Volume Information - XP - ???

Have a look here.......

http://www.theeldergeek.com/system_volume_information_folder1.htm
Debe
 

1 more replies
Answer Match 70.14%

Seems I have a problem. I left my house for about 20 minutes, come back to my computer and Norton is open saying it found and quarantined a trojan horse. I don't know how I got it, considering I was gone and everything on my computer was closed.

This was the exact file and location:

File: C:\System Volume Information\_restore{E9431B88-3A8B-4B9F-B2B1-ABBDE576F6FD}\RP339\A0202805.dll

I want to make sure there is nothing else, because with just a .dll it makes me think there is more infected files.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:31:45 PM, on 5/13/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.... Read more

A:C:\System Volume Information\

8 more replies
Answer Match 70.14%

I took the ownership of System Volume Information folder.then i created a folder in it.but now i cant delete that folder.in xp i could do it but not in 7.please help me..

A:System Volume Information

  
Quote: Originally Posted by vajeen


I took the ownership of System Volume Information folder.then i created a folder in it.but now i cant delete that folder.in xp i could do it but not in 7.please help me..



Why on earth would you want to take ownership of "System Volume Information" and make a folder in it?

"System Volume Information" = system only and should remain hidden.

Hide it and forget about that folder, messing with "System Volume Information" could get you only deeper into trouble.

2 more replies
Answer Match 70.14%

Hello. Im a novice so please enlighten me.

my AVG antivirus always displays this message (even though im not running the scan manually)

Threat Detected! while opening file: E:\System Volume Information\_restore{9E74D4F4-A15B-4496-A0F3-77B54401AA42}\A0032793.vbs
Virus Found VBS/small

What do i do? I have tried healing but it failed. if I press move to vault, it says object moved to vault. but then after a few minutes it pops up again.

Then another kind of threat, desktop.ini, pops up from time to time.

how seriously at threat is my laptop? it runs on xp 2000, intel celeron 1.3GHZ

THANKS SO MUCH in advance.
 

A:help please- system volume information

That is in the restore points

Turn off restore points, boot, turn them back on – here’s how

http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam
 

1 more replies
Answer Match 70.14%

I could do with a bit of help here. While doing a bit of analysing I discovered that on my notebook the System Volume Information folder was using 12gb. This rather staggered me but I discovered this was caused by System Restore. I turned off System Restore and rebooted. This emptied the folder as I expected. I then turned it back on, set a restore point and all is fine. About 600mb now.
The thing that has me baffled though is that my desktop computer was showing zero in that folder. System restore was turned on and many restore points had been set. So where is all that information gone. I should point out that both computers are running Vista Home Premium with SP1 and all updates. I turned off System Restore, rebooted then turned System Restore on again, set a couple of restore points, but the folder is still zero. I tested a Restore point and that worked fine. I'm afraid I'm at a loss. Obviously the information is somewhere. Suggestions would be greatly appreciated.
 

A:System Volume Information

Read:--> How to gain access to the System Volume Information folder

Also:

Clear system restore points


Clear your existing system restore points and establish a new clean restore point:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
Select the More options tab
Choose the option to clean up system restore and OK it.
This will remove all restore points except the new one you just created.

 

5 more replies
Answer Match 70.14%

Recently my spyware programs get locked on the "System Volume Information\tracking.log" folder. They work okay in Safe Mode. I found instructions to allow access to the folder, even though Microsoft's Instructions were inaccurate. However, I deleted the file in Safe mode and it reappeared upon reboot.
 

A:System Volume Information

Instead of changing permissions on the folders and thus allowing malware possible access to them, just use Disk Cleanup to delete all but the last of the restore points. If the last one also is infected, make a new one (when your machine is clean, of course) and delete the previous one with Disk Cleanup.
 

3 more replies
Answer Match 70.14%

I am wondering what some of these files in the "system volume information" folder are.chkdsk (this is actually a folder)6373773drv.iswmdllog.datMountPointManagementRemoteDatabasetracking.logI saw these and got suspicious. Anyone know what they are?

A:System Volume Information

Sorry about the vagueness of my question, I've just never seen these before. I know what chkdsk is, I have never seen a folder named chkdsk though.

5 more replies
Answer Match 70.14%

hIYA FOLKS,MY FIRST POSTING - WELL HERE GOES,I HAVE A PROBLEM WITH A FOLDER OF THE ABOVE,(C:\RECYCLER-SYS VOL INFO)..I DELETED THE FOLDER BY MISTAKE,THE THING IS THAT 'TREND ANTI VIRUS' IS STATING THERE IS A SUSPICIOUS FILE THERE,SO HOW DO I GET THE FOLDER BACK IN C:/ KNOWING THAT THE FOLDER STILL EXISTS.I AM ON WINDOWS PROF XP.ALSO,A HARDWARE PROBLEM..MY MACHINE KEEPS GETTING VERY HOT,VERY.!!!!!!!..NOW.!! IS IT THE MOTOR FAN OR MAYBE SOME COMPONENT PROBLEM....THANKS PEOPLE.........WANE K....BOLTON LANCASHIRE - OF THE NORTHERN REGION
 

More replies
Answer Match 70.14%

Is system volume information a virus? There are 2 folders in two seperate hard drives and on one i can delete it but it comes back like three seconds later. On a different hard drive i cant do anything to it at all
 

More replies
Answer Match 70.14%

Hi All,Plz explain what is System Volume Information and how to clean the viruses from System Volume Information.[/font][/size]Regards SSK

A:System Volume Information

Hello, It is a part of System Restore; the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where XP stores these points and associated information that makes them accessible. The Elder GeekCreate a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state. The easiest and safest way to do this is:Go to Start > Programs > Accessories > System Tools and click "System Restore".Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.Then use Disk Cleanup to remove all but the most recently created Restore Point.Go to Start > Run and type: CleanmgrClick "Ok". Disk Cleanup will scan your files for several minutes, then open.Click the "More Options" tab, then click the "Clean up" button under Sys... Read more

1 more replies
Answer Match 70.14%

My system volume information folder is HUGE...it takes almost 20GB of storage, why is it so big?! can i delete stuff in it somehow? i dont want to screw anything up, so some help woul db every nice, thanks

A:System Volume Information

It's a very important folder used by System Restore...it's probably so big due to the amount of restore points you have but 20GB is a bit extreme.

You won't be able to access the folder unless you change the security permissions...but I would stronly advise against doing so.

What may help is if you disable System Restore which will delete the restore points, then re-enable it and change the settings.

You can do all that by right clicking 'My Computer' either on your Desktop or Start Menu then select 'Properties'. Choose the System Restore tab and you can turn it off by removing the tick and clicking Appy. When you re-enable, you can click the Settings button and reduce the amount of disk space usage.

Hope that helps :-)

6 more replies
Answer Match 69.72%

I bought my computer used and have never been able to make a System Image disc for back-up purposes and I've had some other problems with "Backup and Restore" as well. I always get this error: "The backup application could not start due to an internal error: Server execution failed (0x80080005)." By doing research I discovered that this happens because the SYSTEM does not own the "System Volume Information" file, the user does instead (me).
When I got the computer I took ownership of the entire C drive because I kept having permission problems. Now I know better and would not do that again, but I guess the only problem it caused was with "Backup and Restore" - two years on and I haven't had any other problems.
Anyways, I've tried changing ownership of System Volume Information, but it won't let me. I've found several ways to take ownership, but how can I get Windows to let me give ownership back to the SYSTEM? Or is there a way to return the file to its default state, or maybe copy a new version and delete the old one? Thanks for your help.

Here is the post where I found the solution to my backup problem:
Starting Windows 7 Backup : Server execution failed(0x80080005) ????

I apologize if I'm not supposed to post links - I'm new here

A:Need to give ownership of System Volume Information to SYSTEM

Links are OK as long as they're not advertising, objectionable material, solutions that would harm a computer etc.

2 more replies
Answer Match 69.3%

I have nearly 2 GB of files in my System Volume Information directory. This is the System Restore directory in WinXP, but best as I can tell Win 2k SP4 does not include this utility. The files have been created periodically, consistent with various program installations that I've made over the last few months. I have Norton AV, Zone Alarm, a hardware firewall and run Spybot and AdAware. None of these have notified me of problems. I can't find any info on the Microsoft support site or the MS KB about this directory or function for Win 2k. Can anyone fill me in and let me know if and how I can delete some of these files?
 

More replies
Answer Match 69.3%

Hi,
Is it possible to move the System Volume Information folder to an internal HDD (D:\)?
The problem is that the C:\ drive is an SSD with limited capacity and I'd rather not use it for system restore points since there's a 1 TB HDD right next to it...
Thanks

A:Moving System Volume Information

Hi,
The System Volume Information file contains System Restore and is a critical operating system file which should be left in its default location. So I would not recommend you move it to an internal HDD .
If you?re worried about the
limited capacity, I suggest you turn on or turn off system protection for a particular disk to save the space.
Please refer to the following article:
Turn System Restore on or off
http://windows.microsoft.com/en-in/windows7/turn-system-restore-on-or-off
You can also limit the amount of disk space reserved for system restore. When you limit the amount of space, older Restore Points will be deleted if the space is not enough. 

Click the Start   Click on System Protection.Select the drive you want to change and click Configure.Under Disk Space Usage you can see how much space is already allocated for system restore and how much is actually being used.  Drag the slider to the amount you?re willing to give away (recommended: 5-8% of your hard drive) and hit
Apply.
Regards,
Yolanda

2 more replies
Answer Match 69.3%

I need help with the following Norton finds it and reports quarantine succeeded but comes back at each scan. Also just where is it I tried to find the directory or file and I could not. See the message from Norton message I get below.
Thanks in advance
Bill Roland

Message:
Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: W32.Spybot.Worm
File: D:\System Volume Information\_restore{1CC32E8B-5326-4E78-9F19-27BDE193ED7D}\RP105\A0025853.exe
Location: Quarantine
Computer: BILL-2ZBIRW2GCN
User: SYSTEM
Action taken: Clean failed : Quarantine succeeded : Access denied
Date found: Sat Aug 14 22:57:39 2004
 

A:Virus in System Volume Information?????????

Hi Bill ,

Cannot repair, quarantine, or delete a virus found in the _RESTORE or System volume information folder
 

2 more replies
Answer Match 69.3%

Hello. I am looking for some hints in order to get rid an infection that just won't go away; i noticed during a routine defrag a bunch of exe files (A0000451.exe and others alike) in the SVI folders on my partitions; I can't access the folders, an "access denied" message is displayed and they appear to be empty [0kb]. The steps I followed were more or less dictated by previous encounters with a similar problem1. Hijackthis log - confrunted with some online tutorials about it, , I think it looks clean ; anyway, here it isLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:13:18 PM, on 4/17/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Avira\AntiVir Desktop\sched.exeC:\Program Files\Lavasoft\Ad-Aware\AAWTray.exeC:\Program Files\Avira\AntiVir Desktop\avgnt.exeC:\Program Files\Unlocker\UnlockerAssistant.exeC:\WINDOWS\system32\NOTEPAD.EXEC:\Program Files ... Read more

A:System Volume Information infection won't go away

I guess it's solved. I gained access to SVI folders and removed the pesky exe files; ran multiple scans afterward, bitdefender 10 free, avg free, karspersky online and there were no infections detected, other then some tracking cookies. Anyway, if someone has any idea as to why turning off restore points didn't empty those folders, please let me know. It's intriguing.

5 more replies
Answer Match 69.3%

I've noticed that, at least once a day, my Dell Dimension computer gets very busy writing System Volume Information to the disc. According to the resource monitor, the file is C:\System Volume Information\{a98f790-and the rest of the file name looks like a very long registry entry}. At the moment, it's writing upwards of 200,000,000 B/sec to the hard drive. And then it just stops.
It doesn't seem to be causing any problems, or slowing the system down. But I'd like to know what the heck it's doing.
Any thoughts?

Thanks,
Scott
 

A:System Volume Information Activity

6 more replies
Answer Match 69.3%

Hi, Windows will not defrag system volume information and it is 1.6GB. This is obviously slowing my computer down. If I delete the volume information what will happen? Can I delete it?
 

A:System Volume Information Defrag

No, you can't delete System Volume Information, in fact you normally can't access it at all, that's where Windows stores the data for System Restores. The fact that it's defragged shouldn't slow down your system since the only time you read those files is when you do a System Restore, which is usually a rare occurrence.

Post a HJT log and maybe something else will show up that's slowing down your system.
 

2 more replies
Answer Match 69.3%

Hello everyone ! Please do immediate help to me for..
I want to enter into 'System Volume Information' folder which reside into every drive THROUGH DOS PROMPT.
Please tell me what command i should write on dos prompt to enter into this folder ?? As we know all dos commands to enter into any folder is
cd 'foldername' but please check and tell how to enter into System Volume Information.
As this is invisible normally, we can see it on the prompt by typing dir /a command...
Now at the end of the story ... plz tell me how to get into that fort of 'system volume information'.
awaiting for ur reply eagerly at here and also on arjun.arena7@gmail.com
thank youuuuuuuuu.....

A:how to enter into SYSTEM VOLUME INFORMATION

Why would you want to?

2 more replies
Answer Match 69.3%

I delete it, but it stays there, nothing happened. How can I delete it?
And is it safe to do?

A:tell me how to delete System Volume Information on D:

Windows needs that. Well, it certainly wants it.


See: http://indrajitc.wordpress.com/2008/...e-information/

9 more replies
Answer Match 69.3%

Since System Volume Information is a locked file, obviously it can't be defragged, but on my secondary computer it is broken into 25 pieces, which are scattered across the volume. This inteferes with proper organization of other data, and I'm wondering if there is a means to put the pieces
together?

EDIT: If I'm not mistaken SVI is also where shadow copies are located, but I used system cleanup to remove any extra shadow copies, so that there are now only 3.

A:System Volume Information *Defrag*

Disable System Restore. Delete all restore points. Re-enable.

1 more replies
Answer Match 69.3%

hi.
i did a virus scan and it came up with this:

KASPERSKY ANTI-VIRUS WEB SCANNER REPORT
Tuesday, July 19, 2005 23:58:04
Operating System: Microsoft Windows XP Professional, (Build 2600)
Kaspersky Anti-Virus Web Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 19/07/2005
Kaspersky Anti-Virus database records: 131145
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 41167
Number of viruses found: 1
Number of infected objects: 4
Number of suspicious objects: 0
Duration of the scan process: 1694 sec

Infected Object Name - Virus Name
C:\System Volume Information\_restore{7D98AD5D-6286-4C1D-9CEE-9009D230B3F3}\RP51\A0036748.exe Infected: Trojan.Win32.Crypt.e
C:\System Volume Information\_restore{7D98AD5D-6286-4C1D-9CEE-9009D230B3F3}\RP51\A0036750.exe Infected: Trojan.Win32.Crypt.e
C:\System Volume Information\_restore{7D98AD5D-6286-4C1D-9CEE-9009D230B3F3}\RP52\A0036909.exe Infected: Trojan.Win32.Crypt.e
C:\System Volume Information\_restore{7D98AD5D-6286-4C1D-9CEE-9009D230B3F3}\RP52\A0036942.exe Infected: Trojan.Win32.Crypt.e

the problem is,i cant find where the viruses are.i have done a search in files and folders but ... Read more

A:can not find System Volume Information

Those viruses are in your System Restore. Go to Start and right click My Computer and select Properties. Under the System Restore tab put a check mark in Turn off System Restore and click Ok. Repeat this process and Turn on System Restore. This will create a new Restore Point that won't be infected.

3 more replies
Answer Match 69.3%

Hello everyone. I can't access to System Volume Information on xp home, NOT PROFESSIONAL. I read Microsoft tutorials, but nothing. Could any help me, please?
A jpg of what I see.
Thankyou

A:System Volume Information on Xp sp3 home

Hello everyone. I can't access to System Volume Information on xp home, NOT PROFESSIONAL. I read Microsoft tutorials, but nothing. Could any help me, please?A jpg of what I see.ThankyouIs there a reason you want to access this folder? It is kept locked out because of its sensitive nature in dealing with system restore.

1 more replies
Answer Match 69.3%

How can I stop the recycle bin and the system volume information being placed on any attached devices - HDD etc.

Thanks in advance for your help

A:Recycle Bin and & System Volume Information

Hello mchampi, Welcome to TSF!

You cannot prevent the System Volume Information and Recycler Folders/Files from being placed on external Drives.
These two are essential for Windows? to recognise the size and makeup of the Drive; with the 'Recycler' for any files/folders that are intentionally deleted by you on the particular Drive.
Without these two Folder/Files your external Drive/s would not operate.
Hope this answers the query.

Kind Regards,

3 more replies