Deletable virus in unaccessable folder

Hi guys,

On an in-depth scan, I found a virus called Win32/Adware.WhenU.SaveNow. The message given is detailed below.

File M:\System Volume Information\_restore{00B1BA34-CB3E-416E-AF65-E726B9905BCE}\RP114\A0020792.exe is infected with application Win32/Adware.WhenU.SaveNow. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed.

There are two issues here.

1. Why does NOD32 not give me the option of deleting it through NOD itself ? I was given the option of 'LEAVE' only and COPY TO QUARANTINE did not seem to help.

2. As the above folder is a system folder, I cannot get into the damn thing to delete it manually. So far, Windows is saying that the folder containing the virus is actually empty. So I am stuck

Lastly I noticed that if I highlighted on the folder, right-clicked on the folder and scanned for viruses - nothing showed up..

Am puzzled - can someone please help me...

Moggy B

 

Hi there, welcome to Wilders.

From the Frequently Asked Questions - FAQs thread at the top of this forum is the following:

Virus Removal from System Restore. Answer

Cheers

 

to kill when U saveNow try SpybotS&D.exe or Ad-aware SE it kill spyware work ok for me whenUsave come with game's so on. = 37morris8

 

Removal instructions can be found here:

http://www.whenu.com/faq_savenow.html#10

Cheers