okay wtf

Discussion in 'malware problems & news' started by Heath, Jun 28, 2004.

Thread Status:
Not open for further replies.
  1. Heath

    Heath Registered Member

    Joined:
    Aug 14, 2003
    Posts:
    60
    Location:
    Paris, Texas
    okay i have a popup that says i have a virus in c:\system volume information.... and so on, well i go to my c drive and look and cant find the folder, even with show all files, so i run my virus program to scan my entire c drive and i went to bed, i woke up, and no virus found, but yet the pop up right in front saying there is a virus, here is a picture of it
     

    Attached Files:

    • wtf.JPG
      wtf.JPG
      File size:
      58.4 KB
      Views:
      68
  2. meneer

    meneer Registered Member

    Joined:
    Nov 27, 2002
    Posts:
    1,132
    Location:
    The Netherlands
    Looks like your avg has two different engines :D

    Run an online virusscanner, like Pandasoftware's Activescan, or one of the others.
     
  3. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,351
    Location:
    The Netherlands
    It's just because your Restore folder is protected (and hidden), and Antivirus software is unable to modify its contents.
    You'll need to flush that folder:

    1. On the Desktop, right-click My Computer.
    2. Click Properties.
    3. Click the System Restore tab.
    4. Check Turn off System Restore.
    5. Click Apply, and then click OK.
    6. Restart the computer.

    All data, including your virus, will be purged from the restore folder.

    7. Run your antivirus once more.

    After rebooting, re-enable System Restore.


    Good luck,
     
  4. I've got the same problem.
     
  5. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,351
    Location:
    The Netherlands
    In that case the same solution will apply...
     
  6. Yeah it worked, thanks.
     
  7. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,351
    Location:
    The Netherlands
    That's good to hear! :)
     
Thread Status:
Not open for further replies.