NOD32 found this: C:\System Volume Information\MountPointManagerRemoteDatabase - error opening (Access denied) [4]
Yes that is correct, the System Volume folder is hidden and it is where System Restore puts all of your restore points.