I need to delete a folder/virus from my System Volume Information folder?

Question

I am cleaning a virus located in C:\System Volume Information\Whistler\smss.exe and svchost.exe

AVG shows it as Trojan horse Downloader Generic9.BUGQ (smss.exe) and Generic9.BUIV (svchost.exe)

I have permission over the folder and have removed the files but after reboot they come back. I have searched the web for both files and there is very little info that I have found. I have turned off system restore and yet they still come back. I have removed the command line in the properties in hopes they cant run but I would like to remove them for ever, or at least till the client messes it up again.

Answer 1

Try running your computer in safe mode and delete it again.Hope it can help you! By the way, I recommend you a more effective method which you can use it next time.



It works like this. When your pc works well, take snapshots for your system. Later while the system has problems, such as virus infecting, crash, you just need to choose a snapshot and reboot your pc. In 20s, your system will be back to the previous healthy state. And you can save the important files to the healthy system. So after system restore, you needn't reinstall all the programs.



Try the trail version: http://www.disk-utilities.com/system-restore/index.html

Answer 2

It's not as difficult as it sounds, and i'm surprised that nobody has yet posted the answer. 1.) Right click the System Volume Information folder, of the drive you want to remove it from, in My Computer, select properties. 2.) On the Security tab, click ADD. 2a.) If you don't have a security tab, open Windows Explorer, go to Tools, Folder Options, View, and uncheck Use Simple File Sharing. 3.)Type in the name of your user account. If you don't know what it is, look in Windows Explorer under Documents and Settings and it lists all the usernames. Click OK. 4.) Put a check mark (click) in the top box, labelled Full Control. This will automatically check the other boxes. 5.) OK all the way out. Now you can delete the folder.

Answer 3

there are few ways viruses can come back on reboot. or in other work a number of ways user can register a program to execute on reboot.

registery entry, startup program, overwrite boot sector, infect more windows files which are needed on system reboot, etc etc



deleting one file most likely wont help and is not helping. in such conditions i do 1 of 2 things

1. create a antivirus boot disks, they will scan your computer and fix it from command line assuming u are booting from there boot floppy or CD. a lot of anti virus call it "rescue disk"

2. FORMAT, its safe to take whole system backup in external or D: since those drives are not boot drive for u. once ur system is reinstalled and anti virus is in working state, scan the backup folder and clean it up



one more thing u can try is restore your computer to a VERY OLD windows backup, may be that backup is clean and i dont know any virus which can beat this thing up ( i dont know viruses much anyways : ) )

Answer 4

turn off system restores and reboot your computer. It should come back clean. Now re enable system restores.