Tech Support > Microsoft Windows > Help and Support > Virus in Windows Protected Directory - HELP!
Virus in Windows Protected Directory - HELP!
Posted by HornBlower on March 17th, 2006


I have two virii in the System Volume Information directory on my o:\ drive.
My virus software can't delete the two .exe files. Windows is protecting
this directory. I have even tried disabling the system restore feature in
the hopes it would let me in to it. I have also booted to the command prompt
and it still won't let me in.

Does any one know of a way to get in to this directory so that I can erase
the virii infected files?

This is Windows XP Pro with SP2.

Thanks,

Robert


Posted by Tom [Pepper] Willett on March 17th, 2006


http://en.wikipedia.org/wiki/Plural_of_virus

"HornBlower" <nospam@nospam.com> wrote in message
news:441b5251$0$58070$742ec2ed@news.sonic.net...


Posted by HornBlower on March 17th, 2006


Thanks for the waste of time. BTW I will stick with virii. I saw nothing
that said it was incorrect, just unusuall and I like better then Viruses.

Robert


"Tom [Pepper] Willett" <tompepper@mvps.invalid> wrote in message
news:eCO%23ALiSGHA.196@TK2MSFTNGP10.phx.gbl...


Posted by David H. Lipman on March 17th, 2006


From: "HornBlower" <nospam@nospam.com>

| I have two virii in the System Volume Information directory on my o:\ drive.
| My virus software can't delete the two .exe files. Windows is protecting
| this directory. I have even tried disabling the system restore feature in
| the hopes it would let me in to it. I have also booted to the command prompt
| and it still won't let me in.
|
| Does any one know of a way to get in to this directory so that I can erase
| the virii infected files?
|
| This is Windows XP Pro with SP2.
|
| Thanks,
|
| Robert
|

You have two "viruses" in the WinXP System Restore Cache. You don't viri or virii becuase
this is no such terminology.

http://spl.haxial.net/viruses.html
http://homepages.tesco.net/~J.deBoyn...-of-virus.html
http://linuxmafia.com/~rick/faq/plural-of-virus.html

You failed to post the Fully Qualified path to the infected files but it is...
C:\System Volume Information\_restore

Any "viruses" (or other non-viral malware) that may be in a sytem Restor cache point is safe
unless your restore from a previously created restore point and that restore point has the
infected file(s).

To flush the cache...
Disable the System Restore Cache.
Reboot the PC and then re-enable the System Restore Cache then manually create a new restore
point.

http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Posted by Tom [Pepper] Willett on March 18th, 2006


Only pretentious people use terms that don't exist.

Tom
"HornBlower" <nospam@nospam.com> wrote in message
news:441b558c$0$58085$742ec2ed@news.sonic.net...


Posted by HornBlower on March 18th, 2006


It didn't say it didn't exist. It said it was unusual. Please read what you
expect others to read.

Robert


"Tom [Pepper] Willett" <tompepper@mvps.invalid> wrote in message
news:OYYIGhiSGHA.5036@TK2MSFTNGP12.phx.gbl...


Posted by HornBlower on March 18th, 2006


Interesting I have gotten four different e-mails from Symantec support that
use the term virii instead of Viruses. I guess it is like Tomato, Tomatoe,
etc. To each there own.

Fortunatlly, someone in another forum decided to help, instead of picking
nicks like monkeys at the zoo.

Robert


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:u2mKkWiSGHA.5884@TK2MSFTNGP14.phx.gbl...


Posted by David H. Lipman on March 18th, 2006


From: "HornBlower" <nospam@nospam.com>

| Interesting I have gotten four different e-mails from Symantec support that
| use the term virii instead of Viruses. I guess it is like Tomato, Tomatoe,
| etc. To each there own.
|
| Fortunatlly, someone in another forum decided to help, instead of picking
| nicks like monkeys at the zoo.
|
| Robert
|

PLONK !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar Posts