Hi.
I tried to run a quick/thorough scan, and my report says that some files in c:\system volume information can’t be scan. Should I be worried?
Thanks.
Which files, exactly? And what’s the error message?
Please post a screenshot…
“System Volume Information” is created by Windows in all partitions for System Restore points (even if you disable the function).
By default, the folder grows until a certain percentage of the partition. Once it gets to the max size, older restore points are automatically deleted when new ones are created.
So, generally speaking, you don’t need to worry about scanning this folder.
Only when you had some infection in the past, and that infection was “backed up” in the System Volume Information, there is “some relative” need to take care of this special folder.
For example, in such case you wouldn’t want to use that “back up”, since you would be bringing back the infection. Users simple delete older restore points, or they get automatically deleted by creating new ones. In any case, you can’t just delete this system folder (and it is NOT recommended).
So, in relation to Avast scanning (or not) this particular folder, you don’t need to worry about it.
[EDIT]
Since Vlk is a member of Avast Team, you should still post the info he requests.
[/EDIT]
ady4um, not really. The System Volume Information is a very typical “hideout” for many malware families (because the folder is ubiquitous and yet inaccessible for normal users) so scanning it is quite important.
Hi.
I have the log - the errors are ‘archive is password protected (42056)’. The files are similar to this (there are more):
Thanks.
I had the exact same thing happen to me. It all started when i updated my adobe flash player. What i had to do was delete my old restore points using ccleaner, turn of system restore which deleted the most recent restore point, restarted my computer, turned system restore back on, and then ran my virus scan. I got a clean scan after that.
Just for general information:
Turning System Restore “Off”, then reboot, then turn System Restore “On”, then reboot, is enough to delete all restore points (using such method, the CCleaner step is not needed). There are other methods to really erase restore points too, but this is simple enough to describe and perform. Note though, that turning System Restore “off” (even if it was only temporary) also has additional consequences (which I currently don’t write about since it is OT).
After deleting all system restore points, a new Avast scan “shouldn’t” find anything in the “System Volume Information” folder. If it does, then either not all points were deleted, or something “unusual” (suspicious) is inthere.
About CCleaner, it doesn’t really deletes restore points (I think someone called it a “fake” deletion here above), so for the purpose of this topic, CCleaner doesn’t help.
I would like to see your information on that as ccleaner does delet restore points and you only have to look at the system volum information to see that they are truely deleted.