SYSTEM VOLUME INFORMATION:It is the folder where windows system restore files are located. If you do not want to use this folder then disable System Restore.
How to get rid of above folders created in Window drives ?
===================================================================================
***********************************************************************************
C:/RECYCLER Folder
C://RECYCLER is basically a location where a users deleted files are stored. After a user empties their Recycle Bin the data will stay in the RECYCLER location. This could be viewed as a kind of hidden back-up for deleted files (99.9% of users don't know about it) or back door to track a user if ever needed. I would imagine its purpose is in the event a user deleted a critical system file that needed to be recovered.
How to remove files in recycler ?
At a Command Prompt issue:rd /s /q c:\recycler - (Use at your own risk) You want also to check permissions on this folder.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
C:/System Volume Information Folder
If you've done much wandering around in Windows Explorer you might have noticed a folder called System Volume Information and wondered what purpose it serves. It's actually a part of System Restore; the tool that allows you to set points in time to roll back your computer. The System Volume Information folder is where XP stores these points and associated information that makes them accessible. If you have System Restore enabled but don't see this folder, go into [Tools] [Folder Options] [View] and click the radio button next to [Show Hidden Files and Folders] and it will be visible.
How to operate/remove System Volume Information folder?
Access is denied to this folder by default. If you feel that there is a virus inside this folder, the to fix:
Right click on My Computer Select properties Select System restore Check turn off system restore Apply and reboot computer
This will delete all contents inside System Volume Information folder restore points including viruses backed up there. Remeber to turn system restore back on, so that it will recreate with virus free new system restore info.
::::Note >> Both Recycler and _Restore (System Volume Information) are system folders. Their contents can be deleted but they will recreate.
***********************************************************************************
There is free utility "Unlocker", it can help. Here is link:
http://ccollomb.free.fr/unlocker/
And If you are using winXP, you can remove System Volume Information by disabling system restore: right click "My computer" -> properties ->System restore
**********************************************************************************
Look If your pc is virus free and you are sure that these folders are not virus then you can
Go to services.msc and disable system restore there and reboot. It will delete system volume information folder which is used to create restore points by windows.
**********************************************************************************
These two folders might contains most of the virus like...
w32.gammia
w32.infostealer
In one organisation where we have installed SEP, we found it, it was very easy to go and manually delete all files inside both folders, instead of SEP to scan and remove viruses. Couple of file does not get removed, ignore them.
This will reduce the scan time, and SEP will remove virus from the files which can not be deleted, if virus are present.
**********************************************************************************
===================================================================================
RECYCLER::
==========
1. click start>>run>>type in "cmd"
2. type the location of your flash drive.. e.g. "d:", "e:", "f:", etc..
3. type "dir /ah"
*you will now see the files/folders with hidden attributes
4. type "attrib [name of file/folder] -r -a -s -h"
*if you're going to unhide files, you should type the whole name plus the extension (format).. example "attrib party.jpg -r -a -s -h"
**if you have folders with 6 characters and above, type the first 6 characters then "~1".. example for folder named "birthday"
"attrib birthd~1 -r -a -s -h"
5. you should repeatedly type dir /ah after unhiding some files/folders so you'll know if they're now working or not..
6. now check you flash drive.. it should be there..
7. Go a head and Delete the folder "rmdir C:\recycler /s" and hit
SYSTEM VOLUME INFORMATION:
==========================
System Volume Information or _Restore Folder can be emptied by disabling the System restore.Right click on My Computer Select properties Select System restore Check turn off system restore Apply and reboot computer.This will delete all restore points including viruses backed up there. Remeber to turn system restore back on.
No comments:
Post a Comment