DIGIT-ARC read-only archive · snapshot: July 23, 2026

AV finds trojan in C:\System Volume Information

3 posts · originally from https://geek.digit.in/community/threads/av-finds-trojan-in-c-system-volume-information.48932/

b_man
b_man Original post #1
Feb 9, 2007 at 12:38 AM
On two occasions, my AntiVirus has found some trojans in C:\System Volume Information...i allow it to delete the infected files since it can't repair them...my question is:

What is system volume information?? is it OK to let the AV delete these files?

The log is as under...

deleted: Trojan program Backdoor.Win32.Rbot.bwn File: C:\System Volume Information\_restore{592E117C-5274-4000-9367-749921843CE3}\RP271\A0129514.exe

deleted: Trojan program Backdoor.Win32.Rbot.bwn File: C:\System Volume Information\_restore{592E117C-5274-4000-9367-749921843CE3}\RP271\A0129515.exe

deleted: Trojan program Backdoor.Win32.Rbot.bwn File: C:\WINDOWS\system32\syms32.exe

deleted: Trojan program Trojan-Proxy.Win32.Agent.lu File: C:\System Volume Information\_restore{592E117C-5274-4000-9367-749921843CE3}\RP273\A0129550.exe

deleted: Trojan program Trojan-Downloader.Win32.Small.edb File: C:\System Volume Information\_restore{592E117C-5274-4000-9367-749921843CE3}\RP273\A0129551.exe//FSG

deleted: Trojan program Backdoor.Win32.Rbot.bwn File: C:\System Volume Information\_restore{592E117C-5274-4000-9367-749921843CE3}\RP273\A0129552.exe
Arsenal_Gunners
Feb 9, 2007 at 12:40 AM
System volume info=where xp stores system restore data,more here *www.theeldergeek.com/system_volume_information_folder1.htm

if it is a virus,go and delete it :D
Vishal Gupta
Feb 9, 2007 at 12:41 AM
Its the folder, which contains "System Restore" files. So I think u shouldnt worry about it. :)

I'll also suggest u to disable "System Restore" and then delete this folder and then enable it again, if u use "System Restore".

[Edit]
One minute late... :D
[/Edit]