Jump to content

Malware Packer in System Volume Information


Recommended Posts

I ran a full scan on my computer and Malwarebyte found this single infection:

C:\System Volume Information\_restore{34D14554-B97A-47E9-A196-CCC41B55576A}\RP35\A0006651.dll (Malware.Packer.T)

I had malwarebyte delete it, but I want to know what it exactly is. Could it be a false positive?

Link to post
Share on other sites


It can be, but I don't think it was a false positive. This was an infection in one of your system restore points.

Some infections also infect the system restore points.

To be sure you are clean, run a new, full scan with Malwarebytes' Anti-Malware, and post the logfile in your next reply.

Also do this please:

Please go to Kaspersky website and perform an online antivirus scan.

  1. Read through the requirements and privacy statement and click on Accept button.
  2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  3. When the downloads have finished, click on Settings.
  4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs

[*]Click on My Computer under Scan.

[*]Once the scan is complete, it will display the results. Click on View Scan Report.

[*]You will see a list of infected items there. Click on Save Report As....

[*]Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

[*]Please post this log in your next reply.

If you need a tutorial, see here

Link to post
Share on other sites

  • 2 weeks later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.