Trojan.downloader\SystemVolumeInformation\restore4e8f22de-effa-4549-83eb-3ea6cdb098dc

[Caroline]

This trojan has appeared in malwarebytes for 3 days. it is also in my registry. how should I remove it?

[Cloud13]

Things that are in SystemVolumeInformation are in a previous Restore Point. It can't do anything uless you go back to that point.

[Caroline]

Things that are in SystemVolumeInformation are in a previous Restore Point. It can't do anything uless you go back to that point.

Just leave it then, or can I remove it in registry, would this hurt anything?

[Cloud13]

You can create a new restore point, and delete the previous ones.

I dunno which OS you are using, though.

You'll want to first, if you're clean, go to Start Menu > Accessories > System Tools > System Restore and create a new one.

In XP, you go to Control Panel > System Tools (I think, on a Vista right now) > "Clean up space on your hard disk"

After it sees the room you can get with compressing files and whatnot, there'll be a More Options tab. If you select that, itll have a option that will delete all but the newest Restore Point.

On Vista...Lemme see...

It would seem to be something like: Start Menu > Control Panel > Performance Information and Tools > click on the side where it says Open Disk cleanup. I assume it'll have the option there.

[AdvancedSetup]

Hello Caroline and Welcome to Malwarebytes.org

You really should try to follow the directions here which will help to ensure your system is clean.

Please read and follow the instructions provided here: Pre- HJT Post Instructions

When ready please post your logs here: Malware Removal - HijackThis Logs

Someone will be happy to assist you further with cleaning your system.

During this scan and cleanup process you should not install any other software unless requested to do so.

If all you want to do is clean up the System Restore then you can do this on XP.

Disable and Enable System Restore-WINDOWS XP

This is a good time to clear your existing system restore points and establish a new clean restore point:

Turn off System Restore

• On the Desktop, right-click My Computer.
• Click Properties.
  
  
• Click the System Restore tab.
  
  
• Check Turn off System Restore.
  
  
• Click Apply, and then click OK.
  
  
• Reboot.
  
  

Turn ON System Restore

• On the Desktop, right-click My Computer.
• Click Properties.
  
  
• Click the System Restore tab.
  
  
• UN-Check *Turn off System Restore*.
  
  
• Click Apply, and then click OK.
  
  

This will remove all restore points except the new one you just created.