Hi.
I recently ran a full scan with AntiVirus that resulted in the following unresolved threat. (The regular scheduled scans did not report this). The drive F:\ it refers to is a removable hard drive. Would appreciate any advice on this. Thanks.
Threat name: Real Protect-LS!702e09be8114
Status: Cannot be repaired
Scan Type: Full
File: F:\System Volume Information\_restore{48447FBC-DEC0-4563-94A0-F3A22744F87A}\RP549\A0122761.exe
Solved! Go to Solution.
Hi @Derrick66
Thank you for reaching us. The System Volume Information folder is a hidden and protected folder located at the root of every drive or partition. It's even found on your SD card, USB pen drive, and external hard disk if you have connected them to your Windows computer earlier. It's is not a virus or malware. Since the folder is not verified McAfee detecting it as Malware.
Please follow below steps incase folder re-occurs on USB drive
Regards
Ganesh Raju R
Hi @Derrick66
Greeting from McAfee!!!
Sorry for the inconvenience caused. Please take backup of data in removable drive and format the same. The issue will be fixed if re occurs you can contact us via McAfee chat support.
Regards
Ganesh Raju R
Thanks Ganesh for the quick response. I will try your suggestion.
Out of curiosity, are you able to tell what sort of malware this is?
Thanks again,
Derrick66
Hi @Derrick66
Thank you for reaching us. The System Volume Information folder is a hidden and protected folder located at the root of every drive or partition. It's even found on your SD card, USB pen drive, and external hard disk if you have connected them to your Windows computer earlier. It's is not a virus or malware. Since the folder is not verified McAfee detecting it as Malware.
Please follow below steps incase folder re-occurs on USB drive
Regards
Ganesh Raju R
Thanks again Ganesh.
I assume you mean that the A0122761.exe file within the System Volume Information folder is not a virus or malware.
Is it safe to treat this "unresolved threat" simply as a false positive?
Regards,
Derrick66
Just a note about the procedure described below (of simply disabling system protection & deleting restore points): this by itself will not get rid of the System Volume Information threat. After doing this, you need to TURN ON System Protection again. Now when you run the scan, the threat will be quarantined.
Thanks
Derrick66
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: