c:/system volume information _restore

[carla0105]

my my computer started acting weird so i ran the antivirus well my c:/system volume information _restore  came up infected with win32:Zwangi-BE [Adw] but i dont know if i should delete it or just move it to my chest because i dont know how important it is.  if someone could please how me i would be very greatful

[Pondus]

BrowserModifier:Win32/Zwangi
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=BrowserModifier%3AWin32%2FZwangi

I would clear all restore points and create new...



Check for malware with this

Malwarebytes Anti-Malware 1.50.1 http://filehippo.com/download_malwarebytes_anti_malware/
always update so you have the latest signatures before you scan
click on the remove selected  button to quarantine anything found

post the scan log here

[Eddy]

I advise to disable system restore and use a good backup system.
Disabling system restore > KB310405

System restore does not bakup your data.
It does only backup certain windows files/settings.
And what if you can't access the drive anymore?
You will loose everything.

[hesontode]

System restore does not alter personal files like my documents I dont think.

There is data recovery, probably expensive, at PC shops.

There are file recovery programs, just google it, but dont know how effective they are or which is best.

[DavidR]

my my computer started acting weird so i ran the antivirus well my c:/system volume information _restore  came up infected with win32:Zwangi-BE [Adw] but i dont know if i should delete it or just move it to my chest because i dont know how important it is.  if someone could please how me i would be very greatful

Infected Restore Points - There really is little benefit in chasing a detection in the system volume information folder. It is only there because it had previously been deleted or moved from the system folders, etc. and this is a back-up created by system restore.
 
- Worst case scenario it isn't infected and you delete it, you can't use that restore point in the future, not much of a loss and the older the restore point is the less of an issue it is.
 
- For me if there is any suspicion about a restore point then it is best removed from the system volume information folder or it could bite you in the rear at some point in the future when you use system restore if it included that restore point.

[carla0105]

can someone please help me

[DavidR]

With what ?

We have answered the question you first put, you can safely send it to the chest or delete it.

[carla0105]

sorry i didnt see any of the posts put up thanks for the help

[DavidR]

You're welcome.