Question

When an AV found a virus on my external drive in the System Volume Information folder, I could not understand why this folder appeared there in the first place. From the logic behind System Restore there should be no cases when the system creates restore points on the removable media (except maybe manual installation of a program file there). Or I miss something and there are chances this folder would appear on any removable media one day?

Answer 1

EDIT

System Restore may monitor also the external drive. This is of course a bad idea.

A possible work around is to assign a permanent drive letter (the higher in the alphabet the better) to the external drive via Disk Management. To access Disk Management, go to Start - Run and type diskmgmt.msc then press enter.

Right-click a partition, logical drive, or volume, and then click Change Drive Letter and Paths.

Do one of the following:

1. To assign a drive letter, click Add, click the drive letter you want to use, and then click OK.
2. To modify a drive letter, click it, click Change, click the drive letter you want to use, and then click OK.

Now go to System properties and do:

To get rid of this protected directory from an external drive, say G:, start cmd.exe using "Run as administrator" and enter the following:

G:
cd \
takeown /r /f "System Volume Information"

Answer y for yes when asked whether to replace the permissions.

After this you can now delete the directory.