Results 1 to 6 of 6
  1. #1
    3 Star Lounger
    Join Date
    Jan 2002
    Location
    Texas, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts
    I've been trying to run the version of the MSRT that I downloaded today before Conficker is supposed to kick off. I haven't been able to get the full check to run. It keeps hanging on a file named x:\System Volume Information\MountPointManagerRemoteDatabase.

    What is this file? What does it do? It is a hidden file and from some things I found searching the 'Net it is protected from deletion by the OS. This would be a perfect place to conceal a worm.

    Has anyone experienced similar problems running MSRT with this file and resolved them? I'd sure appreciate some help.

  2. Subscribe to our Windows Secrets Newsletter - It's Free!

    Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!

    Excel 2013: The Missing Manual

    + Get this BONUS — free!

    Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!

  3. #2
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 16 Times in 16 Posts
    It's not certain that the MSRT finds the latest mutations of the Conficker worm. See Run a Conficker removal tool before April 1 by Brian Livingston.

  4. #3
    3 Star Lounger
    Join Date
    Jan 2002
    Location
    Texas, USA
    Posts
    273
    Thanks
    0
    Thanked 0 Times in 0 Posts
    [quote name='HansV' post='768415' date='31-Mar-2009 02:29']It's not certain that the MSRT finds the latest mutations of the Conficker worm. See Run a Conficker removal tool before April 1 by Brian Livingston.[/quote]

    Hello HansV!

    Thank you very much for your response.

    I followed the link to Woody's article and links contained therein. Now, I'm as certain as I can be that I don't have the infection (but who knows, really?); but the original question remains with regard to running MSRT. It hangs on the pathname filename every time I run it: same file name, same number of files scanned and approximately the same duration of execution. The pathname c:\System Volume Information (with the spaces between words) and the filename \MountPointManagerRemoteDatabase appear every time that MSRT.exe hangs.

    From reading on the web, this is a Windows created folder and file that are created every time Windows is booted. I've seen and read many reports of this creating problems for other applications including defrags. I would really like to delete the file and run msrt.exe then a defrag before I reboot the machine. Yes, I've rebooted several times before running msrt.exe and would expect to have had any problem data expunged when the file was recreated; but it continues to hand a tool that I like to run with some frequency. I haven't yet tried to run defrag and dont' know what if anything might happen.

    Because conficker is not my subject of inquiry but only incidental to how I detected the problem, I'd really appreciate a reply from anyone who could address the problem and suggest solutions.

    I tried DOS commands. After I entered cd c:\"system volume information"\ I got an error message. I tried cd "c:\System Volume Information\" and various combinations thereof with the same result. Apparently I have forgotten my DOS syntax. I then tried using cacls, a program I have not knowledge of or experience with, following instructions posted on another website. I was unsuccessful in gaining permissions to the file causing the problem.

    Again, any help would be appreciated.

  5. #4
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 16 Times in 16 Posts
    I can't help you with that.

    MountPointManagerRemoteDatabase is present on my PC, it has a size of 0 bytes and dates from September 2004, so it may be associated with Windows XP SP2. It has never caused problems with the Malicious Software Removal Tool for me.

  6. #5
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    20,418
    Thanks
    1
    Thanked 597 Times in 534 Posts
    [quote name='BobH' post='768534' date='31-Mar-2009 17:14'][/quote]

    By default a user does not have permissions to access the System Volume Information folder. Only the system has permissions. You'll have to change the security permissions to access the folder and its contents.

    BTW, the MountPointManagerRemoteDatabase file exist on several machines I checked both XP & Vista. It has never caused me any issues with defrag or backup.

    Joe

  7. #6
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts
    [quote name='BobH' post='768534' date='31-Mar-2009 18:14']Because conficker is not my subject of inquiry but only incidental to how I detected the problem, I'd really appreciate a reply from anyone who could address the problem and suggest solutions.

    Again, any help would be appreciated.[/quote]

    How to gain access to the System Volume Information folder, is an MSKB article.

    After gaining access:

    Navigate to
    %systemdrive%\System Volume Information
    and delete all of the contents.

    HTH
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •