systemvolumeinformation删除方法(系统卷信息删除方法)_第1页
systemvolumeinformation删除方法(系统卷信息删除方法)_第2页
systemvolumeinformation删除方法(系统卷信息删除方法)_第3页
systemvolumeinformation删除方法(系统卷信息删除方法)_第4页
systemvolumeinformation删除方法(系统卷信息删除方法)_第5页
已阅读5页,还剩6页未读 继续免费阅读

下载本文档

版权说明:本文档由用户提供并上传,收益归属内容提供方,若内容存在侵权,请进行举报或认领

文档简介

1、system volume information删除方法(系统卷信息删除方法)系统卷信息文件删除方法 系统卷信息文件夹是一个隐藏的系统文件夹,“系统还原”工具使用该文件夹来存储它的信息和还原点。您的计算机的每个分区上都有一个系统卷信息文件夹。“系统卷信息”文件夹,中文名称可以翻译为”系统卷标信息”。这个文件夹里就存储着系统还原的备份信息。空间不足问题:原因:随着用户使用系统时间的增加,还原点会越来越多,导致硬盘空间越来越少,最后还要被警告”磁盘空间不足”解决方案:可以打开控制面板里的”系统属性”-“系统还原”选项卡上选中”在所有驱动器上关闭系统还原”的复选框。病毒保护伞原因:由于ntfs的分

2、区里该目录只有系统权限,导致杀毒软件没有 权限查杀藏匿于该目录的病毒。(现在大多数软件都能查杀)解决方案:阻止“系统卷信息”文件夹的自动生成。(迄今为止没人能做到)木马问题:“系统卷信息”文件夹里的ntfs木马(安全问题)1、参考原理:在一个ntfs分区里,把分区权限删到只剩大家权限,并只设一个”列出文件夹的目录”权限,其他复选框都去钩。在这种情况下,该分区是没有写权限的,照理说不会再自动生成“系 统卷信息”文件夹。但是,无论你这么设置,该硬盘的分区在任何一个电脑上插上去后依 i 口会自动生成“系统卷信息”文件夹。2、木马原理:利用“系统卷信息”文件夹自动生成的原理,进行线程插入免杀下载器到自

3、动生成“系统卷信息”文件夹的系统 进程里面,然后把加壳加密的木马下载到“系统卷信息”文件夹。在“系统卷信息”文件夹的保护下,杀毒软件无权查杀该木马。在设定条件下夺取系统权限运行木马预运行模块查杀杀软, 然后再脱壳解密启动木马,启用保护进程防止该冃录被删。此类木马无法手工删除,杀软无权查杀,就算fat32的分区也由于加 密原因无法脱壳。3、解决方案:阻止“系统卷信息”文件夹的自动生成(可以用解锁 删除)。4、解决的具体方法:删除右击用解锁,解锁就会删除这个文件夹, 打开回收站,再看看,是不是多了很多文件,这吋还无法删除,现在打开x: /回收(“x” / “表示系统卷信息”所在的分区), 右击解锁

4、点击移动到桌面,桌面就会生成一些隐藏文件,这时选中这些文件,右击属性,将”只读”去掉,再选中之后,用解锁删除,并且清空回收站,这样“系统卷信息”文件夹就从电脑中消失了。如何获得对“系统卷信息”文件夹的访问使用fat32文件系统的微软windows xp专业或windows xp家庭版 1、打开任意一个文件夹。2、在”工具”菜单上,单击”文件夹选项” o3、在”查看”隐藏文件和文件夹”选项卡上,单击”显示所有 文件和文件夹” o4、清除”隐藏受保护的操作系统文件(推荐)”复选框当系统提示 您确认是否更改时,请单击”是”。5、清除”使用简单文件夹共享(推荐)”复选框6、单击”确定” o7、在文件夹

5、中双击“系统卷信息”文件夹以将其打开。8、操作后建议选择”还原为默认值”点确定在域中使用ntfs文件系 统的windows xp专业版1、打开任意一个文件夹。2、在”工具”菜单上,单击”文件夹选项”。3, on the view > hide files and folders tab, click show all files and folders4, clear the hidden protected operating system file (recommended) check box when the system prompts you to confirm that

6、you have changed, click yes5, clear the use of simple folder sharing (recommended) check box6, click ok".7, right-click the system folder in the volume information folder, and then click sharing and security8, click the security tab9, click add, and then type the name of the user you want to gr

7、ant the folder access to. select the appropriate account location (local account or domain account)normally, this is the account you use when you log on. click ok, and then click ok again"(hint: suggest entering the everyone account, which means that all accounts have permissions)10, double-cli

8、ck the folder system volume information folder in the folder to open it.windows xp professional using the ntfs file system on a workgroup or stand-alone computer1, open any folder2, on the tools menu, click folder options"on the view tab, click show all files and folders"3, clear the hidde

9、n protected operating system file (recommended) check box. when the system prompts you to confirmthat you have changed, click yes4, clear the use of simple file sharing (recommended) check box5, clear the use of simple folder sharing (recommended) check box6, click ok7, right-click the system folder

10、 in the volume information folder, and then click sharing and security8, click the security tab9, click add, and then type the name of the user you want to grant the folder access to.normally, this is the account you use when you log on. click ok, and then click ok again"(hint: suggest entering

11、 the everyone account, which means that all accounts have permissions)10, double-click the folder system volume information folder in the folder to open it.note: now, users of windows xp home edition can access the system volume information folder in normal modemethod scope of applicationmicrosoft,

12、windows, xp, home, edition, and microsoft windows xp professional editionhow do i delete / access the folder system volume information?general deletion method1, turn off system restore"2, access to the "system volume information,z folderin the 3 and ntfs partition, the directory has only s

13、ystem permissions, and you need to set the permissions on the account you,re logging in (or the everyone account) to full control to delete4, delete the "system volume informatiort folderdelete method completely1. in operation, enter the "gpeditmsc / (group policy) program / computer conf

14、iguration / management template / system / system restore / right,turn off system restore, double-click to open it, and enable2, in operation, enter the "gpeditmsc / (group policy) program / computer configuration / management template / windows component / windows installer /point, double-clic

15、k open it, and select enableyou can delete the system volume information folder after you use the cacls command to give full control to the current userthe commands are as follows:cacls c:'system volume informationz,/g everyone:fthe above is given to all users of system volume c information fold

16、er full control permissions, can be deletedcommand detailed, please enter at the command prompt: cacls /?access methodhow do i get access to the system volume information folder?right click on my computer / property / system restore item / select "close all restore",delete the system volum

17、e information folder againor my computer / any letter / tools / folder options / view / restore the default value(note: change log is the system change log, which monitors the changes in each disk area, not viruses)"system restore,z and its advantages"system restore" is one of the mos

18、t practical functions of windows xp,it uses snapshot to record the status information of the system at a specific time,that is what is called ''restore point", which is then restored as neededthere are two kinds of reducing points:one is automatically created by the system, which includ

19、es system checkpoints and installation restore points;another is the user's own creation as required, also called manual restore pointin the windows xp system, we can take advantage of the system restore function that comes with the system,record the changes we made to the system by setting up t

20、he restore point,when the system fails, restore the system to the state before it is changed by using the system restore workhow to use system restore"1, open system restore"right click on my computer, select the properties / restore tab,ensure that system restore is disabled on all drives

21、 check box is not selected,make sure that the partition you need to restore is in the monitor state2, create restore pointwhat you need to note here is that when you create system restore points, make sure you have enough hard disk space available,otherwise, the creation may fai1.set multiple restor

22、e points, same as above3 restore restore pointopen the system restore wizard, and select "'restore my computer to an earlier time“,click next, select the date, and then follow the wizard to restore it.note that after restoring the restore point, the system restarts automatically,so before you do that, you are advised to q

温馨提示

  • 1. 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007和PDF阅读器。图纸软件为CAD,CAXA,PROE,UG,SolidWorks等.压缩文件请下载最新的WinRAR软件解压。
  • 2. 本站的文档不包含任何第三方提供的附件图纸等,如果需要附件,请联系上传者。文件的所有权益归上传用户所有。
  • 3. 本站RAR压缩包中若带图纸,网页内容里面会有图纸预览,若没有图纸预览就没有图纸。
  • 4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
  • 5. 人人文库网仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对用户上传分享的文档内容本身不做任何修改或编辑,并不能对任何下载内容负责。
  • 6. 下载文件中如有侵权或不适当内容,请与我们联系,我们立即纠正。
  • 7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。

最新文档

评论

0/150

提交评论