$SysReset

Solved
morg9270095 Posted messages 2 Status Member -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Hello,
I just noticed that this folder has been created $SysReset here’s what’s inside

2016-07-23 17:57:51, Info RjvStartLogging: Started logging to [C:\$SysReset\Logs\SetupAct_offline.log]
2016-07-23 17:57:51, Info Entering RjvFactoryImageAvailable
2016-07-23 17:57:51, Info [systemreset.exe] Enter WinReGetConfig
2016-07-23 17:57:51, Info [systemreset.exe] Parameters: configWinDir: NULL
2016-07-23 17:57:51, Info [systemreset.exe] WinRE config file path: C:\windows\system32\Recovery\ReAgent.xml
2016-07-23 17:57:53, Info [systemreset.exe] WinRE is installed at: \
2016-07-23 17:57:53, Info [systemreset.exe] Wim dir location: \\?\GLOBALROOT\device\harddisk0\partition4\Recovery\WindowsRE
2016-07-23 17:57:53, Info [systemreset.exe] System is WimBoot: FALSE
2016-07-23 17:57:53, Info [systemreset.exe] WinRE image validated
2016-07-23 17:57:53, Info No OEM image specified
2016-07-23 17:57:53, Info ESD not registered: Microsoft\Windows\CurrentVersion\Setup\WebSetup [ImageLocation] is not set
2016-07-23 17:57:53, Info Did not find a factory reset image
2016-07-23 17:57:53, Info Returning TRUE from RjvFactoryImageAvailable
2016-07-23 17:57:57, Info RjvStopLogging: Stopped logging to [C:\$SysReset\Logs\SetupAct_offline.log]

in windows(c) just after this file curr_ver.tmp.
Do you know what this is? And if it is dangerous? Thank you in advance

Have a nice day
Morgane

1 answer

  1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hi,

    This folder is created after a Windows update.
    You can usually delete it afterwards.

    --
    Please press a key to continue the disinfection...
    1
    1. morg9270095 Posted messages 2 Status Member
       
      Thank you, I thought it could be a virus or something else. So I restored my system to an earlier date, but Avast is blocking the restoration..

      Good evening
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > morg9270095 Posted messages 2 Status Member
         
        It's surely the source, you can delete it :)
        0