$SysReset

Solved
morg9270095 Posted messages 2 Status Membre -  
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   -
Hello,
I just noticed that this folder has been created $SysReset here’s what’s inside

2016-07-23 17:57:51, Info RjvStartLogging: Started logging to [C:\$SysReset\Logs\SetupAct_offline.log]
2016-07-23 17:57:51, Info Entering RjvFactoryImageAvailable
2016-07-23 17:57:51, Info [systemreset.exe] Enter WinReGetConfig
2016-07-23 17:57:51, Info [systemreset.exe] Parameters: configWinDir: NULL
2016-07-23 17:57:51, Info [systemreset.exe] WinRE config file path: C:\windows\system32\Recovery\ReAgent.xml
2016-07-23 17:57:53, Info [systemreset.exe] WinRE is installed at: \
2016-07-23 17:57:53, Info [systemreset.exe] Wim dir location: \\?\GLOBALROOT\device\harddisk0\partition4\Recovery\WindowsRE
2016-07-23 17:57:53, Info [systemreset.exe] System is WimBoot: FALSE
2016-07-23 17:57:53, Info [systemreset.exe] WinRE image validated
2016-07-23 17:57:53, Info No OEM image specified
2016-07-23 17:57:53, Info ESD not registered: Microsoft\Windows\CurrentVersion\Setup\WebSetup [ImageLocation] is not set
2016-07-23 17:57:53, Info Did not find a factory reset image
2016-07-23 17:57:53, Info Returning TRUE from RjvFactoryImageAvailable
2016-07-23 17:57:57, Info RjvStopLogging: Stopped logging to [C:\$SysReset\Logs\SetupAct_offline.log]

in windows(c) just after this file curr_ver.tmp.
Do you know what this is? And if it is dangerous? Thank you in advance

Have a nice day
Morgane

1 réponse

Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Hi,

This folder is created after a Windows update.
You can usually delete it afterwards.

--
Please press a key to continue the disinfection...
1
morg9270095 Posted messages 2 Status Membre
 
Thank you, I thought it could be a virus or something else. So I restored my system to an earlier date, but Avast is blocking the restoration..

Good evening
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > morg9270095 Posted messages 2 Status Membre
 
It's surely the source, you can delete it :)
0