Microsoft® Volume Shadow Copy Service is it legit?
i have to keep disabling foreign Isatap tunneling adapters intruders
and so i
>press view show hidden devices
alot to catch them
in doing so i noticed alot of "Storage Volume Shadow copies"
they contain many hidden "Generic Volume Shadow Copy"
i trust a site called "Herd Protect" to verify files are legit sometimes.
so i checked vssvc.exe
problem is it could be an uninfected vssvc.exe ?
i don't like to delete much in win32 folder but am suspicious of the dates files claim to be 2006 lol this cpu is alot younger!
and other dates keep reoccurring
should i delete these or is it risky to window restores etc?
also i don't understand partitions if anybody can clarify
Edited by Platypus, 18 August 2016 - 10:57 PM.
Moved to AII forum at request of Malware Team member