Hello Everyone-

I've got a question that's kinda bugging me.  I've recently become the administrator for a Symantec corporate antivirus setup, running SAV 10.  I've run across this error message:

Scan type:  Auto-Protect Scan
Event:  Risk Found!
Risk: AngryIPScanner
File:  C:\System Volume Information\_restore{B4BFB1DE-A18D-4EEA-BFFA-077027462EF2}\RP18\A0012341.exe
Location:  C:\System Volume Information\_restore{B4BFB1DE-A18D-4EEA-BFFA-077027462EF2}\RP18
Computer:  LQ1-052
User:  SYSTEM
Action taken:  Pending Side Effects Analysis : Access denied
Date found: Friday, September 18, 2009  5:56:22 PM

Followed up a few seconds later by the same message, but with this:

Action taken:  Quarantine failed : Leave Alone failed : Access denied

Now, as an administrator, I don't really want SAV to bork whenever it comes across a file that's in the System Restore section.  Is there a way to check what permissions the SAV client runs as?  I suspect it's running without the ability to access that part of the system.  Is this correct?  Is this even anything I should be worrying about?

I'm attempting to begin a process of taking away admin rights from desktops and users and try secure-up our systems.  This message is showing up on my newly-restrcited desktop box.

Thanks!