|
Viruses in the System Restore folder
(Microsoft Windows XP->Virus cleaning)
Please understand that Windows XP stores restore points in C:\System Volume Information. If the System Restore folder was infected, the virus cannot be cleared by a antivirus software. Therefore, I suggest we perform the following steps to remove the virus:
Step 1: Update the virus definition
==========
First, please upate the virus definition file for your third-party anti-virus software:
Step 2: Disable System Restore
==========
Since the virus may have infected the System Restore storage folder, let's disable the System Restore feature to clear the storage folder:
1. Click "Start" then right click "My Computer" and choose the "Properties" option.
2. Choose the "System Restore" tab and check the option "turn off System Restore on all drives".
3. Click "Apply" and click "Yes" when a warning appears.
4. Click "OK".
Step 3: Start in Safe Mode.
=========
1. Restart the computer.
2. While the computer is booting up, press F8 to display the startup menu.
3. In the startup menu, choose Safe Mode.
4. Log on as an administrator.
Note: In Safe Mode, your system display and Desktop will look and perform differently than in Normal Mode. This is only temporary. To return the system back to Normal Mode, we can simply restart the computer.
Step 4: Scan the system
=========
Please scan the system with your antivirus program and remove all infected files.
Step 5: Restart computer
=========
Please restart the computer and re-enable System Restore by reverting Step 2.
|