Bookmark and Share
Panda Security » Antivirus Software » Online Support Center Help

How can I eliminate viruses and other threats detected from the Windows XP _restore folder, after disinsfecting the computer?

 

Information applies to:

Products
Panda Antivirus Titanium (All versions)
Panda Titanium Antivirus 2004 (All versions)
Panda Antivirus Platinum 6 (All versions)
Panda Antivirus Platinum 7 (All versions)
Panda Platinum Internet Security (All versions)
Protection distributed to workstations

 

Operating Systems
Windows XP Home Edition
Windows XP Professional Edition

 

IMPORTANT: Remember that you should only follow these steps after disinfecting the computer. These steps alone will not deactivate malware.

Sometimes, in computers with Windows XP, even after viruses and other threats have been eliminated the antivirus may detect it again and again in the _restore folder without being able to eliminate it.

Although malware is detected in this folder after disinfecting the computer, it does not mean that the computer is still infected. This situation, created by a particular characteristic of Windows XP, is not dangerous at all, although it may worry some users who are not familiar with the use of the _restore folder.

Windows XP offers the possibility of restoring the system automatically, recovering eliminated files or the system settings accidentally modified.

For that reason, Windows XP keeps all the eliminated or modified elements inside its hidden directory, called _restore, which is protected so that its contents can’t be manipulated by anybody or anything.

This feature, although sometimes advantageous, may cause the following conflict: when the antivirus performs a scan, it will detect the infected and the erased files which Windows XP stores in the _restore folder.

That is why when a new scan is performed, the antivirus will detect again the infected file in the _restore folder but it won’t be able to eliminate it  because the file is protected by the operating system and is out of its reach.

 

How to eliminate viruses and other threats completely from the restore folder

  1. Log on as the Administrator or with the details of the user that has administrator rights.
  2. Click with the right button of the mouse on  My Computer.
  3. Select Properties.
  4. Click System Restore.
  5. Check the Turn off System Restore or Turn off System Restore on all drives checkbox.
  6. Click Apply and then OK.

 

How to reactivate System Restore option

  1. Click with the right button of the mouse on MY Computer.
  2. Select Properties.
  3. Click System Restore.
  4. Disable the Turn off System Restore or Turn off System Restore on all drives checkbox.
  5. Click Apply and then OK.

After completing these steps, carry out a full scan of your computer using the antivirus program in order to ensure that it correctly disinfected.

Help nº- 20070716 18 EN

 

 

Has this help been useful?
Very useful.
Useful.
Quite useful.
Not very useful.
Help us to improve our service by letting us know your opinion. Your suggestions will help to resolve your questions more quickly and effectively.