IMPORTANT: Remember that you should only follow these steps after disinfecting the computer. These steps alone will not deactivate malware.
Sometimes, in computers with Windows XP, even after viruses and other threats have been eliminated the antivirus may detect it again and again in the _restore folder without being able to eliminate it.
Although malware is detected in this folder after disinfecting the computer, it does not mean that the computer is still infected. This situation, created by a particular characteristic of Windows XP, is not dangerous at all, although it may worry some users who are not familiar with the use of the _restore folder.
Windows XP offers the possibility of restoring the system automatically, recovering eliminated files or the system settings accidentally modified.
For that reason, Windows XP keeps all the eliminated or modified elements inside its hidden directory, called _restore, which is protected so that its contents can’t be manipulated by anybody or anything.
This feature, although sometimes advantageous, may cause the following conflict: when the antivirus performs a scan, it will detect the infected and the erased files which Windows XP stores in the _restore folder.
That is why when a new scan is performed, the antivirus will detect again the infected file in the _restore folder but it won’t be able to eliminate it because the file is protected by the operating system and is out of its reach.
How to eliminate viruses and other threats completely from the restore folder
Log on as the Administrator or with the details of the user that has administrator rights.
Click with the right button of the mouse on My Computer.
Select Properties.
Click System Restore.
Check the Turn off System Restore or Turn off System Restore on all drives checkbox.
Click Apply and then OK.
How to reactivate System Restore option
- Click with the right button of the mouse on MY Computer.
- Select Properties.
- Click System Restore.
- Disable the Turn off System Restore or Turn off System Restore on all drives checkbox.
- Click Apply and then OK.
After completing these steps, carry out a full scan of your computer using the antivirus program in order to ensure that it correctly disinfected.