You're in: Panda Security > Home Users > Support > Product Knowledge Base

Rate us
What kind of help do you need?
(Examples:“Panda Security installation”, “I want to contact Panda”)
Premium Services
Premium Services

How can I eliminate viruses and other threats detected from the Windows Millennium _restore folder after disinfecting the computer?

Information applies to:

Panda Titanium Antivirus 2004 (All versions)
Panda Antivirus Platinum 7 (All versions)
Panda Platinum Internet Security (All versions)

Operating systems
Windows Millennium Edition

IMPORTANT: You should only follow these steps after disinfecting the computer. These steps alone will not deactivate malware.

Sometimes, in computers with Windows Millennium, even after viruses and other threats have been eliminated the antivirus may detect it again and again in the _restore folder without being able to eliminate it.

Although malware is detected in this folder after disinfecting the computer, it does not mean that the computer is still infected. This situation, created by a particular characteristic of Windows Millennium, is not dangerous at all, although it may worry some users who are not familiar with the use of the _restore folder.

Windows Millennium offers the possibility of restoring the system automatically, recovering eliminated files or the system settings accidentally modified.

For that reason, Windows Millenium keeps all the eliminated or modified elements inside its hidden directory, called _restore, which is protected so that its contents can’t be manipulated by anybody or anything.

This feature, although sometimes advantageous, may cause the following conflict: when the antivirus performs a scan, it will detect the infected and the erased files which Windows Millenium stores in the _restore folder.

That is why when a new scan is performed, the antivirus will detect again the infected file in the _restore folder but it won’t be able to eliminate it  because the file is protected by the operating system and is out of its reach.


How to eliminate viruses and other threats completely from the restore folder

  1. Click Start.
  2. Select Settings.
  3. Select  Control Panel.
  4. Double-click on System.
  5. Select the Performance tab.
  6. Click File System.
  7. Click the Troubleshooting tab.
  8. Enable the Disable System Restore checkbox.
  9. Click Apply.
  10. Disable the Disable System Restore checkbox.
  11. Click Apply.
  12. Save the changes by clicking OK.
  13. The computer will ask you if you want to restart. Do it and when you start it again, the viruses and other threats detected will disappeared from _restore folder .
  14. Carry out a full scan of your computer using the antivirus program in order to ensure that it correctly disinfected.


Additional information

Remember that you should only follow these steps after disinfecting the computer. These steps alone will not deactivate malware.

For further information, from Microsoft, click here.

Help nº- 20110325 17 EN

Help us to improve our service by letting us know your opinion.

Your suggestions will help to resolve your questions more quickly and effectively.

Have you resolved your query with this article? YES NO Thanks for your answer

Need Help?

Contact us and get solutions!


Register and get help from the Panda Community

Open a ticket

Quickest way to reach Support.
Open a ticket and get help!


High call volume may result in longer wait times.

Mon-Sun 04:00-23:00 PDT