Remove and infection in System Restore
| WHAT IS SYSTEM RESTORE? System Restore enables users to restore their computers to a previous state without losing personal data files (e.g.documents, graphic files, e-mail). System Restore actively monitors system file changes and some application file changes to record or store previous versions before the changes occurred. |
In the System Restore folder, individual files cannot be deleted as this would put the integrity of the Restore archive at risk. Infections located in the System Restore folder are harmless, unless a restore point that contains the infection is used. If the infected restore point is not used, it will be soon replaced by other restore points, thereby deleting the infection.
To manually delete an infected restore point, a simple procedure can be followed (for WINDOWS XP users):
Click the Start button, then go to Control Panel, and choose System (or Performance and Maintenance).

Under the System Restore tab, check this option: Turn off System Restore on all drives.
When System Restore is disabled the content of the folder is deleted, including the infected files. Afterwards you can re-enable the System Restore service if you want to use it.
To re-enable the System Restore, follow the steps again, and uncheck this option: Turn off System Restore on all drives, and click Apply.
The System Restore feature can only be turned off from an Administrator account. If you are using a limited account in Windows XP, please contact your system administrator.
Kind regards,
The BullGuard Team
| If you did not find the solution you were looking for, please feel free to contact our Support. Top of page |