Bats in My Belfry: Getting Rid of Virus Infected Files in Windows System Restore

by Nik on May 3, 2009

in Tips

If you have antivirus software running (and you should), you may find that it detects virus infected files in your Windows System Restore directories.  Your antivirus program will report that the infected files are located somewhere in “C:\System Volume Information\…”, a hidden directory in which the system restore checkpoints are stored.  These directories are well protected by Windows, so your AV program won’t be able to remove the infected files it finds in them.

It turns out it’s easy to fix this.  You just have to convince Windows to delete the old restore points.  This can be done by disabling System Restore.  When System Restore is turned off, Windows deletes the old restore points.  If you want System Restore to be on afterward, you can re-enable it.

Easy to follow instructions for disabling System Restore in Windows XP and Windows Vista can be found on Microsoft’s website:

Share this post:
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • E-mail this story to a friend!
  • LinkedIn
  • StumbleUpon
  • Technorati
  • TwitThis
  • Yahoo! Buzz

Comments on this entry are closed.