Common information

The section contains common descriptive information concerning malicious programs and some peculiarities how to fight these programs using Kaspersky Lab’s products. If you failed to find the necessary information or you find these recommendations too complicated or inadequate, please send a request to the Technical Support service via the HelpDesk form.

Kaspersky Antivirus detects infected files in RESTORE folder but cannot delete them. How can I fight the viruses?
ID Article: 1238	Other languages:	363	2008 Aug 28 09:37	Printable version

_RESTORE folder is a characteristic feature of the Windows Millenium/Windows XP/Windows Vista operating systems. You can try to delete the informational files from the folder. To do it, switch off System Restore function the following way (system restore Windows Vista is a switch off example).

Go to Start
Right-click Computer icon and then select Properties

in the left part of the System window click System protection

in the System properties window go to the System protection tab
in the Automatic restore points window uncheck the system disk with Windows Vista installed

click the button Turn System Restore Off to confirm you do disable system restore.

click the OK button

reboot your PC

In order to disable system restore for OS's Windows Millenium and Windows XP, do the following (system restore Windows XP is a switch off example):

Right-click My computer icon and then select Properties

Go to System restore
Tick Switch off system restore
Press OK or Apply

Confirm system restore in the window
Restart your computer

After it perform full scan of your computer by Kaspersky Anti-Virus (in the settings choose the following actions to be performed with detected infected files):

Perform the recommended action - for versions 5.0.xxx.xxx
Disinfect > Delete if disinfection fails - for versions 6.x.x.xxx.

Still treatment/deletion of files is not always possible - this is the characteristic feature of Windows Millenium/Windows XP/Windows Vista. If such situation occurs these files unfortunately will never be deleted (this problem can be rectified only by reinstallation of the operating system). The infected files in the RESTORE folder are not dangerous for your computer as the folder can be read/ recorded only by the operating system and no file from the folder can be completed. This specific feature has been described in Windows Millenium/Windows XP/Windows Vista documentation - the folder is used for urgent system restoring. All data of the current system condition is zipped into the folder and the access to it is denied for all applications.

Several days later the data in the folder will be updated and the information about the infected files will be zapped by the operating system