The back-up folders present in Windows Me and Windows XP require some special considerations if you are infected by a malicious program.

Cleaning the _Restore folder on Windows Me

Windows Me System Restore function is a sort of back-up functionality built into Windows Me.

This function backs up of certain files from your system to the _RESTORE folder. This means that Windows Me can also back-up infected files to the _RESTORE folder. As this folder is protected by a special write protection, Norman Virus Control cannot repair nor delete infected files in this folder.

To completely remove the infected file or files in the _RESTORE folder, disable and re-enable the System Restore feature by following this procedure:

  1. Click Start, point to Settings, and then click Control Panel.
  2. Double-click System, and then click the Performance tab.
  3. Click File System button, and then click the Troubleshooting tab.
  4. Select the Disable System Restore check box, click Apply and Close.
  5. Restart the computer when you are prompted to do so. When the computer restarts, the Restore Utility will be disabled.
  6. Perform a scan with Norman Virus Control. Remove all files Norman Virus Control reports as infected from the the _RESTORE directory.
  7. To enable the System restore function, repeat steps 1-5 above, but remove the check mark next to Disable System Restore.
  8. After a restart restart of the computer the Restore Utility will be enabled.

Cleaning the System volume information folder on Windows XP

When the On-demand scanner removes viruses and other malware, the system restore feature in Windows XP will back up the files the way they are before the removal. You should therefore disable System Restore before cleaning an infected computer with the On-demand scanner

  1. Click Start, then right-click My Computer (In the classic view you will find My Computer on your desktop).
  2. Select Properties.
  3. Select the System Restore tab.
  4. Check Turn off System Restore.
  5. Click Apply, and then click OK.
  6. Restart the computer.
  7. Perform a scan with Norman Virus Control to remove all infections.
  8. To enable the System restore function, repeat steps 1-6 above, but remove the check mark next to Turn off System Restore.
  9. After a restart restart of the computer the System Restore Utility will be enabled again.