My _RESTORE file contains several files infected with
viruses- the system will not let me delete these files!
Any advice on how to override this?

Re: Problems deleting infected file by Noel

Noel
Fri Dec 19 11:45:59 CST 2003

You don't need to 'override this' - files in the C:\_Restore folder are
harmless and cannot reinfect your PC UNLESS you restore your system to a
time during which you were infected - and System Restore will automatically
flush the archive itself over a period of a few days - look here for more
info, and possible actions
http://support.microsoft.com/default.aspx?scid=kb;en-us;q263455

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm
Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

"CD" <anonymous@discussions.microsoft.com> wrote in message
news:016c01c3c655$cfeb25c0$a101280a@phx.gbl...
> My _RESTORE file contains several files infected with
> viruses- the system will not let me delete these files!
> Any advice on how to override this?



Re: Problems deleting infected file by Joan

Joan
Fri Dec 19 11:47:18 CST 2003

Courtesy of MikeM.
Joan

Let's try and get one thing clear before proceeding. No virus, worm or
Trojan
is going to have any effect let alone reinfect a system whilst in the
restore
archive. The only way that that can happen is if the user chooses to
restore
their system to a checkpoint created AFTER infection and BEFORE cleaning
their
system. Something I hope you won't be doing. Worms, trojans and viruses
are
harmless in the _restore archive and will simply be discarded in due
course as
newer data is archived and the older files discarded. You cannot
selectively
delete individual files from the archive without compromising the whole
archive.

If you really are worried about this, then there are two approaches to
resolving your problem:
Firstly try reducing the space allocated to the System Restore archive as
this
could flush out these unwanted files. Do this using the slider found at
System | Performance | File System | Hard Disk and reduce the allocated
space
until you flush out the unwanted files.

If that fails, reset System Restore:
System | Performance | File System | Troubleshooting and check "Disable
System Restore", Apply and IMMEDIATELY reboot. This will flush you
restore
folder and erase all checkpoints, then,
System | Performance | File System | Troubleshooting and uncheck "Disable
System Restore", Apply and again IMMEDIATELY reboot. This should now
automatically create a new checkpoint immediately following the restart.
Finally adjust the space allocated to the restore folder,
System | Performance | File System | Hard Disk and adjust the restore
slider
to your preferred setting. A figure of 200MB is normally more than
adequate
for day to day use allowing perhaps a week of checkpoints to be available
although increasing this to perhaps 400-500MB for a few days during
periods of
large installs such Microsoft Office is advisable.

See also MS KB 263455 - "Antivirus Tools Cannot Clean Infected Files in
the
_Restore Folder" (http://support.microsoft.com?kbid=263455).
--





CD wrote:
> My _RESTORE file contains several files infected with
> viruses- the system will not let me delete these files!
> Any advice on how to override this?