A friend has a USB backup drive that has a virus in a restore point.
I guess that he removed the virus from his C drive, but has backed up
infected restore points on his USB backup drive. I know how to remove
restore points with disk cleanup on the C drive, but how can one do it
on his USB (maybe firewire) H:/ backup drive?. If I understand
correctly one cannot boot into safe mode and have USB drives work?

T.C.

tcruise wrote:
> A friend has a USB backup drive that has a virus in a restore point.
> I guess that he removed the virus from his C drive, but has backed up
> infected restore points on his USB backup drive. I know how to remove
> restore points with disk cleanup on the C drive, but how can one do it
> on his USB (maybe firewire) H:/ backup drive?. If I understand
> correctly one cannot boot into safe mode and have USB drives work?
>
> T.C.

Because System Restore monitors "only a core set of specified system and
application file types", it's not particularly useful to have it monitor
non-system partitions, such as a removable drive. In any event, if your
friend now configures SR to not monitor that drive, all of the existing
restore points will be deleted.

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

Lem

As I interpret what TC is asking you are not answering the question.The
question relates to a backup copy of the system on an external drive,
which contains a virus infected restore point. The question is how do
you remove the infected restore point.

One way might be to backup the existing system and then restore the
infected backup. You can then turn off system restore and restart the
computer. Next turn system restore back on and restart the computer. You
can then backup a copy of the system, which will no longer have any
infected restore points. The final task would be to restore the copy of
the system you had before you started the exercise of removing infected
restore points.

I think what I have outlined will work. There may be a simpler way.


~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Lem wrote:
> tcruise wrote:
>> A friend has a USB backup drive that has a virus in a restore point.
>> I guess that he removed the virus from his C drive, but has backed up
>> infected restore points on his USB backup drive. I know how to
>> remove restore points with disk cleanup on the C drive, but how can
>> one do it on his USB (maybe firewire) H:/ backup drive?. If I
>> understand correctly one cannot boot into safe mode and have USB
>> drives work? T.C.
>
> Because System Restore monitors "only a core set of specified system
> and application file types", it's not particularly useful to have it
> monitor non-system partitions, such as a removable drive. In any
> event, if your friend now configures SR to not monitor that drive,
> all of the existing restore points will be deleted.

> If I understand
> correctly one cannot boot into safe mode and have USB drives work?
>

A 1-minute test reveals that USB drives do work in Safe Mode.

On Jul 17, 3:09*am, "Gerry" <ge...@nospam.com> wrote:
> Lem
>
> As I interpret what TC is asking you are not answering the question.The
> question relates to a backup copy of the system on an external drive,
> which contains a virus infected restore point. The question is how do
> you remove the infected restore point.
>
> One way might be to backup the existing system and then restore the
> infected backup. You can then turn off system restore and restart the
> computer. Next turn system restore back on and restart the computer. You
> can then backup a copy of the system, which will no longer have any
> infected restore points. The final task would be to restore the copy of
> the system you had before you started the exercise of removing infected
> restore points.
>
> I think what I have outlined will work. There may be a simpler way.
>
> ~~~~
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> *Lem wrote:
> > tcruise wrote:
> >> A friend has a USB backup drive that has a virus in a restore point.
> >> I guess that he removed the virus from his C drive, but has backed up
> >> infected restore points on his USB backup drive. *I know how to
> >> remove restore points with disk cleanup on the C drive, but how can
> >> one do it on his USB (maybe firewire) H:/ backup drive?. *If I
> >> understand correctly one cannot boot into safe mode and have USB
> >> drives work? T.C.
>
> > Because System Restore monitors "only a core set of specified system
> > and application file types", it's not particularly useful to have it
> > monitor non-system partitions, such as a removable drive. *In any
> > event, if your friend now configures SR to not monitor that drive,
> > all of the existing restore points will be deleted.- Hide quoted text -
>

Thank you for responding. After giving it some thought, after
posting: I realized that should the backup of the drive ever have to
be restored, when that is done I could easily get rid of the infected
restore points in normal mode...

T.C.