Restore folders and selective purging - URGENT

[saturnin02]

WIN XP HE
Hi,
I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.
I would like to selctively purge the infected files an no more.
Is this possible?
Tx,
S

 

[neil]

They are correct, you can purge all by turning off the system restore,
reboot then turn it back on. You can also use disk cleanup, if you right
click the drive and go to properties then more options you can remove all
but the last restore point.
I have read that reducing the amount of disk space for system restore will
remove old restore points but not sure about that one.

hope that helps
Neil

 

[saturnin02]

Hi Neil,
This does not quite work becuase I obviously don't want the last restore
point which would contain the infected files AND I want to keep some of my
less recent restore points, maybe starting 30 days ago and going back. Thus
ideally, I would want to purge all restore points AFTER a certain date or a
certain chosen previous restore point--OR ONLY selectively clean the restore
files that are infected by somehow locaitn them and deleting THOSE only.
Any comments?
Tx,
S

 

[saturnin02]

Dear Unknown P,
I appreciate your comments.
I am using Trend Micro PC-Cillin/Internet Security.
This IS an XP issue as my question is about Restore points in XP and not
about viruses.
The files have been Quarantined but I am not sure in any way that the
problem will not continue as it seems to return periodically and I suspect
this is do to the XP's Restore function.
S

Unless you are using some cheap no good virus scanner you should be able

to do a complete scan of your system including any restore files and have
the scanner quarantine any files and attempt a fix. If it can't fix it then
you can simply delete these files or leave them in quarantine on the outside
chance that a repair for the files maybe included in a later update for your
anti-virus definitions. At least this is the way my Norton Anti-virus works
and you didn't tell us what Anti-virus program you are using. One more minor
point: this really isn't an XP issue this is a virus issue so you should go
to the NGs for your Anti-virus program. Good luck.:~)

 

[Hilary Karp]

I don't believe there is a way to do what you want. Either you turn off
restore and loose them all or do disk clean up and loose all but the last.

 

[Don MI]

WIN XP HE
Hi,
I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.
I would like to selctively purge the infected files an no more.
Is this possible?
Tx,
S

A Virus in the Restore folder will do no harm unless you use a restore point
that has the virus. If you do not want to clean the Restore folder, you can
just wait and the infected restore point will be deleted as soon as enough
new restore points are created. You can speed the process by reducing the
size of the Restore folder.

Don

 

[neil]

The infected restore file isn't always in the most recent restore point.
Unfortunately you cannot be selective with purging restore points.
I think the other posts cover most options.
Neil

 

[Plato]

I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.

http://www.bootdisk.com/bootlist/143.htm#3

 

[saturnin02]

Tx Don.
Tx to all who posted a reply. I appreciate the feedback!
S

 

[Gregg Cattanach]

Dear Unknown P,
I appreciate your comments.
I am using Trend Micro PC-Cillin/Internet Security.
This IS an XP issue as my question is about Restore points in XP and not
about viruses.
The files have been Quarantined but I am not sure in any way that the
problem will not continue as it seems to return periodically and I suspect
this is do to the XP's Restore function.
S

If it is reporting the infected files in the System Volume
Information/_restore/../etc//etc/ section, you aren't at risk of
reinfection unless you use that restore point. Because you really don't
know exactly which restore points are infected, they all should be
considered suspect. Just bite the bullet, shut off system restore, reboot,
(this should remove all the restore points), then turn it back on. It's
highly unlikely you're going to 'need' to use any of these restore points,
anyway.

You also might first completely delete the viruses from the quarantine
section (but I'm not sure about the specifics of PC-cillin on this.)

Gregg C.

 

[saturnin02]

Got it Greg.
You're probably right.
Tx,
S

If it is reporting the infected files in the System Volume
Information/_restore/../etc//etc/ section, you aren't at risk of
reinfection unless you use that restore point. Because you really don't
know exactly which restore points are infected, they all should be
considered suspect. Just bite the bullet, shut off system restore, reboot,
(this should remove all the restore points), then turn it back on. It's
highly unlikely you're going to 'need' to use any of these restore points,
anyway.

You also might first completely delete the viruses from the quarantine
section (but I'm not sure about the specifics of PC-cillin on this.)

Gregg C.

 

[Alex Nichol]

WIN XP HE
Hi,
I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.

You cannot delete points selectively. All you can do is delete all but
the most recent one. The virus can do nothing unless you restore to a
point that contains it, so wait for a fresh clean point to be made, then
run
Start - All Programs - Accessories - System Tools - Disk Clean Up and in
the More Options page click the button to delete all but this most
recent point

 

[saturnin02]

Got it, Tx.
S

You cannot delete points selectively. All you can do is delete all but
the most recent one. The virus can do nothing unless you restore to a
point that contains it, so wait for a fresh clean point to be made, then
run
Start - All Programs - Accessories - System Tools - Disk Clean Up and in
the More Options page click the button to delete all but this most
recent point

 

[Peter Hutchison]

WIN XP HE
Hi,
I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.
I would like to selctively purge the infected files an no more.
Is this possible?

Try this
1. Make a note of the exact file that is infected.
2. Find the c:\System Volume Information folder, and give
Administrators Read/Write access to the folder.
3. Boot into the Recovery Console (or try the Safe Mode)
4. CD to the System Volume Information
5. Delete the file (noted down earlier)
6. Reboot
7. Check System Restore is working ok

Peter Hutchison
Windows FAQ
http://www.pcguru.plus.com/

 

[Peter Hutchison]

WIN XP HE
Hi,
I need to clean ONLY some files in my Restore folder or files as they have
been infected by a virus (this text is clean).
Tech support for my AntiVirus program tells me to just disable the Restore
function but I do not want to do that as that will completely PURGE ALL of
the restore points.
I would like to selctively purge the infected files an no more.
Is this possible?
Tx,
S

Peter Hutchison
Windows FAQ
http://www.pcguru.plus.com/