Anti-Spy Advice Page

Windows Me/XP, the virus returns after a re-boot

The Problem: Your virus killer found a virus in your windows system files/folders, after removing/repairing the virus you scan your computer again and its gone, but after re-booting your computer the virus is back again?

Possible answer: Sometimes your system backup files can also get infected by the virus, either the virus that infects your system files can also infect your system back up files, or most likely when your system does an automated backup, it unknowingly copies the infected file to the restore folder.

If your anti-virus software didn't detect the virus in the restore folder, it maybe because you have not set it up to scan ALL files, if your not scanning all files your virus killer may only detect the files that are actively infected.

Basically when the anti-virus software deletes or repairs the file and you reboot your system, windows will detect the file missing or corrupt and automatically re-install it using the infected file from the backup folder.

Solution: Delete the system restore files. Follow the below steps:

1, Scan your computer and remove the virus.

2,

Windows ME,

a. Right click the My Computer icon on the Desktop and click on Properties.
b. Click on the Performance tab.
c. Click on the File System button.
d. Click on the Troubleshooting tab.
e. Put a check mark next to 'Disable System Restore'.

f. click 'apply'.
g. if you are asked if you are sure you wish to disable and delete restore files, click 'OK' or 'YES'
h. Remove the check mark next to 'Disable System Restore'.
i. click 'apply.

Windows XP,

a. Right click the My Computer icon on the Desktop and click on Properties.
b. Click on the System Restore tab.
c. Put a check mark next to 'Turn off System Restore on All Drives'.

d. click 'apply'.
e. if you are asked if you are sure you wish to disable and delete restore files, click 'OK' or 'YES'
f. Remove the check mark next to 'Disable System Restore'.
g. click 'apply.

3, Re-boot

4, Re-scan your computer and the virus should be gone.