There are some problems associated with System Restore when it comes to viruses. When restore points are created they are stored in a directory that is accessible only to the System account and not to a user. This keeps the restore points safe from misuse and tampering. Unfortunately this also means that any virus scan software you may have installed can not scan the files located there as well. This causes a problem if a file that is infected with a virus gets backed up into a restore point because now the anti-virus software can not clean it. Now if you ever restore from a restore point, that file that is infected will be introduced back into your system.
With this in mind, if you find that you are infected with a virus, hijacker, or spyware and want to make sure you do not get reinfected if you restore a restore point, you should turn System Restore off and then back on again to clear all the restore points. This will guarantee that their are no infected files that could be restored.
i got a threat alert 2 days ago and it happens everytime a boot my computer. (Trojan Horse). now they're in the virus vault. how do i get rid of them? what other software can i use to get rid of them?
To clean your virus vault, open your AVG control center (right click your AVG icon on your taskbar).
Under the "component" list, right click virus vault and choose "empty vault."
All that does is empty your vault. Do a complete system scan. If AVG gets something, you can choose "clean infection" instead of "move to virus vault" and it will delete instead of moving to the vault.
If you're getting a threat alert every time you boot, you might need a little more than AVG. Trend Micro has a free online virus/spyware scan that is pretty good. You can find it here: http://housecall.trendmicro.com/
Give that a try and see what happens. If you still get the alert, reply and we'll go from there.
Good luck!
I think your first suggestion just deletes all restore points bar the last few, how many depends on your system and how much space you've allocated for system restore. The only sure way is, as you said, to turn system restore off, that deletes all restore points from the system. Not recommended if you have any problems, tho, a bad restore point is better than nothing at all.So, if anyone has anymore information about this, please share insights.