Turn Off System Restore and Backup Registry in Windows XP

• 1). Right-click "My Computer" and choose "Properties."
  
  
• 2). Click the "System Restore" tab.
  
  
• 3). Check the "Turn Off System Restore" option.
  
  
• 4). Press "Apply" and then "Yes" to the "This Deletes All Existing Restore Points" prompt.
  
  
• 5). Choose "OK" to finish disabling System Restore.
  
  
• 6). Click "Start," then "Run" and type regedit to open the registry window and backup your registry.
  
  
• 7). Select "File" and choose "Export."
  
  
• 8). Name the file and choose a save location.
  
  
• 9). Mark "All" in the "Export Range" menu and click "Save" to save your backup.
  
  

Turn Off System Restore and Backup Registry in Windows Vista

• 1). Click the "Windows" button, right-click "Computer" and choose "Properties."
  
  
• 2). Select "System Protection" in the "Tasks" menu.
  
  
• 3). Uncheck the "Local Disk," choose "Turn System Restore Off" and click "OK" in the System Protection window.
  
  
• 4). Click the "Windows" button, type regedit in the search box and press "Enter" to open the registry window and backup your registry.
  
  
• 5). Select "File" and choose "Export."
  
  
• 6). Name the file and choose a save location.
  
  
• 7). Mark "All" in the "Export Range" menu and click "Save" to save your backup.
  
  

Remove W32.Svich on Windows XP and Vista

• 1). Open and update your anti-virus software.
  
  
• 2). Restart your computer and press the "F8" key before the Windows logo appears. If you hit the key after the logo appears, your computer will start as normal, and you'll have to restart again.
  
  
• 3). Use the arrows to navigate to and select "Safe Mode" and press "Enter."
  
  
• 4). Open your anti-virus software, perform a full system scan and delete any infections.
  
  
• 5). Run the registry editor.
  
  
• 6). Click "HKEY_ALL_USERS" and choose "SOFTWARE," "Microsoft," "Windows," "CurrentVersion" and "Run" in the left window pane.
  
  
• 7). Locate "Yahoo Messengger" in the right window pane (note the extra "g" in "Messengger"). Next to "Yahoo Messengger," you will read "C:\WINDOWS\system32\SSVICHOSST.exe" in the "Data" column.
  
  
• 8). Right-click "Yahoo Messengger," select "Delete" and click "Yes" in the "Confirm Value Delete" window.
  
  
• 9). Click "HKEY_LOCAL_MACHINE" and choose "SOFTWARE," "Microsoft," "Windows NT," "CurrentVersion" and "Winlogon" in the left window pane.
  
  
• 10
  
  Locate "Shell" in the right window pane. Next to "Shell," you will read "Explorer.exe SSVICHOSST.exe" in the Data column.
  
  
• 11
  
  Right-click "Shell," select "Delete" and click "Yes" in the "Confirm Value Delete" window.
  
  
• 12
  
  Click "HKEY_ALL_USERS" and choose "SOFTWARE," "Microsoft," "Windows," "CurrentVersion," "Policies" and "System" in the left window pane.
  
  
• 13
  
  Double-click "DisableTaskMgr," type "1" in the "Value" window and click "OK."
  
  
• 14
  
  Repeat Step 13 with "DisableRegistryTools."
  
  
• 15
  
  Click "HKEY_ALL_USERS" and choose "SOFTWARE," "Microsoft," "Windows," "CurrentVersion," "Policies" and "Explorer" in the left window pane.
  
  
• 16
  
  Repeat Step 13 with "NofolderOptions."
  
  
• 17
  
  Close the registry editor and restart the computer as normal.
  
  
• 18
  
  Open your anti-virus software and perform a full system scan. Delete any remaining infected files.
  
  
• 19
  
  Turn System Restore on.