Hi Ron
I was transferring documents using the Linux Live CD and I think I have stumbled across the restore points that I couldn't find in earlier posts.
When I load Linux, it indicates that there are 4 drives to mount. My C: drive is labelled as sda2 and has all the Windows folders, Program files etc, which is where we thought the Restore Points should be.
There is another drive labelled as sda3 that has a folder named System Volume Information/Restore/202.....07/ and contained within this folder are three folders named RP1, RP2 and RP3. The dates that they were created tally with the dates that the malware issue was resolved. I can only assume that this is a separate partition.
If I move these folders to the other (sda2 or C:)drive, will they be visible from the Recovery Console and so enable us to run the steps in Post #4?
If so, which folder should they go in and should I move just the RP1,RP2 and RP3 folder, or the complete System Volume Information Folder?
Many thanks in advance.