However, in this case restoration is impossible, because such activities as creation of a new file, or writing to a disk, are blocked.Then the anti-virus software finds the registry key that corresponds to the infected file and removes it from the registry.