Abstract: A device (1) for restoring items such as files, directories and application-oriented files in a computer to a previous state is disclosed. The device comprises a processor (3), a memory (5), input/output means (7). The memory (5) comprises a storage area (9), backup area (11), an attribute area (13), an activity log file (15), and a state content area (17). The backup area (11) comprises originals of the items. The storage area (9), comprises changes to items. The attribute area (13) comprises copies of attributes to files and directories. The activity log file (15) comprises events that have occurred after the time of the previous state. The state content area (17) comprises content in relation to items at the time corresponding to the previous state. The device (1) is configured for managing the process of the restoring.