Help - Search - Members - Calendar
Full Version: seeking assistance
BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods
   
jaybee
i am seeking assistance on malware removal and system restore. some people tell me to properly remove such is to disable system restore while others say that it is a bad idea to do in case something goes wrong, plus if i restore back like a week before the problem, that would clear some of the malware and or hijack. i am very confused on what to tell a friend of mine to do with it as i was always led to believe that SR be disabled to properly clean a system, btw, it is an XP based system. blink.gif just seeking assistance on this to whom may know for sure. thank you.
Pandy
Hi jaybee.. IMHO it is best to reset system restore AFTER you get your computer cleaned of Malware and spyware. A bad system restore point is better than none at all. Once you disable system restore all previous points get deleted... I would wait til after the fixing to reset system restore.
jaybee
thank you for your insight, another question, how about clearing all previous restore except the current. can that be done? thumbup.gif
Leurgy
Hello jaybee and welcome to BC.

QUOTE
how about clearing all previous restore except the current. can that be done?


When you turn of System Restore (SR) all the restore points are deleted. Turning it back on will create a new restore point. So, if you do this without rebooting, you will have a current restore point.

QUOTE
If the System Volume Information Folder is on an NTFS partition, the SVI directory can be accessed by a virus utility to clean an infected file as any other part of the file system. If the System Volume Information (SVI) folder is on a FAT partition and a virus infected file has been detected or copied to the data store before it was cleaned, the data store needs to be purged to remove the Restore Point with the infected file.


That is from Microsoft. So it depends on the file system you are using, whether or not you need to delete the restore points.
jaybee
disk cleanup, more options tab reads..."you can free up more disk space by removing all but the most recent restore point" in the system restore tab...will that work for clearing an infection in restore? crazy.gif
Leurgy
Only if the most recent restore point is not infected.
jaybee
clapping.gif cool, thats a ton of help in making sure. at least there is options other then just disabling it first, i use and have suggested ERUNT for the registry back up, a nice little utility. many thanks for the great support here at BP, i'll try to frequent the site. thumbup.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.