Stop Virus from turning off System Protection?

BleepingComputer.com: Stop Virus from turning off System Protection?

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Stop Virus from turning off System Protection?

#1 gm1138

New Member

Group: Members
Posts: 13
Joined: 20-May 11

Posted 20 May 2011 - 01:54 AM

I have Vista Home Basic, and I know that Vista prevents viruses from tampering with the System Restore folder. A few days ago I was the lucky recipient of a rootkit/trojan agent, which was able to turn off System Restore and delete/damage/prevent System Protection from working. By turning off System Restore, the virus effectively deleted all restore points, thereby preventing my computer from recovering to a previous state. This seems to negate any benefits of tamper protection.

Is it possible to prevent anything from disabling System Restore? Thanks for any advice.

Michael

PS. Although I was unable to use System Restore I was able to press F8 at startup and select "Last known good configuration." This has not removed all the issues, but it seems to have gotten rid of the really nasty stuff, and System Protection has returned.

This post has been edited by hamluis: 20 May 2011 - 09:26 AM
Reason for edit: Moved from Vista to Am I Infected.