is the feature that protects your computer by monitoring a core set of system and application files and by creating backups (snapshots saved as restore points) of vital system configurations and files before changes are made. These restore points are stored in the System Volume Information
) folder and can be used to "roll back
" the computer to a clean working state in the event of a problem. This makes it possible to undo harmful changes to your system configurations including registry modifications made by software or malware by reverting the operating systems configuration to an earlier date. Keep in mind that System Restore will back up the good as well as malevolent files
, so when malware is present on the system it may be included in restore points.
If System Restore is working you can always try using it. Sometimes this method of recovery works but other times it may not. Whether it will be successful depends on what type of infection you are dealing with and what is restored (What's Restored when using System Restore and What's Not
Generally its better to leave System Restore alone until the machine is clean and stable. However, in some cases, using System Restore may return some system stability if you are having problems running disinfection tools or booting up. If you are able to successfully use System Restore to return to a previous state there is no guarantee
your computer will not still be infected. As such, you should immediately perform scans with your anti-virus and anti-malware tools afterwards.