Forum Home
Press F1
Thread ID: 105964	2009-12-20 09:44:00	System Restore Question	Chris09 (15218)	Press F1

Post ID	Timestamp	Content	User
841439	2009-12-20 09:44:00	Rather than hijacking a post, which I see a lot of about turning System Restore off before cleaning the system, I've made another one. Essentially to get rid of System Restore, would not give you any chance of a recovery to a former state. Why do you(people who say so) turn it off, before hand? The system will only restore the nasties if you do. Here is an example of what I mean. Turn Off System Restore > Malware Clean etc > Computer crashes and burns > no System Restore to recover back to former self - although infected files are better than none right? So wouldn't it be better to... Create a System Restore Point as is, before clean > Malware Clean etc > Computer crashed and burns > If needed, recovery is available, otherwise we can turn it off, and back on after the clean. Now I understand if this were happen, and the operating system was damaged due to removal of infected registry files, that you would repair the operating system with a disc. For those that do not have one, or do not know how, wouldn't this be a additional back up for a recovery - whatever circumstance that may need it? Am I right to say the only way the System Restore would reinfect, is by restoring the PC back to that point, or can the files from that System Restore reinfect on next restart? If that was the case, I would understand. But if not, then what is the reason for not having that chance of recovering the PC back to an infected - but working state? I wouldn't have thought about it, but I've seen on bleeping forums and others, that some do it that way. So just wanting some enlightenment on that. Thanks.	Chris09 (15218)
841440	2009-12-20 10:03:00	My method is ccleaner > malwarebytes > hjt > system restore off > reboot > system restore on > maybe spybot > NOD32 > windows update > malwarebytes > finally ccleaner. Should only take half an hour of your actual time, total time may be 1 to 2 hours including scans.	Coaster (270)
841441	2009-12-20 10:09:00	Well, my personal method for cleaning basics.. System Restore Point Made > Ccleaner > Safe Mode > Trojan Remover > Malwarebytes > Spybot (Depending) > NOD32 > Back to OS > System Restore turned off > Restart > System Restore turned on > NOD32 But I see your logic.	Chris09 (15218)
841442	2009-12-20 10:11:00	Well no turning SR off wont bring the nasties back. Thats why you disable it. Because it removes the files that are in the SR folder/s. And this is where malware maybe hiding. And you'll have to turn it back on (after you remove whatever). But if you use SR to go back too far you'll wipe out programs you've already installed. What would you prefer? To disable SR, get rid of whatever, then turn it back on after, or reinstall all the programs all over again? Which will take longer.	Speedy Gonzales (78)
841443	2009-12-20 10:31:00	It's up to you, the user to decide if you clear the system restore points or not, just be aware that if you use that restore point thats infected, you will be reinfected, which makes any disinfection efforts pointless/redundant. Why not clear them, it's not as if they're any use to you (my two cents anyway). The only time I might do it your way, is if I had no OS images, restore partition & discs, or the original OS disc, but I wouldn't let myself be in that position (remember the 1st law of Murphy, sh1t happens).	feersumendjinn (64)
841444	2009-12-20 17:46:00	Make an image before doing anything then you can just re install if it crashes	gary67 (56)
841445	2009-12-20 18:53:00	Turn Off System Restore > Malware Clean etc > Computer crashes and burns > no System Restore to recover back to former self - although infected files are better than none right? So wouldn't it be better to... Create a System Restore Point as is, before clean > Malware Clean etc > Computer crashed and burns > If needed, recovery is available, otherwise we can turn it off, and back on after the clean. . No. Infected files are NOT better then none. If the PC has corrupted or overwritten system files I do a Repair install.	pctek (84)
841446	2009-12-20 19:14:00	You dont have to disable SR if there are no nasties reported there, only if there is!	SolMiester (139)
841447	2009-12-21 02:40:00	No. Infected files are NOT better then none. If the PC has corrupted or overwritten system files I do a Repair install. +1 To that. I used to leave SR on, in case a serious Windows file was infected....but having an infection on a PC is never good, so I turn it off, remove malware, then attempt a repair install if needed(or replace the system file if possible) then reformat.	Blam (54)
841448	2009-12-21 03:26:00	+1 To that. I used to leave SR on, in case a serious Windows file was infected....but having an infection on a PC is never good, so I turn it off, remove malware, then attempt a repair install if needed(or replace the system file if possible) then reformat. ?? LOL	SolMiester (139)
1 2