Should System Restore be enabled on a system that is quarantined for suspected virus malware?

1)    What are the benefits of using system restore vs system reset?

2)    What happens to a user's personal data during a system restore?

3)    What happens to applications and programs on a system during a system restore?

4)    Is creating a restore point the same as backing up a user's data?

5)    Is a system is infected with malware do you a restore point before or after the malware removal?

6)    Should system restore be enabled on a system that is quarantined for suspected virus/malware?

7)    Is it possible to access system restore from a boot cd windows PE / RE ?

Answer & Explanation

Should System Restore be enabled on a system that is quarantined for suspected virus malware?
Solved by verified expert

cing elit. Nam lacinia pulvinar tortor nec facilisis. Pellentesque dapibus efficitur laoreet. Nam risus ante, dapibus a molestie consequat, ultrices ac magna. Fusce dui lectus, congue vel laoreet ac, dictum vitae odio. Donec aliquet. Lorem ipsum dolor sit

Fusce dui lectus, congue vel laoreet ac, dictum vitae odio. Donec aliquet

Unlock full access to Course Hero

Explore over 16 million step-by-step answers from our library

Subscribe to view answer

s. Pellentesque dapibus efficitur laoreet. Nam risus ante, dapibus a molestie consequat, ultrices ac magna. Fusce dui lectus, congue ve

usce dui lectus, congue vel laoreet ac, dictum vitae odio. Donec aliquet. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nam lacinia pulvinar tor

rem ipsum dolor sit amet, consectetur adipiscing elit. Nam lacinia pulvinar tortor nec facilisis. Pellentesque dapibus efficitur laoreet. Nam risus ante, dapibus a moles

congue vel laoreet ac, dictum vitae odio. Donec aliquet. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nam lacinia pulvinar tortor nec facilisis. Pellentes

fficitur laoreet. Nam risus ante, dapibus a molestie consequat, ultrices ac magna. Fusce dui lectus, congue vel laoreet ac, dictum vitae odio. Don

ongue vel laoreet ac, dictum vitae odio. Donec aliquet. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nam lacinia pulvinar tortor nec

Can a system restore to a past time remove the virus from the computer?

asked Oct 20, 2010 at 13:01

The short answer is no.

System Restore can help spread a virus though.

See here for more info: Removing Viruses with System Restore. Quoting the relevant parts:

When System Restore first appeared in the market, computer manufacturers and other companies claimed ... that it could remove viruses and fix other problems with the computer.

In reality, System Restore can create copies of the infected files. And some viruses may be capable of infecting the restore volume as well as the actual system files. When a person cleans their computer using an anti-virus, then uses System Restore, they may inadvertently re-infect the computer. Or if they use System Restore as a means of removal, either the restore will fail (if the anti-virus cleans the virus out during the restore process) or the restore will replace the file with an infected version.

answered Oct 20, 2010 at 13:09

BSDITBSDIT

3893 silver badges5 bronze badges

3

No.

In fact, to make sure that no virus is still residing on your computer you should first delete all system restore points and do a manual cleaning of the virus or let your antivirus software handle it if it can.

answered Oct 20, 2010 at 13:43

Gani SimsekGani Simsek

2,61020 silver badges18 bronze badges

2

The only sure-fire way to remove a virus is to re-install the operating system.

Once you're infected you never know if you are still infected. Virus scanners are always updating their list of threats they can detect, but virus authors are updating their threats just as fast. There are always threats out there that are not (yet) able to be detected.

Good virus authors will infect every piece of the system needed to stay alive. You can never be sure how thorough the virus author is. The best will include cutting edge rootkits, which, in a real-world case, could include infecting your BIOS (although I've never seen that in theory, not in the real world).

Should System Restore be enabled on a system that is quarantined for suspected virus malware?

answered Oct 20, 2010 at 16:11

Should System Restore be enabled on a system that is quarantined for suspected virus malware?

WernerCDWernerCD

4,3136 gold badges32 silver badges42 bronze badges

3

YES system restore CAN INDEED get rid of a virus. But (OBVIOUSLY) you have to pick a point prior to which the infection occurred!

I had the "services.freshy.com" (browser hijacker) and tried a variety of things, used various spyware removers, but nothing worked. Of course there was one on-line tech help that was eager to take my $65 for a removal service.... almost fell for that, figured in the worst case I would re-install the entire OS (Windows 7, btw). Then I remembered the system restore point. Tried it, and.... BINGO! It worked! Now I'll go back and try to remove any restore points that were created when the malware was active.

So yes, if you're going to re-install anyway, try this. What harm can it do? None. It might just save your day.

answered Jan 12, 2015 at 2:05

2

That depends on the virus. If it resides in the registry or in a driver of somesort then I think it may be able to or if it was installed using a rogue windows update. Most likely it will not remove the virus because most viruses replicate themselves and make it difficult to remove.

99.7% of the time it will not remove the virus.

answered Oct 20, 2010 at 13:12

qrobertsqroberts

5,05912 gold badges37 silver badges52 bronze badges

Theoretically, it can -at best- stop the virus from working. That'd be if it only infected some files that start up now and didn't start up in the past, and if it has left the system restore points intact. But viruses aren't ever that useless to not infect any system files! So no, it won't. Since in practice, it won't even prevent the virus from working, since the virus will infect a bunch of files, some system files.. that'll run inevitably. If it's a virus, then the best thing is to "disable system restore", this wipes system restore folder clean(so if there was a virus stored there it is gone). Then run the virus scan. Then enable it. System restore really won't help you at all for a virus. It can help with other types of malware though.

Malware other than viruses, like spyware or adware, can sometimes be -not removed- by system restore, but stopped from working via a system restore. (if the malware left the system restore intact). By the way, you can make your own registry backup with ERUNT.

answered Oct 20, 2010 at 13:25

barlopbarlop

22.2k39 gold badges133 silver badges208 bronze badges

system restore does remove viruses but it would be better to do a system restore as soon as your computer has been infected that way you get the best restore point. doing it at a later date wont help get the best restore point some viruses can attack even with an anti-virus active thats when you have to do a system restore... and be sure to update/re-install your anti virus each time you do it

answered Jun 23, 2015 at 9:27

1

Will a system restore get rid of malware?

No, since some malware can hide in files that System Restore does not modify. You need to scan your system with an offline scanner such as the ESET Sysrescue offline scanner.

What is the first step once you have confirmed malware on a computer?

Disconnect From the Internet A virus will try to call home, hence disconnecting from the internet should be one of the first things you do in order to battle any form of malware. Here's how you can quickly cut your internet connection on any Windows computer: If you're on a desktop, unplug your Ethernet cable.

Why would you disable system restore before remediating a malware removal?

Unfortunately, the malware authors know this, and when they infect your system they will also infect all your restore points. So by disabling the system protection, you're effectively going to be removing all of your previous restore points.

What is the proper procedure for removing malware from a system?

How to remove malware from a PC.
Step 1: Disconnect from the internet. ... .
Step 2: Enter safe mode. ... .
Step 3: Check your activity monitor for malicious applications. ... .
Step 4: Run a malware scanner. ... .
Step 5: Fix your web browser. ... .
Step 6: Clear your cache..

What is one of the first things you should do when responding to a malware infection?

Disconnect Immediately After recognizing the signs, the first action any employee should take is to disconnect the device or computer immediately. This is to stop the malware from spreading. It's too early to tell if the initial device is savable or not.

What is one of the first things you should do when responding to a malware infection quizlet?

- Most malware propagate over networks. - One of the first actions should be to disconnect the network link. WA3) DO THIS to prevent future malware infections before recommissioning the computer back to the network.