| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
Question about system restore.
|
Original Message
|
Name: Daniel
Date: October 14, 2003 at 15:31:27 Pacific
Subject: Question about system restore.OS: WinXP ProCPU/Ram: 2.0/512 |
Comment: If I get a virus attack on my pc (Win XP) do I really haft to shut down system restore? If I just right click on “C:\System Volume Information“ then security tab Add “username” full control of “C:\System Volume Information” and then should my anti virus program has full access to my system restore.
Report Offensive Message For Removal
|
|
Response Number 2
|
Name: blender
Date: October 14, 2003 at 17:19:35 Pacific
|
Reply: Daniel I run mcafee av. I have added myself as a user to the "system volume folder" with full control as an experiment...I planted "eicar" which is a "test virus" in several folders in system volume info as well as other folders. I then ran the av scan and all eicar files were sucessfully removed by the av prog including the ones in system volume info. Keep in mind tho that by default windows locks out that file for a reason and adding yourself as a user may just open up more security holes, also depending on what virus you do need to remove and how it infects files...if you remove the infected file in sys restore that whole restore point may be no longer usable... It just may be best to shut off restore to remove virus...then rescan, if all clean then turn sys restore back on and create a new restore point. That way you know you have a good clean useable restore point to fall back on if needed.
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home
Results for: Question about system restore.
system restore doesn't work, KLEZ? Summary: Symantec tool does poor job - especially with Elkern.C components. Get a few tools from TREND, F-Secure and RAV antivirus. Run them all a few times (including symantec) - don't worry about system re...
www.computing.net/answers/security/system-restore-doesnt-work-klez/1587.html
Cannot disable system restore Summary: Have you ever actually used "System Restore" in the past year and three months or so succesfully? There is a patch Q290700 to fix "System Restore" if it will not reset to a previous restore date. One ...
www.computing.net/answers/security/cannot-disable-system-restore/3503.html
Erase files and system restore! Summary: I have a friend who saved all his passwords in a file on his computer (XP). I told him it is not such a good thing to have after all but I cannot answer his question: If he wipes the file can someone ...
www.computing.net/answers/security/erase-files-and-system-restore/6309.html