Mon, Mar 27 2006 19:41
They myths of the Internet
I'm not pulling your leg, honest:
Read Sandi's excellent article about the myths of the Internet...
The question came up on a listserve of how effective "System restore" was to go back "before" an infection by a trojan.
"Antivirus utilities can affect whether your system can be restored to a previous point. If a restore point contains an infected file because the utility is not set to clean the file within the restore point, or if an infected file has been removed from a restore point by an antivirus utility because it could not be cleaned, System Restore will not recover the computer to this partial or infected state. If System Restore could not restore your computer to a previous state, and you suspect that one or more restore points contain infected files or have had infected files removed by the antivirus utility, you can remove all restore points from the System Restore archive by turning off System Restore and then turning it back on. "
But the question is now..do you know when you had the "incident"? Because truly.... malware, spyware and viruses are an "incident". The best way to handle a security incident is to install from trusted media.. that's right you start over....
Help: I Got Hacked. Now What Do I Do? - Microsoft TechNet: Security Management Column:
Filed under: Security