Topic: What is the rule re XP restore and virus removal?

[Tony]

As I've never had a virus, I not to sure how XP restore is to be handled. See a neigbour has just popped around. he has a daughter who just downloads any email that arrives.

Anyway he  says he cannot connect to the web, his Firewall has disappeared, yet AVG reckons he is clean.

What do you reckon,  is it advised policy to disable XP Restore ...amoung other things, when trying to get the PC back to normal.?

Sorry, I cannot be arsed to wad through loads of posts, just because a neigbour's daughter is an idiot. As I know I wont be thanked for it , surly item that she is.......never speaks.....since I asked if they would get peeps visiting their house to refrain for blocking my driveway, locking their cars and buggering off.....mumble ....mumble  
 :roll:

[Sandra]

Its advisable to do an AV scan in safe mode with system restore turned off first Tony.
Unfortunately you then lose all your restore points, I think  
So it may be an idea to try and restore it to an earlier date first and see if his firewall reappears before you turn it off  

[chorleydave]

Yes.  That is what baffles me about having System Restore set on all the time.  When I have used it, I have only enabled it before doing something major, or something known to be troublesome like getting MS updates and then once I am happy that everything is OK I have turned it off again, because the one time it is likely to be really useful, to get the system back to a point before infection, it appears to be completely useless.  

There is an article about this on PC-Hell.

http://www.pchell.com/virus/systemrestore.shtml

[Tony]

Cheers my little macaroonies,

I thought that was the procedure. I'd told him to disable restore and run AVG again, but he said he would rather not loss his restore poitnts!!!!!!  

Ok, he has his restore points , but its on an infected, no internet access PC....to tee to tee to.....Now call me old fashioned....but I'd rather have a clean PC with zilch  XP restore points , than the alternative.

 :roll:  :roll:  :roll:

[Simon]

The chances are, Tony, that the virus could well be contained within his restore points, so no matter how many scans he does with AVG, it may keep coming back.  Perhaps you need to scare him a little, and tell him that his restore points also contain all his internet browsing activity?   :twisted:

[Tony]