Can Zlob be removed by using a restore point?

[David H. Lipman]

From: "Onsokumaru" <[email protected]>





| And that would be to restore from the last known good backup that would take
| maybe an hour, (depending on machine specs of course).



No, the last know good backup is only for system related boot files and that doesn't keep
a cronological history and it too can be loaded infected.

 

[Frank-FL]

From: "Alias" <[email protected]>


| First thing I do when cleaning an XP box is to disable system restore to
| flush out anything that might be lurking there.

| Alias

I used to recommend that approach.

However, through communication with peers and experience, I no longer suggest this as a
first approach.

The reason is the System Restore is a valuable fall-back position.

If you remove malware and the OS becomes unstable or somehow corrupted, you can restore
the PC to its previous (albeit infected) condition and then change the motive operandi in
cleaning the system. After thorough examination and cleansing of the PC and you are
greatly assured the system is clean and operating in a stable manner, then dump the System
Restore cache. Reboot re-enable and then create a clean new restore point.

I don't really see windows system restore as an asset to use at any time. I use ESATA
drives for complete system backups. I just happen to us acronis. I boot into linux
using the acronis back up and restore CD. This will delete the infected partition, reformat
and install the clean backup. No Rube Goldberg procedures.

 

[rod]

Interesting,
So how long would a typical acronis backup like this take?


"Frank-FL" <[email protected]>
I don't really see windows system restore as an asset to use at any time. I
use ESATA
drives for complete system backups. I just happen to us acronis. I boot
into linux
using the acronis back up and restore CD. This will delete the infected
partition, reformat
and install the clean backup. No Rube Goldberg procedures.

 

[DrTeeth]

Nope, not true. The System Restore cache is akin to a quarantine.

I've already asked him to do that but the schmuck refused...quel
surprise!

He's kerplunked anyway.
--

Cheers,

DrT

** Stress - the condition brought about by having to
** resist the temptation to beat the living daylights
** out of someone who richly deserves it.

 

[Frank-FL]

Size matters. Twenty to forty minutes on the initial backup.
Ten to twenty minutes on the incremental.

 

[rod]

Thanks,
I have a fairly lean machine,
My big chunk 25Gb image database
I backup seperately.
I went shopping for a "see through" scanner today
and bumped into Acronis in the shop $69
I think I'll go for it.


"Frank-FL"
Size matters. Twenty to forty minutes on the initial backup.
Ten to twenty minutes on the incremental.