System Restore

[Gimpy]

When getting updates from M.S. it leaves behind a " Software distribution
service " on system restore. Is this indeed a restore point or nothing of
value? Also there have been times I get something from Ad-Aware or spybot
& was wondering if these are any type of restore points ? Thanks for your
ideas... Gimpy

 

[gsjutla]

Are you using any kind of application/software distribution software like
SMS. To check if this is authentic, you can use the application like autoruns
from Sysinternals to check if the service is digitally signed by Microsoft
corporation or any other app vendor. Also look at the path. An application or
a service that is not digital signed by A company has a high probability of
being a malware presenting itself as a genuine service 'cos you will find a
ligitimate name if you search on web for that service.

hope this helps

Regards
Gurpreet