[access-uk] Re: XP System Restore

  • From: "Douglas Harrison" <harrisondf@xxxxxxxxxxxxxx>
  • To: access-uk@xxxxxxxxxxxxx
  • Date: Mon, 23 May 2005 17:57:30 +0100

Thanks for the clarification, Sunil. I actually use Norton but if I suspect  
that I may have 
a virus/worm etc. on the system, as the article says I always turn off System 
immediately, thereby clearing all Restore points, so that if the scan reports a 
system I know that nothing is lurking in the System Restore areas.   But I 
doubt whether 
this applies with Spyware, but I may be wrong.


On 23 May 2005 at 16:13, Sunil wrote:

> I'm honestly not sure how worthwhile it is, I'm just going on something I
> read in a forum which I pasted below - when my system was riddled with
> malware and I was trying to clean it all out.  Having said that I'm
> beginning to think that the kind of nerds and geeks who inhabit technical
> forums probably over-exaggerate the seriousness of spyware and its
> probably not that important to disable system restore.  Here's why I said
> it though, this isn't Spybot info so the reasoning might not even apply
> anyway: Windows Millennium Edition (ME) and Windows XP have a feature
> known as System Restore, which creates backups of certain files in the
> _Restore folder. The System Restore feature usually backs up files with
> EXE or COM extensions, which may include infected files and malware
> programs. Files in the _Restore folder are protected and can only be
> accessed using System Restore. This feature must be disabled first before
> Trend Micro antivirus can access and clean these files.


Douglas Harrison

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: