Re: Safe mode with System Restore off

From: Will Denny (willdenny_at_mvps.org)
Date: 06/10/04 

Date: Thu, 10 Jun 2004 09:57:47 +0100

If SR is turned off/on then the AV program can check to see it the virus has
been deleted. If SR is disabled then it can't be checked for viruses by the
AV program and when it is turned back on may still have a virus in it -
according to Symantec. 

-- 
Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups
"Kelly" <kelly@mvps.org> wrote in message
news:ecD4ygsTEHA.3284@TK2MSFTNGP11.phx.gbl...
| They don't.  These are their words:
|
| Disabling System Restore
|
| If you are running Windows Windows XP, we recommend that you temporarily
| turn off System Restore. Windows XP uses this feature, which is enabled by
| default, to restore the files on your computer in case they become
damaged.
| If a virus, worm, or Trojan infects a computer, System Restore may back up
| the virus, worm, or Trojan on the computer.
|
| Windows prevents outside programs, including antivirus programs, from
| modifying System Restore. Therefore, antivirus programs or tools cannot
| remove threats in the System Restore folder. As a result, System Restore
has
| the potential of restoring an infected file on your computer, even after
you
| have cleaned the infected files from all the other locations.
|
| Also, a virus scan may detect a threat in the System Restore folder even
| though you have removed the threat.
|
| For instructions on how to turn off System Restore, read your Windows
| documentation, or one of the following articles:
|
| "How to turn off or turn on Windows XP System Restore"
| http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039
| -- 
| All the Best,
| Kelly
|
| Microsoft-MVP Windows® XP
| 2004 Windows MVP "Winny" Award
|
| Troubleshooting Windows XP
| http://www.kellys-korner-xp.com
|
| Taskbar Repair Tool Plus!
| http://www.kellys-korner-xp.com/taskbarplus!.htm
|
|
| "Will Denny" <willdenny@mvps.org> wrote in message
| news:%23vcGSSsTEHA.1472@TK2MSFTNGP12.phx.gbl...
| > Hi Kelly
| >
| > SR can be turned off/on to get rid of the virus, but I wondered why
| > Symantec
| > were saying just to disable it?
| >
| > -- 
| >
| > Will Denny
| > MS-MVP Windows - Shell/User
| > Please reply to the News Groups
| >
| >
| > "Kelly" <kelly@mvps.org> wrote in message
| > news:upJRAPsTEHA.2372@TK2MSFTNGP11.phx.gbl...
| > | Will,
| > |
| > | Windows XP utilizes a restore utility that backs up selected files
| > | automatically to the Restore folder. This means that an infected file
| > could
| > | be stored there as a backup file, and VirusScan will be unable to
delete
| > | these files. You must disable the System Restore Utility to remove the
| > | infected files from the Restore folder.
| > |
| > | Thus meaning that you must disable the System Restore Utility to
remove
| > the
| > | infected files from the Restore folder.
| > |
| > | -- 
| > | All the Best,
| > | Kelly
| > |
| > | Microsoft-MVP Windows® XP
| > | 2004 Windows MVP "Winny" Award
| > |
| > | Troubleshooting Windows XP
| > | http://www.kellys-korner-xp.com
| > |
| > | Taskbar Repair Tool Plus!
| > | http://www.kellys-korner-xp.com/taskbarplus!.htm
| > |
| > |
| > | "Will Denny" <willdenny@mvps.org> wrote in message
| > | news:u4TRJ5qTEHA.1284@TK2MSFTNGP10.phx.gbl...
| > | > Hi
| > | >
| > | > Yes, you can get back to 'Normal' mode with SR turned off.  What
| > reason
| > | > does
| > | > Symantec give for turning SR off?
| > | >
| > | > -- 
| > | >
| > | > Will Denny
| > | > MS-MVP Windows - Shell/User
| > | > Please reply to the News Groups
| > | >
| > | >
| > | > "Having virus problems" <jdz@inr.net> wrote in message
| > | > news:1a7ca01c44e91$586cdb50$a501280a@phx.gbl...
| > | > | Can I get out of Safe Mode, if I have previously disabled
| > | > | System Restore.  Symantec tells me to do this, befre
| > | > | scanning for a virus, but I wonder if I can get bak to
| > | > | Normal Mode with System Restore turned off.
| > | >
| > |
| > |
| >
|
|

Relevant Pages

  • Re: Pixelsrvr.exe wont load on bootup
    ... Sounds like you got yourself a virus,. ... Adds the following line to the [windows] section of the Win.ini file: ... antivirus products, including the Symantec AntiVirus and Norton AntiVirus ... Disabling System Restore ...
    (microsoft.public.windowsxp.video)
  • Re: Nasty Message Comes Up When Opening Word
    ... MS-MVP Windows Shell/User ... virus, but after much checking, I do not have that virus. ... Knox's web site called System Restore Point. ... I'm running the PC-cillin anti virus 2006 suite, and 5 anti spyware, and ...
    (microsoft.public.windowsxp.general)
  • virus alert on my pc
    ... during whcih my AVG virus guard warned ... Windows 2000, Windows 95, Windows 98, ... Virus Definitions * ... Disabling System Restore ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: certificate of authenticity
    ... which is an excellent general System Info tool, and its Operating System ... this is overkill where there is a single virus ... System Restore and create one manually) then Start - All Programs - ... Alex Nichol MS MVP (Windows Technologies) ...
    (microsoft.public.windowsxp.general)
  • Re: Safe mode with System Restore off
    ... Will Denny ... MS-MVP Windows - Shell/User ... You must disable the System Restore Utility to remove the ... | infected files from the Restore folder. ...
    (microsoft.public.windowsxp.general)