Can I use System Restore AFTER anti-malware

Ketch1 · Nov 29, 2010

Hi guys, I'm new to the forums and I just have a question regarding malware removal...duh, right? Clearly, I posted in the malware removal section.

Anyway, I know it is a NO NO to use system restore as a means to remove viruses or malware but I was wondering is it okay to use system restore AFTER I have removed the malware? Like, I run my anti-malware and remove infected files and then I use system restore to restore to a point a week before the infection so that I can fix any problems that the malware may have caused. Is that okay or will it cause the malware to come back? Thanks so much!

Kestrel13! · Nov 29, 2010

If you are having malware problems I suggest you run our procedures. In answer to your question, I would not go with the system restore option you are referring to, no.

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Ketch1 · Nov 30, 2010

Well I am having a lot of problems running those steps. The computer has been royally screwed by Think Point. I am actually trying to fix it for my uncle. He got the attack and then ran Malware Bytes Anti-Malware in Safe mode but the problem was still there. Then he decided to just delete the profile that received the attack. I'm thinking that wasn't the best idea. BUT now it appears the Think Point is gone, only problem is the computer doesn't function like normal. Registry edit is "disabled," Folder Options are missing, internet won't work even though it is connected, can't run Malware Bytes Anti-Malware. Task manager runs fine though. I performed steps to get into registry edit but most don't work, then I tried a different one and it worked but after I close registry edit I have to perform the steps again to get into it and worse, when I reboot the computer the changes I made in the registry edit have been reset!

Everything runs fine in Safe Mode but the safe mode changes do NOT apply to normal mode when I restart the computer. The malware I deleted in safe mode is back in normal mode, the registry changes I made are reset in normal mode, you get the picture. I will continue with the steps in Read & Run Me and see how things come out. Thanks!

Kestrel13! · Nov 30, 2010

Yes do what you can of the R&R and attach logs once done. I will be here floating about somewhere.

Ketch1 · Dec 1, 2010

Well, things went from bad to worse. I went to turn the computer on today and it would not boot. *sigh* I'm running a Knoppix 5.1 boot disk I made a few years ago to retrieve files off the computer. Unfortunately, I am not sure if I can get around reformatting at this point because I want to make sure every trace of this awful malware is gone. Is there a process for removing malware and correcting registry/system problems when using a boot disk? Or should I try to do the R&R steps still?

And thank you very much for your help! I really appreciate it.

Kestrel13! · Dec 1, 2010

You could try something like this:

>>>Download<<< Avira AntiVir Rescue System

Ketch1 · Dec 2, 2010

I will give that a whirl. Hey can I run this from a USB, do you know?

Also, will restoring to factory settings perform the same function as reformatting the hard drive in terms of ridding me of viruses/malware?

Kestrel13! · Dec 2, 2010

I will give that a whirl. Hey can I run this from a USB, do you know?
Click to expand...

Take a look here.

Also, will restoring to factory settings perform the same function as reformatting the hard drive in terms of ridding me of viruses/malware?
Click to expand...

Yep, either option will do.

Log in or Sign up

Can I use System Restore AFTER anti-malware

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Log in or Sign up

Can I use System Restore AFTER anti-malware

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Ketch1 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Useful Searches