07-13-2008 12:38 AM
My new machine is on line now and so far only been to sites known safe.
To my surprise when I installed my spyware program it found a file it considered spyware in one of my system volume (system restore) files.
This file was not found in any other location on the computer. That leads me to wonder how this may have happened.
I sent a copy of the file to the company to be analyze to verity if this is a false positive.
Solved! Go to Solution.
07-13-2008 02:10 AM
hi ohno welcome to the forums
yes its ofcourse possible that spyware might have crept in to ur system un notice.you must notice that windows makes a snapshot of all files(system info) for every 60 days may be the malware got in as well the first thing you have to do is
DISABLE SYSTEM RESTORE IMMEDIATLY
other wise it will return once you have used system restore
07-13-2008 08:24 PM
02-09-2011 09:38 AM - edited 02-10-2011 09:36 AM
Lenovo has recently opened this Security & Malware Forum so older topics are being relocated to here. I'd like to include a bit more regarding System Restore for members who come across this discussion today.
It is preferable to clean the system >disable System Restore > immediately reboot and enable it again. Why not before cleaning? That is because a dirty Restore Point is better than none at all. Malware that is in System Restore cannot get out. A user cannot be re-infected by a file that is in System Restore, unless, as mentioned above, he manually runs System Restore to revert to when he was infected. We've also had people tell us that they disabled System Restore to run routine virus scans, and have forgotten that they have done so. Thus, they have been left with no System Restore Points for long periods. You can imagine what a problem that would be!
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Microsoft MVP - Consumer Security
Member of Alliance of Security Analysis Professionals