System Restore... viable malware remover?

[Firestrider]

I know some malware will embed themselves into restore points, but generally can going back to a system restore point that you know is clean remove malware?

Sometimes it can be faster to revert back to a system restore point than run a quick scan with mbam.

 

[Jonathan_King]

Maybe, but are you sure the restore point is clean? Maybe it contains the virus, but it just hasn't shown itself yet.

I don't think I could recommend that to people, because I see they fear System Restore anyway. If it doesn't work, they may lose programs and still need a virus scan.

 

[whs]

System Restore is a so, so option. You may be OK or you may be not. And many times it does not work anyhow - often because the malware prevents you from using it.
It is better to do imaging to an external disk that you disconnect after the image is taken. I do that every second day (with Macrium). The fact that the disk was disconnected makes sure that no malware could get to it. And during the restore process you are running under the control of a seperately loaded Linux program - so no chance there either for malware.

 

[JonM33]

I know some malware will embed themselves into restore points, but generally can going back to a system restore point that you know is clean remove malware?

In my experience? No.

 

[ultraplanet]

I know some malware will embed themselves into restore points, but generally can going back to a system restore point that you know is clean remove malware?

In my experience? No.

Agreed. Usually I will delete all restore points after removing malware by turning system restore off and then back on.