Why didn't system image fix problem?

[pdb430]

Recently had Win7 problem requiring a System Repair to fix it (malware hit). Ran two Win7 System Image Restores from backup, both before problem occurred. Neither fixed the problem. If system image replaces everything on HD, why wouldn't it have corrected the problem? What am I missing here?:huh:

ThNKs

 

[gregrocker]

Wipe the HD with Diskpart Clean Command before applying the image to clean the boot sector.

If this fail abandon the images and Clean Reinstall - Factory OEM Windows 7 - steps are the same for retail.

Report back results and further symptoms as there may be more steps indicated.

 

[Layback Bear]

When you got infected it could of infected all restore points also. I would not trust any restore point after a infection. I remove all restore points.
http://www.sevenforums.com/tutorials/336-system-protection-restore-points-delete.html
After I'm sure I'm sure my computer is clean I make a new restore point.
http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

 

[pdb430]

I think the System Repair corrected the malware infection.

The Image Restore I performed from two separate backups were made from a remote backup that would not have been accessable to the malware infection.

That leaves the question, "Why didn't the System Image from the Backups overwrite the infected portion of the OS?

 

[gregrocker]

What were the exact problems caused by the malware? Did you correctly disinfect the HD by running a full scan of Malwarebytes (in Safe Mode if necessary) then install the recommended Microsoft Security Essentials to run another full scan?

If Win7 was unbootable did you follow the steps in Troubleshooting Windows 7 Failure to Boot?

If you replaced the Win7 you say you fixed with a backup image then you are correct in assuming it should not carry over the infection if the image was old enough to not be harboring the infection - something which cannot be assumed for certain.

However to be safest it's best to wipe the HD with Diskpart Clean Command first. Did you leave any partitions at all?

 

[pdb430]

The malware problems related to disabled features on thedesktop and dropdown menus. These problems have been resolved. The backups were several weeks old, before any sign of the infection.

I ran the malwarebytes full scan several times, and used another recommended cleanup program. I did not run Essentials, but did use the AVG Internet Security scan and AVG PC TUNE up programs. I only have one partition (C as far as I know.