1.

Solve : viruses in restore points?

Answer»

If your computer's CURRENT state contains malware, can that malware find it's way into restore points ?

I'm not talking about creating a restore point without knowing malware is on installed on the current state.. 

Say you're sitting in front of your computer and it's booted to the desktop and VIRUSES are running care free in the background, can they enter into restore points that have already been created ? Quote from: EEVIAC on April 23, 2010, 10:57:22 AM

If your computer's current state contains malware, can that malware find it's way into restore points ?

I'm not talking about creating a restore point without knowing malware is on installed on the current state.. 

Say you're sitting in front of your computer and it's booted to the desktop and viruses are running care free in the background, can they enter into restore points that have already been created ?

Not easily, since only certain services have access to the "SYSTEM Volume Information" folder in the root of every drive that is used to save restore points; these services are able to access it because they are run under the LocalSystem Account.

of course if malware is able to get access via the LocalSystem Account and is able to parse and change the proprietary and totally subject to change without notice format of the files within that folder then it COULD infect them.Do you know of any times this has happened, with anyone ?


good theory  Quote from: EEVIAC on April 23, 2010, 11:09:05 AM
Do you know of any times this has happened, with anyone ?

Can't say I have.

Then again I think I can count the number of times I've used system restore on one hand. And usually when it gets to that point I end up reformatting and installing anyway.


Discussion

No Comment Found

Related InterviewSolutions