Will a system restore remove installed malware?

By sdeahn ·
From an email I opened a web site. I then asked the sended if he sent it and he said no. I became suspicious and ran a full McAfee scan and it found nothing. I then did a restore to the previous day. Is there something else I should do to check my computer for a problem?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by ---TK--- In reply to Will a system restore rem ...

but most good viruses/maleware/trojans go after restore points. Usually when posters post up about a virus, we tell them to turn off restore points b/c those are easily compromised.

If McAfee came up clean odds are, are that you are good, but if you want to scan more you can always download Spybot S&amp or Malwarebytes. both free programs do a great job in removing trojans, malware, spyware...

best of luck

Collapse -

Also after installing

by OH Smeg Moderator In reply to sometimes...

Spybot S&amp


And making sure that everything is updated you should restart your system in Safe Mode and run the AV and Malware Scans.

Scanning in Normal Mode isn't a successful way to clean or even check a system for possible infections.


Collapse -

yes the system restore remove the installed malware

by technocrat25 In reply to Will a system restore rem ...

ystem Restore periodically saves a Restore Point to provide a means of returning to a known-good configuration should something go wrong. Just about any time you install new software, a Restore Point is created. You can also manually create a Restore Point.

System Restore will undo programs and applications that have been installed since the Restore Point, but data files such as documents, spreadsheets or music MP3's will not be touched. So, your personal data should survive the restore, but you may have to reinstall any programs that had been installed after the Restore Point.

If you notice that your computer is acting slow, weird, bizarre, funky or any other way than the way it is intended to run, perhaps it has been infected or compromised in some way. Follow these steps to return it to its former glory:

1. Click Start | All Programs | Accessories | System Tools | System Restore
2. Choose Restore my computer to an earlier time and click Next
3. Using the calendar, select a day and Restore Point that you want to return to and click Next
4. Save your work and shut down any open programs. Click Next to confirm your wish to restore your computer to the designated Restore Point.

The computer will shut down and reboot, after doing some thinking and making some changes. When all is said and done, the computer will be restored to the state it was in at the designated Restore Point and all should be well.

To make sure you don't end right back where you started from, you should make sure that your antivirus, anti-spyware and other security software are installed and running and that they are up to date.

Collapse -

Thanks for the info

by sdeahn In reply to yes the system restore re ...

I was not sure what exactly a system restore does when one suspects foul play on their PC. I wasn't sure anything was installed but am too paranoid not to thing something can't happen from opening a web page from an email the person said he did not send to 10 people.
Thank you for the help.

Collapse -


by OldER Mycroft In reply to yes the system restore re ...

This helpful answer was stolen from the original author of the exact same answer:

Collapse -

All the major AV suppliers say no...

by Who Am I Really In reply to Will a system restore rem ...

All the major "anti-whatever" you name it companies, McAfee, Norton, Symantec, etc.
say if you suspect an infection, the first step is to turn off System Restore and delete all the saved restore points. (I recommend turning it off permanently and using a real backup solution that can actually restore the system)

Go to any of their web sites and check the help files and FAQ, they all say it because malware, virus, trojan, etc. can be and most likely are saved into System Restore Points,

I always recommend first checking out any links to sites etc. through a web search, before even thinking about clicking on a link in an email,

I usually do searches like this:

email scam malware virus trojan root-kits from (website name)

and browse the previews in the search hits without opening any site.

if any results show that the site is bad or possibly bad then don't click on the link and notify the sender (only if it's someone you know) that they may have an infection that's sending out bad links.

if nothing shows up then check with the sender to see if they are actually forwarding you a web site to view.
if they say no, then don't click on the link anyway,

I always tell people in person or in a previous email that I want to send a link to, that I will send them a link in a future email and this is the name of the site.

some site names like youtube or yahoo etc. might seem safe to click but can still be hijacked to redirect to whatever badsite.??? so make sure that the sender is actually someone you trust and has already told you that they are sending you a link.

and a final note:
never trust "System Restore" to save you from any type of infection, especially if you don't know when it could have happened.

Collapse -

Try another

by dilligaf4060 In reply to Will a system restore rem ...

Sometimes yes and sometimes no. I usually use 2 or 3 different anti malware programs. McAfee would not be my first choice. I would recommend using Malwarebytes Antimalware. It has a good database and can be updated. There are other Antimalware's that are ust as good and free, just do a general search.

Collapse -

I will try a Malware product

by sdeahn In reply to Try another

Thanks for the help and I know what dilligaf stands for...COOL!

Related Discussions

Related Forums