My wife's computer recently was infected with Virtumonde. Among other things, it destroys Windows restore points, so that (among many other "tricks") makes it very difficult to remove - it's a multi-step process and required some really specialized techniques (well above me - I just followed instructions ).
My question is, would WinXP Restore's method of restoration likely have been wiped out along with the Windows restore points, or if I'd had WinXP Restore installed in her computer, might we have been able to recover on our own from that nasty "little" trojan? (Good future reference material anyway - too late for this recent infection, of course - and maybe will save somebody else.)
Posted: January 13th, 2009, 12:21pm
I do not understand what you mean by "WinXP Restore's method of restoration". I assume you are referring to Windows Restore Points. If the virus destroys Windows Restore Points then I would think that the Restore Points would not work. If instead of WinXP, you meant WinRescue XP, no, the virus should not destroy the WinRescue XP backups and they should work to fix the virus infection if the infection is confined to the registry (which many times it is).