3.3       Create System Restore Point

What if your system has been infiltrated by malicious spyware and you’ve had a catastrophic failure? There is good news.  Windows XP and Windows ME have a wonderful feature called Windows System Restore.

This tool can bring your system back to the way it was before the problem started. 

    Windows routinely takes a “snapshot” of your system configuration at certain times.  These snapshots are called “restore points.”  When a problem occurs, you can return your computer to one of these previous configurations without losing any of the data that you’ve worked on up to that point.

This same tool can be used to rid your system of spyware. You can use this on a new computer or one that you know is rid of all spyware. Just delete all previous restore points and rest easy knowing that you have a clean system to fall back on in case of future infection. 

If you’re ever infested again, you can easily use System Restore to revert to a spyware-free system configuration. 

Having this reliable, clean restore point is the key to using Windows System Restore. If you restore to a previous system configuration that includes spyware, it could be restored along with all of your other settings.

So you must be absolutely certain that you have a clean system before you use the following procedure to create a new system restore point.

If you are using Windows XP: 

1.  Click the “Start” button and the Start Menu appears.

2.  Right-click “My Computer.”  A popup menu appears.  Your "My Computer" icon might also be on your desktop.  

3.  Click the “View System Information” under System Tasks or “Properties” menu item.  The “System Properties” window appears.

4.  Click the “System Restore” tab at the top of the window.  The System Restore settings appear. Plus the System Restore can be found through the start, programs, accessories, system tools, then System Restore.  In System Restore Settings you’ll find the "Disable System Restore."

5.  Check the “Turn off System Restore on all drives”. 

6.  Click the “OK” button. 

7.  Windows will then ask if you are sure that you want to turn off System Restore.  Click the “Yes” button.  The “System Properties” window closes and your settings are saved.

If you are using Windows ME

1.  Right-click the “My Computer” icon on the desktop.  A popup menu appears. 

2. Click the “Properties” menu item.  The “System Properties” window appears. 

3. Click the “Performance” tab.  The performance settings appear. 

4.  Click “File System.” 

5.  Click the “Troubleshooting” tab. 

6.  Check the “Disable System Restore” check box. 

7.  Click the “OK” button to save your changes and close the “File System” window. 

8.  Click the “OK” button on the “System Properties” window. 

9.  Windows asks you if you want to restart your computer.  Click the “Yes” button.  Your computer shuts down, and when it starts back, System Restore is turned off.

When System Restore is turned off, all of the previous restore points are erased.  This means that there is no risk of restoring your computer to a state that includes spyware.  At this time, double-check to ensure that there is no spyware on your computer.  When you are confident that there is none, do the following: 

If you are using Windows XP: 

1.  Repeat Steps 1 – 4 of the Windows XP instructions above. 

2.  Uncheck the “Turn off System Restore on all drives” check box. 

3.  Click the “OK” button at the bottom of the window.  The “System Properties” window closes and System Restore is turned back on.

If you are using Windows Me: 

1.  Repeat Steps 1-5 of the Windows Me instructions above. 

2.  Uncheck the “Disable System Restore” check box. 

3.  Repeat Steps 7 - 9 of the Windows Me instructions above.  System Restore is now running again.

Stopping and restarting Windows System Restore with a clean computer erased all of the previous restore points and started a new one.  If your computer becomes contaminated with spyware from this point on, it is a simple matter to return to the last, known-good restore point to undo the installation of the spyware. 

If you are using Windows XP: 

1.   Click the “Start” button.  The Start Menu appears. 

2.   Click “Help and Support.”  The “Help and Support Center” window appears. 

3.  On the right side of the window is the “Pick a Task” heading.  Under this heading, click “Undo changes to your computer with System Restore.”  The System Restore Wizard starts. 

4.  Follow the prompts to pick a restore point and restore your system.

If you are using Windows Me: 

1.  Click the “Start” button.

2.  Point to “Programs.”  A list of folders and programs appears.

3.  Point to “Accessories.”  Another list of folders and programs appears. 

4.  Point to “System Tools.”  Once again, a list of programs appears. 

5.  Click “System Restore.”  The “System Restore” wizard appears. 

6.  Follow the instructions in the wizard to pick a restore point and restore your system. 

Although you must be very careful in keeping track of what’s happening with your system at all times, System Restore can be an effective tool against spyware.

<< Chapter 3.2 - No Tool Can Prevent Everything | Chapter 3.4 - Antivirus Protection and Firewalls >>