Threat Level:

I’ve been reading comments on the internet from people saying that they have removed fake anti-spyware using System Restore. System Restore is a Windows utility that takes note of all your system settings when a “restore point” is made. If you do something like delete a setting in the registry and that change causes problems; using a restore point created before you made the change will restore the deleted registry setting.

While it is tempting to run System Restore after being infected by fake anti-spyware, all it does is remove the registry settings that tell the fake anti-spyware to run. The fake anti-spyware files as well as system files the fake anti-spyware has altered are still there. This means whatever fake anti-spyware you are infected with could quickly reappear.

I work at a computer repair shop, and the company policy where I work is to turn off System Restore whenever we have an infected machine come in for repair. This deletes all the restore points that have been created and prevents the client from accidently using a restore point that was made while they were infected.

To disable System Restore:
1: Right Click My Computer > Select Properties
2: Click System Restore Settings tab
3: Tick Turn off System Restore on all Drives
4: Click Ok
5: When the confirmation message appears ,click Yes.

Once you have completely removed the infection, turn System Restore on again.
1: Start > Programs > Accessories > System Tools > System Restore.
2: A message will pop up asking if you want to turn system restore back on. Click Yes and follow the instructions to create a new restore point.

If you have any questions, please leave a comment.

Fake Antispyware – Don’t Use System Restore May Be Rogue Anti-Spyware

Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.

Often when you’re infected with rogue anti-spyware like Fake Antispyware – Don’t Use System Restore, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics

Typically, rogue anti-spyware such as Fake Antispyware – Don’t Use System Restore has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.

• False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
• Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
• High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
• Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
• Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.

Did Fake Antispyware – Don’t Use System Restore use these tactics to trick you into buying Fake Antispyware – Don’t Use System Restore?