Vista test question

[spiderlucci]

hi guys, I'm studying for the 70-620 exam and on one of the questions it said:

Your Windows Vista computer has been hit by a virus. The damage is localized to a particular application that you installed a week ago. You want to return the computer to the state it was in prior to the installation of the application. Which of the following techniques could you employ?

The correct answer was: Boot off the installation media and perform a system restore.

I always thought the virus would still be there.... however in the pass when i got hit with one and try this way, just for giggles... it seem to work.

could there be a error in this book
it is called MCTS exam 70-620 Configuring Windows Vista Client by lan McLean and Orin Thomas

Thanks again! spider

[computeruler]

Defiantly not the best way to go about doing it that's for sure.

[BC_Programmer]

give the parameters, that would make sense. It says the infection was localized to an application- so it would work.

[Broni]

I think, it's wrong....twice.
First of all, System Restore deals with system files only, not with application files, so System Restore won't uninstall application in question. Most likely, System Restore will make the program un-usable, because during installation some files will be installed into system directory, and those will be missing after using System Restore.
However, most other files from the application in question will remain in tact.
Secondly, I've never seen any malware, which "is localized to a particular application". Unless, it was written by really lousy malware creator.

In general, System Restore, in 99% cases, won't remove an infection

[BC_Programmer]

I think the second part would be hard to establish anyway. How could anybody be sure it was localized to that particular application?

[Broni]

It's possible...

[BC_Programmer]

It's possible...

true, but not everybody is a Gypsy. Although I've heard you can rent them through "Rent-a-Gypsy" and even buy them at "Gypsies-r-us".

[Broni]

not everybody is a Gypsy

You don't have to be.
I'm Polish, and I have one.
Also, patio, who is Korean (as we found out, lately), has one, too

[BC_Programmer]

not everybody is a Gypsy

You don't have to be.
I'm Polish, and I have one.
Also, patio, who is Korean (as we found out, lately), has one, too

do you rent or own?


that gypsy, you psychic...

[Broni]

I bought one, long, long time ago.
When I was a little, and I was misbehaving, my parents were scaring me with a Gypsy lady. One day she came, and I made a deal with her. I paid her well for one of her crystal balls, and she left me alone

[Geek-9pm]

Code: [Select]

hi guys, I'm studying for the 70-620 exam and on one of the questions it said:

Your Windows Vista computer has been hit by a virus.
The damage is localized to a particular application that
you installed a week ago. You want to return the computer
to the state it was in prior to the installation of the application.
Which of the following techniques could you employ?

The correct answer was:
Boot off the installation media and perform a system restore.
The answer in the book is the answer in the book and the book is about the
70-620 exam and the objective is to pass the exam even it you never learn anything.   

Besides, the answer given is appropriate to the stipulations of the question.
If you think the answer is wrong, then the question must be wrong.

[spacecat9]

funny just had this argument the book is the right first step and it does remove applications as well. 

[Carbon Dudeoxide]

I've had experience with System Restore uninstalling programs installed since the restore point.

[spacecat9]

yeah well did mean to annoy any one with my other blog. i system restored yesterday after getting a false scan virus for ivpro.exe and virus is now gone.

so it works

my 3 steps
1. system restore
2. virus scan
3. registry cleaner

it works id say 90% of the time but you need to act as soon as infect rather than letting it spread. there honest statistics from a guy who disinfected machines for a living. me.

and when that doesent work i do what you guys do get a report and a little research on the bug

[Carbon Dudeoxide]

So....That's one out of, what, a billion viruses?

And it's a false positive, so it wasn't a virus at all?