About System Restore Infection

From: Ruab (Ruab_at_discussions.microsoft.com)
Date: 06/29/04


Date: Tue, 29 Jun 2004 08:49:01 -0700


 Hello Microsoft Community,

I am using WinXP Pro, Last week my PC got infected by Win32.MSBlaster worms's version's .a,.b,.f,.d&.worm. I removed it using Norton Antivirus, But my system got infected again & again, My intranet was disabled, when it worked my Norton AntiVirus given me warnings about 28 times that my system has been infected, I scanned & in total it found more thant 33 viruses, When I read the articals on net It said it edits "hosts" file in System32 folder, & adds more servers containing. So I reinstalled Win but system was still infected, & after reading articals I got to conclusion that this was because of System restore folder. Then I had to format whole disk. After doing all stuff, I installed each & every update on MS update site. & as recomended by Symantec I turned of my system resotre. Regarding to this problem I have some questions also--

1>Is my PC now finally safe ( I hav NAV & i update it in every 3 days)
2> I know that patches contains DCOM RPC vulnerability patches but does It contain any code which will not allow Viruses to edit hosts file in system32 folder.
3> Does any patch allow viruses to clean viruses in System Restore folder.
4>What exactly inbuilt firewall do to protect PC from Viruses, because like firewalls like zone alarm it does not ask that "Do you want to grant A particular software Internet access"

 I really hope that MS will soon resolve the issues,

Thanks.