System restore should be disabled in Windows during the malware removal process to mitigate the chance that the malware infects the system's restore points and the system is reinfected when a store point is used.
The CompTIA Malware Removal Steps are:
Investigate and verify malware symptoms
Quarantine infected systems
Disable System Restore in Windows
Remediate infected systems
Schedule scans and run updates
Enable System Restore and create a restore point in Windows
Educate the end user
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is it important to disable System Restore during the malware removal process?
Open an interactive chat with Bash
What are the potential risks of not disabling System Restore when removing malware?
Open an interactive chat with Bash
What is a restore point and why is it created in Windows?