[Tha Sneak]

When to Recommend a Reformat/Reinstall Due to Malware Infection

• The system is beyond repair.
  


• The user has a reliable backup and prefers a fresh, clean start.
  


• Ransomware has encrypted files, but backups exist to restore data after a reformat.
  


• The system is infected with a polymorphic file infector.
  


• The user wants absolute certainty that no malware remnants remain.
  

Additional Considerations:

• Always back up clean files before proceeding except when infected with a polymorphic file infector.
  


• Use an external bootable tool before deciding on reformat or reinstall.
  


• If UEFI/BIOS firmware is suspected to be infected, reset firmware settings and update it.
  


• If malware has spread to external drives, scan and clean them before reconnecting to a reformatted or reinstalled system.
  

[DramaKing]

👍 Seems like reformatting and reinstalling is like a default course of action for an infection. Good to have some guidelines on when to recommend such action.

Also +1 for CMOS clear and update. It's good to remind people that Secure Boot vulnerabilities get patched, and updating the UEFI will not only wipe out a firmware rootkit but prevent the system from booting if something in the boot sequence has been tampered with. 'Course it's also good to check that Secure Boot is enabled.

[Bastille]

I remember how reinstalling Windows 7 was a pain in the ass back in the days, especially for beginners (like I was at this time)

It was better since Windows 8 and definitely user-friendly since Windows 10

[DramaKing]

I remember how reinstalling Windows 7 was a pain in the ass back in the days, especially for beginners (like I was at this time)

It was better since Windows 8 and definitely user-friendly since Windows 10

Maybe so, but the last time either of my parents did it was probably XP.

[Novo]

just a note, never recommend a user to reset windows thru the built in reinstall tool. Only thru a external usb which you overwrite from a different machine.

[Pr0m3th3us]

just a note, never recommend a user to reset windows thru the built in reinstall tool. Only thru a external usb which you overwrite from a different machine.

Whys that? I did the reset a couple months ago on my shop compy and it worked fine. Basically it was suck on windows loading splash screen. I didn't loose anything that i noticed. Seems like it just fixed something in the registry.

[Novo]

Whys that? I did the reset a couple months ago on my shop compy and it worked fine. Basically it was suck on windows loading splash screen. I didn't loose anything that i noticed. Seems like it just fixed something in the registry.

Malware can persist when using the built in windows tool, in specific cases. It works, just not 100% recommended.

[Pr0m3th3us]

Malware can persist when using the built in windows tool, in specific cases. It works, just not 100% recommended.

Ahhh gotcha, ok good to know.

[Novo]

Ahhh gotcha, ok good to know.

If you are 100% sure your pc does not contain malware and you are just feeling it's time to reset, then feel free to use the built in windows one, but that's only if you are like absolutely sure.