cleaning neighbor's computer, problems with Sys Restore

cleaning neighbor's computer, problems with Sys Restore

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
cleaning neighbor's computer, problems with Sys Restore tech-guy 02-10-2007
Posted by tech-guy on February 10, 2007, 2:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all.
I'm currently working on cleaning my neighbor's PC. She's running a
Windows Me box that she received from her grandmother, and it was
loaded with viruses and spyware etc. I've just about got all of them
using David Lipman's tool, AdAware, superantispyware, Spybot S&D, and
HijackThis. However, I know there's malware (either dormant or
active) hiding in the restore folder. To complicate matters, I can't
seem to access the restore folder using rstrui.exe to purge restore
points. I've attempted to run the minimalist shell progman.exe on a
boot to try getting to the system restore counsel, but still can't get
the window to pop up. I think the program is somehow corrupt. So, is
there a way I can download or somehow fix the system restore counsel
or purge from commandline? Thanks in advance for all your help.

Tech-guy

Posted by David H. Lipman on February 10, 2007, 3:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hi all.
| I'm currently working on cleaning my neighbor's PC. She's running a
| Windows Me box that she received from her grandmother, and it was
| loaded with viruses and spyware etc. I've just about got all of them
| using David Lipman's tool, AdAware, superantispyware, Spybot S&D, and
| HijackThis. However, I know there's malware (either dormant or
| active) hiding in the restore folder. To complicate matters, I can't
| seem to access the restore folder using rstrui.exe to purge restore
| points. I've attempted to run the minimalist shell progman.exe on a
| boot to try getting to the system restore counsel, but still can't get
| the window to pop up. I think the program is somehow corrupt. So, is
| there a way I can download or somehow fix the system restore counsel
| or purge from commandline? Thanks in advance for all your help.
|
| Tech-guy

You can do this manually.

It has been a while so I hope I can remember the instructions. :-)

Create a WinME Boot Disk or use any other MS/PC/DR-DOS Boot Disk.

Boot from the DOS disk.

attrib -r -s -h c:\_RESTORE
rename c:\_RESTORE c:\RESTORE.old

Reboot the PC.

In Windows delete the folder; c:\RESTORE.old


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by tech-guy on February 10, 2007, 8:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
on 10 Feb 2007, something possessed David H. Lipman to write:

>
>| Hi all.
>| I'm currently working on cleaning my neighbor's PC. She's running a
>| Windows Me box that she received from her grandmother, and it was
>| loaded with viruses and spyware etc. I've just about got all of them
>| using David Lipman's tool, AdAware, superantispyware, Spybot S&D, and
>| HijackThis. However, I know there's malware (either dormant or
>| active) hiding in the restore folder. To complicate matters, I can't
>| seem to access the restore folder using rstrui.exe to purge restore
>| points. I've attempted to run the minimalist shell progman.exe on a
>| boot to try getting to the system restore counsel, but still can't get
>| the window to pop up. I think the program is somehow corrupt. So, is
>| there a way I can download or somehow fix the system restore counsel
>| or purge from commandline? Thanks in advance for all your help.
>|
>| Tech-guy
>
> You can do this manually.
>
> It has been a while so I hope I can remember the instructions. :-)
>
> Create a WinME Boot Disk or use any other MS/PC/DR-DOS Boot Disk.
>
> Boot from the DOS disk.
>
> attrib -r -s -h c:\_RESTORE
> rename c:\_RESTORE c:\RESTORE.old
>
> Reboot the PC.
>
> In Windows delete the folder; c:\RESTORE.old
>
>

Thanks. I'll try this tomorrow and let you know how it turns out.

Tech-guy

Similar ThreadsPosted
Cleaning up a 2nd Computer w/Virus Problems? August 26, 2005, 6:59 pm
Need help deep cleaning viruses from system December 2, 2007, 4:47 am
Can Updates be transfered from computer to computer. June 14, 2007, 5:43 am
System Restore File is a PUP August 1, 2006, 2:05 am
"Restore my Active Desktop" doesn't work June 26, 2005, 10:53 pm
restore after a file has been cleaned? msconf.exe December 7, 2005, 9:05 pm
good reg file to restore desktop? August 29, 2008, 9:46 pm
Tell users how to restore files removed by MRT October 7, 2008, 12:06 pm
MWAV, infected _restore files, and System Restore? January 3, 2006, 11:55 pm
Re: Lost System Restore Points, Management Services, Internet Connection, Firewall icon in Sys Tray, Sound June 30, 2005, 5:35 am

The site map in XML format XML site map

Contact Us | Privacy Policy