Windows Forum

Ask something
Discussion Locked

XP, P4, No restore point,

0 helpful
6 replies

by answerman

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The unit is a Dell P4 running XP Home. A year ago I removed a virus that infected the restore point calendar, by changing the system BIOS date, and winding it forward again.

Now a new boot level virus has done the same thing. This one will not remove totally. Home page is permanently set, no matter what you switch it to, and restore points are gone again.

Any suggestions, since unless you demand it, you do not get the original XP Install CD from Dell. I can't restore a restore, when there is nothing before the restore (sorry for the poetry).

6 replies

by mikex

Go into SAfe mode and look for the virus in start=>run=>msconfig

then check win.ini and startup for suspicious programs and delete them

Check in google for a registry settings for a home page change in IE

by warrtech78

What is your home page set to? You could have the cool web search browser hijacker too, if so do a search for CWShredder or pick up a copy of Maximum PC, I believe they have CWShredder on the disks that come with the mag.

by wlbowers

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software

ProcInfo:
http://www.snapfiles.com/get/procinfo.html

ProcInfo provides you with a quick overview of all currently running processes and displays detailed information for a lot of them.

Spybot: Cootie Remover
http://tinyurl.com/ziar

Ad-Aware: Cootie Remover
http://tinyurl.com/tek5

Stinger: Virus Specific Remover
http://vil.nai.com/vil/stinger/
This item will not update through the program. You have to download the new version.

CWshredder: Trojan and Toolbar Cootie Remover
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

There are programs that will provide you with information about what is running on startup or what is loaded currently.

StartUpList:
http://www.mac-net.com/576482.page

StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This
This program is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.

Winaudit
http://www.pxserver.com/WinAudit.htm

Winaudit does an extensive audit of you computer. Complete list of installed software, dll, and other good stuff.

Aida32
http://www.webattack.com/get/aida32.shtml

Everest (This replaced Aida32)
http://www.lavalys.com/products.php?lang=en

Everest used to be Aida32. Good system information.

Run Your Antivirus again

Download and install all OS updates.

I have had to boot into safe mode and run the removal programs.

Good Luck Lee

This discussion is closed to new replies.