can not use system restore

[Rae88]

One of our computers got infected with the "Microsoft anti-virus 2009"
software virus. It was installed. We found it, uninstalled it. Access
to edit the registry was denied but we finally got that fixed so we
can now get into the registry but we are still having problems. The
virus is still there.
When we try to use the internet it sometimes redirect our pages. It
will not let us run spybot and all our images are gone on internet
pages.

We tried to restore the system using system restore to restore to an
earlier time. But when we click that and then click "Next" nothing
will happen.

We then turned off system restore because I read that it will keep
restoring the virus if we run mcaffee again.

Any suggestions on what to do?

Rae

 

[Gerry]

Rae

Is this a commercial or home computer?

Antivirus 2009 needs to be manually removed. You need specialist help.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Rae88]

Rae

Is this a commercial or home computer?

Antivirus 2009 needs to be manually removed. You need specialist help.

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

home computer.
I uninstalled form add/remove programs but the problems continue

 

[Gerry]

Rae88

Do you have data files you need to back up?

A new install of Windows XP is one option. It can be quite complicated
getting all the the third party drivers and programme disks together.

The other way is to clean the computer and repair damage. This is also
quite involved.

Download and run HijackThis and post details to one of the forums list
below.. You may have to wait several days for a reply. Otherwise take
your computer to a small computer repair shop for cleaning. It's not
cheap.
http://us.trendmicro.com/us/product...vices/?WT.mc_id=2008HP_Home_FreeTools_9292008

Forums
http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement
and
the stickies first.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7
Source of List: Malke

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Ken Blake, MVP]

home computer.
I uninstalled form add/remove programs but the problems continue

Sure they continue. Removing malware is never anywhere near as simple
or easy as removing it like valid programs by using Add/Remove
Programs.

 

[Rae88]

Sure they continue. Removing malware is never anywhere near as simple
or easy as removing it like valid programs by using Add/Remove
Programs.

Well, thanks for that very informative and helpful comment!

 

[smlunatick]

Well, thanks for that very informative and helpful comment!

Sound like you have still more "infestation" of some type of spyware,
beside the MS A/V 2009 (which is not from Microsoft.) I would suggest
you try to use other spyware removal tools such as Malwarebytes or
SuperAntiSpyware.

 

[Gerry]

Rae88

I could have included this earlier:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Rae88]

Sound like you have still more "infestation" of some type of spyware,
beside the MS A/V 2009 (which is not from Microsoft.)  I would suggest
you try to use other spyware removal tools such as Malwarebytes or
SuperAntiSpyware.

Yeah. Its a real demon. I can't seem to find the head to cut it off.
I've deleted a lot of files from the registry and windows and
documents and settings, local settings, and then it will pop up again
right back. There are many file names. Found another one called msas
2009. winlggn.exe, there's too many to remember and I don't have my
list right here.

Malwarebytes will NOT install. Rather, I got it *installed* but it
will NOT run. Spy bot will NOT run. Cyber Cop was the only new program
that would install AND run. It detects it but can't get rid of it. At
least it alerts me each time it's reproduced itself again and tries to
do something. IT will then block it. But I can''t log into any support
sites, as the internet will only run non support sites. All the
graphics in McAfee (which is freakin USELESS!!) are disabled.

Its a nightmare. I'm thinking the only way is a reformat. I've never
seen such a viscous virus. It just keeps reproducing itself and I have
system restore turned OFF. There are some many .exe files, I just
can't catch them all before they've reproduced again!

Rae

 

[Ken Blake, MVP]

Yeah. Its a real demon. I can't seem to find the head to cut it off.
I've deleted a lot of files from the registry and windows and
documents and settings, local settings, and then it will pop up again
right back. There are many file names. Found another one called msas
2009. winlggn.exe, there's too many to remember and I don't have my
list right here.

Malwarebytes will NOT install. Rather, I got it *installed* but it
will NOT run. Spy bot will NOT run. Cyber Cop was the only new program
that would install AND run. It detects it but can't get rid of it. At
least it alerts me each time it's reproduced itself again and tries to
do something. IT will then block it. But I can''t log into any support
sites, as the internet will only run non support sites. All the
graphics in McAfee (which is freakin USELESS!!) are disabled.

Its a nightmare. I'm thinking the only way is a reformat. I've never
seen such a viscous virus. It just keeps reproducing itself and I have
system restore turned OFF. There are some many .exe files, I just
can't catch them all before they've reproduced again!

You can almost never get rid of malware the way you are trying to do
it. You *need* software like Malwarebytes to accomplish this.

Although many people think of malware as something to get rid of after
getting infected, that thought is exactly backwards. What you need to
do is *prevent* infection in the first place. Malware can cause
serious damage to your installation, making it nearly impossible to
correct the problems after the fact. It sounds like you are in that
situation, and what you very likely need to do is to reformat and
reinstall Windows from scratch.

 

[Mick Murphy]

Try to do all the work, Install update, scan the Security Programs,) in "Safe
Mode with Networking"

Scan with Malwarebytes 1st, the Spybot Search & destroy, than your AV.
All info below.
You can install them from Flash Drive in SM with N, and then get your
updates for them, as you are connected to the Net

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.

 

[Rae88]

Try to do all the work, Install update, scan the Security Programs,) in "Safe
Mode with Networking"

Scan with Malwarebytes 1st, the Spybot Search & destroy, than your AV.
All info below.
You can install them from Flash Drive in SM with N, and then get your
updates for them, as you are connected to the Net

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.

I need to make a correction. I had said that Cyber cop was the only
one that could run. I mean "Counter Spy". It did more than the rest
but still couldn't defeat it.

I finally reformatted. I was afraid if it went on much longer, it
could damage my hardware. That was a viscous program.
I'm sure there's some special karma in store for the guy that wrote
that evil program!

My husband actually downloaded it on purpose when he was half asleep
because he'd hear some knews about it and wanted to protect his
computer from it. He'd heard or read about some recommendation to get
to guard against it but only remembered the name "Microsoft anti virus
2009" and thought that was the program he needed to download!

He got a good earful from me. Bet he doesn't do that again! Just goes
to show, a *little* bit of knowledge can be very dangerous!

Sometimes reformatting is just the quickest and cleanest solution.

Anyone have any opinion about VIPRE ?

Rae

 

[Ray]

One of our computers got infected with the "Microsoft anti-virus 2009"
software virus. It was installed. We found it, uninstalled it. Access
to edit the registry was denied but we finally got that fixed so we
can now get into the registry but we are still having problems. The
virus is still there.
When we try to use the internet it sometimes redirect our pages. It
will not let us run spybot and all our images are gone on internet
pages.

We tried to restore the system using system restore to restore to an
earlier time. But when we click that and then click "Next" nothing
will happen.

We then turned off system restore because I read that it will keep
restoring the virus if we run mcaffee again.

Any suggestions on what to do?

Rae

 

[Ray]

One of our computers got infected with the "Microsoft anti-virus 2009"
software virus. It was installed. We found it, uninstalled it. Access
to edit the registry was denied but we finally got that fixed so we
can now get into the registry but we are still having problems. The
virus is still there.
When we try to use the internet it sometimes redirect our pages. It
will not let us run spybot and all our images are gone on internet
pages.

We tried to restore the system using system restore to restore to an
earlier time. But when we click that and then click "Next" nothing
will happen.

We then turned off system restore because I read that it will keep
restoring the virus if we run mcaffee again.

Any suggestions on what to do?

Rae

Rae

Sorry but I'm having the same problem. Did you find out anything about
using system restore? Mine won't work either as I've also gotten the dreaded
System Guard 2009 and it seems to of locked the system so you can't use
System Restore. Did you find anything out on it? I've tried everything and
I can't get anything to remove this damn thing. Thx!

 

[Ray]

One of our computers got infected with the "Microsoft anti-virus 2009"
software virus. It was installed. We found it, uninstalled it. Access
to edit the registry was denied but we finally got that fixed so we
can now get into the registry but we are still having problems. The
virus is still there.
When we try to use the internet it sometimes redirect our pages. It
will not let us run spybot and all our images are gone on internet
pages.

We tried to restore the system using system restore to restore to an
earlier time. But when we click that and then click "Next" nothing
will happen.

We then turned off system restore because I read that it will keep
restoring the virus if we run mcaffee again.

Any suggestions on what to do?

Rae

 

[Ray Luca]

Rae

Sorry but I'm having the same problem. Did you find out anything about
using system restore? Mine won't work either as I've also gotten the dreaded
System Guard 2009 and it seems to of locked the system so you can't use
System Restore. Did you find anything out on it? I've tried everything and
I can't get anything to remove this damn thing. Thx!

Read all posts from "Rae". She ended up formatting and reinstalling.

 

[Ray]

I need to make a correction. I had said that Cyber cop was the only
one that could run. I mean "Counter Spy". It did more than the rest
but still couldn't defeat it.

I finally reformatted. I was afraid if it went on much longer, it
could damage my hardware. That was a viscous program.
I'm sure there's some special karma in store for the guy that wrote
that evil program!

My husband actually downloaded it on purpose when he was half asleep
because he'd hear some knews about it and wanted to protect his
computer from it. He'd heard or read about some recommendation to get
to guard against it but only remembered the name "Microsoft anti virus
2009" and thought that was the program he needed to download!

He got a good earful from me. Bet he doesn't do that again! Just goes
to show, a *little* bit of knowledge can be very dangerous!

Sometimes reformatting is just the quickest and cleanest solution.

Anyone have any opinion about VIPRE ?

Rae

Rae,

Just read your last post and it sounds exactly like all the time I've put
into trying to destroy this vicious System Guard 2009. It acts just like
your virus. It just keeps duplicating itself. Unbelieveable no matter what
you do to destroy it. It will win every time. Never seen such a pain. it's
a very well written program in a matter of speaking. I'd love to get my
hands on the person that wrote this program grrrrrrrrr!!!!!!!!!!!!!!!!!