system restore not working after fakealert-ck malware infection

[saints1]

After scanning and cleaning computer that was infected with
troj.fakealert-ck, the system restore function will not operate. I shut down
the system restore , as advised by McAfee, before running the scan. I able to
find and delete the virus without much of a problem. After restarting the
restore function we lost all save points, as expected, but I can not create a
new restore point now. Also, I have the restore system turned on, but no save
points are being created automatically. I am hoping for an easy and helpful
guide to help repair the problem. Thanks in advance for any ideas.

 

[ColTom2]

Lets take a look and see if it turned off your System Restore Service by
going to Start>Control Panel>Administrative Tools>Services. Scroll down to
System Restore Service and see if it shows Status as "Started" and Startup
Type "Automatic".

If it does not indicate the above then Right click on System Restore
Service>Properties> and change settings accordingly to match the above. Be
sure and click on Apply and then OK.

Please post back your findings.

ColTom2


After scanning and cleaning computer that was infected with
troj.fakealert-ck, the system restore function will not operate. I shut down
the system restore , as advised by McAfee, before running the scan. I able
to
find and delete the virus without much of a problem. After restarting the
restore function we lost all save points, as expected, but I can not create
a
new restore point now. Also, I have the restore system turned on, but no
save
points are being created automatically. I am hoping for an easy and helpful
guide to help repair the problem. Thanks in advance for any ideas.

 

[John Inzer]

After scanning and cleaning computer that was infected with
troj.fakealert-ck, the system restore function will not operate. I
shut down the system restore , as advised by McAfee, before running
the scan. I able to find and delete the virus without much of a
problem. After restarting the restore function we lost all save
points, as expected, but I can not create a new restore point now.
Also, I have the restore system turned on, but no save points are
being created automatically. I am hoping for an easy and helpful
guide to help repair the problem. Thanks in advance for any ideas.

========================================
Maybe the following articles will lead to some ideas:

(302796) How to troubleshoot the System
Restore tool in Windows XP
http://support.microsoft.com/?kbid=302796

(841568) The System Restore service does
not work correctly in Windows XP
http://support.microsoft.com/?kbid=841568

--

J. Inzer MS-MVP
Digital Media Experience

Notice
This is not tech support
I am a volunteer

Solutions that work for
me may not work for you

Proceed at your own risk

 

[saints1]

Thanks for responding, but thankfully (I think) we got it. After performing a
sfc scan, we discovered that our dllcache folder had been corrupted. Windows
kept telling us that we needed the XP Professional SP2 CD 3, but we only have
a Dell recovery disc. It wouldn't work with that, so we thought for a bit. We
remembered we created a backup hard drive when we first got the PC, and that
it was a fresh, uncorrupted copy of Windows. So we went in to the backup HD
and retrieved the dllcache folder from there and copied and replaced it over
to our main HD. We restarted the computer and VOILA! Sys Restore works.
For all who happen to read this, remember: ALWAYS have a backup copy of
EVERYTHING.
Thanks again for all help.

 

[PA Bear [MS MVP]]

Can you reach & update via Windows Update website? ($10 says you can't &
you have much more work to do.)

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[ColTom2]

Glad that everything worked out for you!

ColTom2


Thanks for responding, but thankfully (I think) we got it. After performing
a
sfc scan, we discovered that our dllcache folder had been corrupted. Windows
kept telling us that we needed the XP Professional SP2 CD 3, but we only
have
a Dell recovery disc. It wouldn't work with that, so we thought for a bit.
We
remembered we created a backup hard drive when we first got the PC, and that
it was a fresh, uncorrupted copy of Windows. So we went in to the backup HD
and retrieved the dllcache folder from there and copied and replaced it over
to our main HD. We restarted the computer and VOILA! Sys Restore works.
For all who happen to read this, remember: ALWAYS have a backup copy of
EVERYTHING.
Thanks again for all help.

 

[Twayne]

Thanks for responding, but thankfully (I think) we got it. After
performing a sfc scan, we discovered that our dllcache folder had
been corrupted. Windows kept telling us that we needed the XP
Professional SP2 CD 3, but we only have a Dell recovery disc. It
wouldn't work with that, so we thought for a bit. We remembered we
created a backup hard drive when we first got the PC, and that it was
a fresh, uncorrupted copy of Windows. So we went in to the backup HD
and retrieved the dllcache folder from there and copied and replaced
it over to our main HD. We restarted the computer and VOILA! Sys
Restore works.
For all who happen to read this, remember: ALWAYS have a backup copy
of EVERYTHING.
Thanks again for all help

Sage advice for all. Whether it's another drive, a disk image, or even
just an ntbackup.exe arcvhive, they can all be lifesavers and save many
hours of rebuild time.

Twayne`