System Files Infected

T

The Learner

While uninstalling Comodo (an app from Cnet) , my system stalled. Had to
shut down using the On/Off button. After trying to reboot, I found I was
infected and my system tried to fix the problems - but couldn't. I use
ERUNT and have a Raid 1 backup system. I was able to get into a prompt
mode and used ERUNT to get my system going. I used my backup to restore
everything back to a time when I didn't have Comodo installed. The
system booted. Then, I used Avira Free Version but it found five
unsigned system files. I tried System File Recovery - but I have an HP
Pavilion laptop which does not have an original Vista disk. It only has
a partition which is supposed to restore the system back to it's store
bought condition. I don't want to do this and believe if I had the I386
folder, I could used System File Checker to replace these unsigned files.
NOTE: I also ran my backup on the partition that is used for Restore
(and it found files that (I don't think) should have been there. In any
case, the backup corrected that partition since I only ran two backups of
it since I've owned the laptop. Bottom line: I need a way to fix those
five unsigned system files. Please help.......
 
T

The Learner

While uninstalling Comodo (an app from Cnet) , my system stalled. Had to
shut down using the On/Off button. After trying to reboot, I found I was
infected and my system tried to fix the problems - but couldn't. I use
ERUNT and have a Raid 1 backup system. I was able to get into a prompt
mode and used ERUNT to get my system going. I used my backup to restore
everything back to a time when I didn't have Comodo installed. The
system booted. Then, I used Avira Free Version but it found five
unsigned system files. I tried System File Recovery - but I have an HP
Pavilion laptop which does not have an original Vista disk. It only has
a partition which is supposed to restore the system back to it's store
bought condition. I don't want to do this and believe if I had the I386
folder, I could used System File Checker to replace these unsigned files.
NOTE: I also ran my backup on the partition that is used for Restore
(and it found files that (I don't think) should have been there. In any
case, the backup corrected that partition since I only ran two backups of
it since I've owned the laptop. Bottom line: I need a way to fix those
five unsigned system files. Please help.......
Click to expand...

Specifically, the errors I get from Avira Free are:

HEUR/Modified.system file (for the folloowing five files):
svchost.exe
wsock_32.dll
w32_32.dll
csrss.exe
alg.exe
 
G

gufus

Hello, The!

You wrote on Sat, 27 Mar 2010 21:00:53 -0400:

??>> laptop. Bottom line: I need a way to fix those five unsigned system
??>> files. Please help.......

TL> Specifically, the errors I get from Avira Free are:

Let Avira delete them, then (maybe) replace them from your original OS CD.

Worth a cry. :) or try.
 
D

Dave Cohen

Hello, The!

You wrote on Sat, 27 Mar 2010 21:00:53 -0400:

??>> laptop. Bottom line: I need a way to fix those five unsigned system
??>> files. Please help.......

TL> Specifically, the errors I get from Avira Free are:

Let Avira delete them, then (maybe) replace them from your original OS CD.

Worth a cry. :) or try.
Click to expand...
He probably doesn't have a cd, a restore partition which is probably an
image.
I swear by imaging programs, first thing I did with my laptop was make
my own image.
 
G

gufus

Hello, Dave!

You wrote on Mon, 29 Mar 2010 21:34:45 -0400:

DC> I swear by imaging programs, first thing I did with my laptop was make
DC> my own image.

I never did setup any imaging programs.

Can you suggest a few /good/ ones?
 
D

Dustin Cook

Hello, Dave!

You wrote on Mon, 29 Mar 2010 21:34:45 -0400:

DC> I swear by imaging programs, first thing I did with my laptop was
make DC> my own image.

I never did setup any imaging programs.

Can you suggest a few /good/ ones?
Click to expand...

Acronis TrueImage is probably one of the defacto standards now. I've always
been a fan of Norton Ghost myself.
 
D

David H. Lipman

From: "Dustin Cook" <[email protected]>



| Acronis TrueImage is probably one of the defacto standards now. I've always
| been a fan of Norton Ghost myself.


Symantec Ghost -- The only Symantec product I swear by and not swear at!
 
F

FromTheRafters

gufus said:
Hello, Dave!

You wrote on Mon, 29 Mar 2010 21:34:45 -0400:

DC> I swear by imaging programs, first thing I did with my laptop was
make
DC> my own image.

I never did setup any imaging programs.

Can you suggest a few /good/ ones?
Click to expand...

I discovered that having my Seagate or Maxtor drives entitles me to a
free imaging program (powered by Acronis). It is not as versatile as the
full blown TrueImage program, but it suffices for making backups. The
one I have is called MaxBlast, but they may have newer offerings and
other drive manufacturers may have offerings also.
 
G

gufus

News: alt.comp.virus,alt.comp.anti-virus [Thu, 01 Apr 2010
03:04:12 GMT @169]
From: Dustin Cook [DC] <[email protected]> *

Subject: Re: System Files Infected

Hello, Dustin!

You wrote on Thu, 01 Apr 2010 03:04:12 GMT:

Acronis TrueImage is probably one of the defacto standards now. I've
always
been a fan of Norton Ghost myself.

Thanks
 
G

gufus

Hello, David!

You wrote on Wed, 31 Mar 2010 23:31:01 -0400:

DHL> Symantec Ghost -- The only Symantec product I swear by and not swear
DHL> at!

I sware at Symantec <.>
 
D

David H. Lipman

From: "gufus" <[email protected]>

| Hello, David!

| You wrote on Wed, 31 Mar 2010 23:31:01 -0400:

DHL>> Symantec Ghost -- The only Symantec product I swear by and not swear
DHL>> at!

| I sware at Symantec <.>

Tag -- You're it.

USB DOS driver and DOS CONFIG.SYS instructions.
 
G

gufus

Hello, David!

You wrote on Thu, 1 Apr 2010 18:09:44 -0400:

DHL> Tag -- You're it.

Hehe... I'll go jump on my server, I'm away on my notebook right now.

DHL> USB DOS driver and DOS CONFIG.SYS instructions.

:)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Where is Vista Folder I386 9
Is System Restore Being Subverted and Used by Current Malware? 2
BearWare Comprehensive Security Plan 32
BearWare Comprehensive Security Plan 0
Windows 8 System Restore turned off and 'Turn on system protection' greyed out 1
Is "sync" what I want? 11
Virus Disabled System Restore & Windows Security 31
Re: What's "Generic volume shadow copy"? 3

Top