System Restore error

[Kari]

My son picked up a Trojan, once I had cleaned it I am now unable to use
system restore. I am using Windows XP. I have looked at past questions and
have tried to restore the service and I get error messages that service does
not exist. I get the error message "System Restore is not able to protect
your computer" it goes on to say restart, but that has no effect it
continues to sa system restore is not able to rotect your computer" --
Kari

 

[Rich Barry]

Kari, see if this site helps
http://www.5starsupport.com/faq/xp-system-restore.htm#1-17

 

[Twayne]

My son picked up a Trojan, once I had cleaned it I am now unable to

use system restore. I am using Windows XP. I have looked at past
questions and have tried to restore the service and I get error
messages that service does not exist. I get the error message
"System Restore is not able to protect your computer" it goes on to
say restart, but that has no effect it continues to sa system restore
is not able to rotect your computer" -- Kari

See if t his helps. I've forgotten the source but it came from a
Microsoft group some time ago:

--------------
How do I reinstall System Restore?

Warning: This will delete ALL existing restore points.

Go to Start - Run and type %Windir%\INF then press enter.

In Windows Explorer go to Tools - Folder Options - View Tab and uncheck
"Hide extensions for known file types".

Find the sr.inf file, right click on it and select Install.

*OR* simply type or paste the following command into the Start - Run
box and press enter.

rundll32.exe advpack.dll,LaunchINFSection C:\Windows\Inf\sr.inf

If the Files Needed dialog box appears,
click Browse and point to the *i386* folder on the Windows XP CD *or*
to the i386 folder on the hard drive, if it exists, or
for systems updated with the Service Pack 2 CD *OR* Download from
Microsoft,
browse to the C:\Windows\ServicePackFiles\i386 folder.
--------------

*Note:*
For i386, point here first:
C:\WINDOWS\ServicePackFiles\i386

If no luck,then point to it here:
C:\WINDOWS\Driver Cache\i386

They may or may not be the same: The first will be the more current, the
second not as current, but still useful.

Third choice would be to find i386 on your Windows XP CD if you have
one.

HTH

Twayne

 

[Peter Foldes]

See the following

http://xphelpandsupport.mvps.org/how_do_i_reinstall_system_resto.htm

 

[Kayman]

My son picked up a Trojan, once I had cleaned it

Are you really sure?

I am now unable to use system restore.
I am using Windows XP.

Got SP3 yet?
Read all prerequisites for a successful installation
http://msmvps.com/blogs/harrywaldro...requisites-for-a-successful-installation.aspx

Why Service Packs are Better Than Patches.
http://www.microsoft.com/technet/archive/community/columns/security/essays/srvpatch.mspx?mfr=true

I have looked at past questions and have tried to restore the service
and I get error messages that service does not exist. I get the error
message "System Restore is not able to protect your computer"

Maybe this'll be of any help:
http://www.windowsbbs.com/windows-xp/63416-system-restore-not-able-protect-your-computer.html

Here are some troubleshooting steps to take when System Restore fails to
restore:
http://bertk.mvps.org/html/srfail.html

System Restore for Windows XP
http://www.kellys-korner-xp.com/xp_restore.htm

How to reinstall System Restore in WinXP
http://bertk.mvps.org/html/reinstall.html

it goes on to say restart, but that has no effect it
continues to sa system restore is not able to rotect your computer" --

Check this also:
Click 'Start' then click 'Run...' then type (or copy/paste) "services.msc"
(w/out quotation marks) into the box, then click the 'OK' button.

Scroll down to 'System Restore Service' and ensure the Startup tyype is set
to 'Automatic' and the Service status has 'Started.

In addition you may wish to double check if the tojan issue is resolved.

1.Clear the (IE) temporary Internet files and the history cache.
Click 'Start' and then click 'Run'... then type (or copy/paste)
"inetcpl.cpl" (w/out quotation marks) into the box, then click the 'OK'
button.
In Internet Properties panel 'General' tab, under 'Browsing history', click
'Delete...'button, in 'Delete Browsing History' panel, click the 'Delete
all...' button then place a checkmark into the box beside 'Also delete
files and settings stored by add-ons', Click 'Yes' and exit the Internet
Properties panel by clicking the 'OK' button.

2.Clean HDD
Click 'Start' and then click 'Run...' then type (or copy/paste) "cleanmgr"
(w/out quotation marks into the box, then click the 'OK' button. Select
your drive
(presumably WinXP (C and click OK.

3.Download/execute:
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

4.Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

Please, do not post HJT logs to this newsgroup.
Fora where you can get expert advice for HiJack This! (HJT) logs.

http://www.thespykiller.co.uk/index.php?board=3.0
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.tomcoyote.org/index.php?showforum=27
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29

NOTE:
Registration is required in any of the above mentioned fora before posting
a HJT log and read the 'stickies' (instructions/guidelines) for the
respective HJT forum.

5.Routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html

Additional references:
How to use Reset Internet Explorer Settings (RIES)
http://support.microsoft.com/kb/923737
Read: "What you must know"
Applies to: Windows Internet Explorer 7 for Windows XP and
Windows Internet Explorer 7 in Windows Vista

GMER - is an application that detects and removes rootkits.
http://www.gmer.net/index.php

For additional assistance in relation GMER scan results consult either
http://antirootkit.com/forums/index.php?sid=9e746bb696ac0bb38781ffe4361c3a17
--or--
http://www.thespykiller.co.uk/index.php?board=3.0

CCleaner - Free
Cleans temporary internet files, cookies, history, recent urls, application
MRUs, etc. ...
http://www.ccleaner.com/download/builds/downloading-slim
If Windows Defender is utilized go to Applications, under Utilities uncheck
"Windows Defender" (so it won't delete the history of WD).
If you wish, click 'Options' button the 'Settings' [check] 'Run CCleaner
when the computer starts'.
Setup CCleaner to Automatically Run Each Night in Vista or XP
http://www.howtogeek.com/howto/wind...-automatically-run-each-night-in-vista-or-xp/

Good luck