System Restore needs restoring

[Robert Bruce]

After a protracted recovery procedure from a dozen Trojans that disabled
regedit and system restore on an XP box, I now seem to have no viruses,
regedit works again but no system restore; even in Safe Mode. The SR tab is
now missing from the properties on My Computer. If I attempt to start SR
from its shortcut under system tools I recieve an error message to restart
the computer, to no avail. This box now has up to date antivirus and
several antispyware products.

I tried: sfc/scannow
%systemroot%\system32\restore\rstrui.exe
chkdsk /r

but would like to hear of another suggestion from the group.

Does XP have: scanreg /fix like in WinMe to repair a registry that has
probably been trashed by the viruses?


TIA

 

[Bert Kinney]

Hi Robert,

I would suggest reinstalling System Restore. This will delete all existing
restore points in the process. That way the system will not be reinfected by
using a restore point that contains a virus or malware. This should also fix
the missing System Restore tab.

How to reinstall System Restore in Windows XP:
http://bertk.mvps.org/html/reinstall.html

Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

 

[Robert Bruce]

Dear Bert,

I did see that one in my travels and couldn't get it to work before but I'll
try again and let you know.

 

[=?iso-8859-1?Q?_db_=B4=AF`=B7.._=3E=3C=29=29=29=BA]

most of the time simply removing
a virus or Trojan is not
all that will take to bring
the infected computer up to
par.

most if not all virus's infect and
corrupt the system files as well.
so an antiviral will remove the virus
but cannot replace the corrupted operating
system files. the sfc you did was
a reasonable idea.

but what might be better is
to do a "repair installation" with
the windows setup cd.

the repair installation will
of course replace "all" the
system files with genuine files,
however, the repair install will also
destroy all the old restore points as
well, fortunately.

essentially, when you do a
repair installation, the state of your
operating system is re-set/renewed and
the restore points from the former state
of a corrupted o.s. are worthless,
thus they are destroyed by the repair.

as a suggestion, after you renew
your o.s., you may want to use
the following afterwards:

http://onecare.live.com/standard/en-us/default.htm

--

<)))º>·´¯`·.¸. , . .·´¯`·.. ><)))º>`·.¸¸.·´¯`·.¸.·´¯`·...¸><)))º>

..