System Restore will not function

[Guest]

Hello everyone
I m hoping that someone can shed light on my problem/s. Any info will help.
If I'm in the wrong place plz excuse and redirect..
I have a Ibm G40 laptop, 2.6 gig Intel processor. almost 20 gig free space
running xp sp2. I do load/unload several programs, but these programs are not
new, and the media is known to be bug free. The problem:
I went to bad website and got bugged Spysheriff for one, crashed and rebuilt
completely, using Norton's and spy-bot to clean. During and after I made
restore points, and validated them by using/testing. I attempted to load
"Medieval Total War", the game loaded, but would not play. The only error was
within game itself "could not create file XXX.xxx" Upon inspection, EVERY
file and folder on c drive is attribed as read only, which this machine was
not before. Also none of my restore points will work. none. No error, restore
goes approx half way across little progress bar then shuts down reboots,
after select user screen restore restarts and gives message that restore
could not be done, no files changed. No error given. I've looked at event
viewer, the message is that it failed to suscessfully restore. No WHY. I've
been in the Knowledge base for two days now, nothing works. Ive tried command
line black screen safe mode restore is functioning. The only thing I've found
is one comment that a locked file will fail all restore attempts What file?
The restore points are good twenty odd restore points didn't fail at the same
time, not and the hard drive still be usable. I'm thinking spybot
locked/changed something but I've been wrong before ANY help or ideas please
Thanks, sorry about so long of post

 

[Diesel1986]

URGENT!!!!!! I NEED HELP!!!!!!!!!!

I have a new computer and just got cable internet and wanted to hook up
my internet to my old computer aswell. My old computer has recently been
re-formatted but i want to put windows xp on it now. It still has stuff
on there but i dont really care. How do i get everything off so i can
put windows xp on the old computer???

 

[Bert Kinney]

Hi,

I suspect the system is still infected. Here are some tips on removing
virus and spyware.

Virus and Spyware removal and prevention
http://bertk.mvps.org/html/spyware.html

Once the system is clean, all restore points will have to be deleted to
prevent the infection(s) from being restored. To do so, disable and then
enable SR.

How to Disable and Enable System Restore
http://bertk.mvps.org/html/disablesr.html

Take a look in event viewer at each "sr" and "srservice" source for an
indication of the locked file that is causing SR to fail and post it's
name and path here.

 

[Guest]

Thanks for the reply Bert

{{A restoration to "XXXXXXXXX" restore point failed. No changes have been
made to the system.}} Sorry if I wasn't clear. The comment about locked files
was in a MS knowledge base article on why system restore fails without an
error code. I can't find it now. Norton's / Spybot / Microtrend's scanner /
Ms's malicious software removal tool all report machine clean. They also
reported it clean before during after the restore points were made. I need
that restore! I can make a new restore and use it, so I'm thinking restore
point is locked? Why? How? Any help plz

 

[Bert Kinney]

Hi,

The locked file issue was addressed in SP1. And you are at SP2. So I
don't think this is the problem.

What is strange is that you are able to create a new restore point and
restore back to it. When restoring to this newly created restore point,
all previous restore points are needed to complete the restore. Normally
this would indicate that there is no restore point corruption.

The only thing I can think of is, has there ever been external or USB
drive connected to the system that was being monitored by System
Restore?

 

[Guest]

Hi,
Bert, I'm convinced that the restores were not corrupted, but I'm still
wondering about infection. I've deleted old points and moved on to try to fix
other problems / weird things. I've downloaded Ccleaner and Hijack this,
trying to learn how to use. One point of note, Somehow "Bluetooth
authenication" has showed up. Any Ideas, I've never used, no need in this
location. And, I have this laptop netted to a desktop, It is running XP Pro
Sp2. System Restore is running on it. I modify drive contents on the desktop
from here at laptop, never have monitored them with system restore from here.
Thanks

 

[Bert Kinney]

Hi,

I agree with you on infection. Follow these Help with Hijackware steps
before posting a Hijack log.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=4075 <=make sure you read & take care
of everything on this page before posting a HijackThis log

I am not familiar with Bluetooth authentication. You may want to post
that to a new thread.

 

[Guest]

Hi Bert,

I've allready used Hijack this and deleted a lot of things. Computer has
improved, but still has weird actions. I'm headed to your suggestied sites
and dig deeper. I'll post back hear when I have something solid to work with.

Thanks again for the help!
FastKat

 

[Bert Kinney]

Good. The folks at AumHa will be able to help.