Go Back   Computer Forums > General Computing > Software and Operating Systems
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 10-23-2006, 09:22 PM   #1
Beta Member
 
Join Date: Oct 2006
Posts: 2
Default System Restore on xp gone bad

I had a friend who got a virus, so i just ran system restore to see if that would work. It did, but then when we restarted it, things went all wrong. Everything boots up seemingly ok, but when it comes time for the desktop to show up, it doesn't. It's a black screen. He said the first time the resolution was way down, icons big, etc. Then he restarted it again and that's when it went blank. It seems to me to be a video driver, but I don't understand how or why. Just thought i'd ask around and see if anyone knew. Hopefully this is in the correct forum, sorry if it's not.
__________________

__________________
JDBlack2007 is offline   Reply With Quote
Old 10-23-2006, 09:29 PM   #2
Daemon Poster
 
Toby's Avatar
 
Join Date: Jan 2006
Posts: 1,028
Send a message via MSN to Toby Send a message via Yahoo to Toby
Default Re: System Restore on xp gone bad

Similar thing happened to me once.

I just repaired Windows XP from the XP CD. Repaired, not reformatted.
__________________

__________________
Dell Inspiron 9400 Notebook 120GB 5400RPM SATA HDD, 500GB 7200RPM SATA External HDD, DVD+-RW, DVD+-RW External, Mobile Intel Calistoga i945PM, Intel Core 2 Duo 2.0 GhZ, 2GB DDR2-667MhZ Dual Channel SDRAM, Nvidia GeForce GO 7900 GS 256MB Single-Pipe.
TinyXP Rev05, PerfectDisk, TuneUp Utilities, Window Washer, Nod32, Bo-Clean, SuperAntiSpyware Pro, Spyware Blaster, Comodo Firewall Pro.
Toby is offline   Reply With Quote
Old 10-23-2006, 09:32 PM   #3
Beta Member
 
Join Date: Oct 2006
Posts: 2
Default Re: System Restore on xp gone bad

sweet, i'll give that a whirl. Thanks!
__________________
JDBlack2007 is offline   Reply With Quote
Old 10-24-2006, 09:45 AM   #4
Proper Legend
 
dude_se's Avatar
 
Join Date: Nov 2004
Location: UK
Posts: 8,633
Default Re: System Restore on xp gone bad

if i were u id repair it... then backup the data, then format otherwise the masties may still be floating around
__________________
Laptop spec: ASUS X53E, i5 2430m 2.4ghz, 3gb ram, 320gb hdd, intel hd graphics, usb 3.0
dude_se is offline   Reply With Quote
Old 10-24-2006, 09:20 PM   #5
Daemon Poster
 
pctechmike's Avatar
 
Join Date: Jan 2006
Posts: 836
Send a message via AIM to pctechmike Send a message via MSN to pctechmike
Default Re: System Restore on xp gone bad

Most viruses are relatively easy to get rid of, until your system does a system restore point, which is when it infects the system restore folder. At this point, your system is basically toast, unless you have the tools to get rid of the system restore folder, and the virus. More times than not, these are bootable type programs. I would recommend trying to go into safe mode- if you're able to get into safe mode, and have the original XP disc, I would go to start>run>sfc /scannow
That's Windows System File Checker, which will check all the system files, and replace the modified ones with the correct ones. At that point, you should be able to get back into Windows with no problems. Then I would run several different virus scans- there are plenty of tools out there. Last resort would to be repair, then the very last, to reformat.
__________________
Pctechmike
www.adequateitsolutions.com
Please Add To My Rep If I Helped You
pctechmike is offline   Reply With Quote
Old 10-25-2006, 09:14 AM   #6
Golden Master
 
Raffaz's Avatar
 
Join Date: Sep 2006
Posts: 6,798
Send a message via AIM to Raffaz Send a message via MSN to Raffaz Send a message via Yahoo to Raffaz
Default Re: System Restore on xp gone bad

Quote:
Originally Posted by pctechmike
Most viruses are relatively easy to get rid of, until your system does a system restore point, which is when it infects the system restore folder. At this point, your system is basically toast, unless you have the tools to get rid of the system restore folder, and the virus. More times than not, these are bootable type programs. I would recommend trying to go into safe mode- if you're able to get into safe mode, and have the original XP disc, I would go to start>run>sfc /scannow
That's Windows System File Checker, which will check all the system files, and replace the modified ones with the correct ones. At that point, you should be able to get back into Windows with no problems. Then I would run several different virus scans- there are plenty of tools out there. Last resort would to be repair, then the very last, to reformat.
Am i right in thinking that if ya system restore is infected, you can disable it and reboot and then enable it again to get rid of the viruses in there? Im sure ive read that somewhere before, any truth in this?
__________________
Raffaz is offline   Reply With Quote
Old 10-25-2006, 11:45 PM   #7
Daemon Poster
 
pctechmike's Avatar
 
Join Date: Jan 2006
Posts: 836
Send a message via AIM to pctechmike Send a message via MSN to pctechmike
Default Re: System Restore on xp gone bad

Not from my experience. While it is true you can disable system restore, the chances of getting rid of viruses that reside in the system restore folder are slim. Here is an explanation from Microsoft about antivirus programs cleaning the restore folder:

http://support.microsoft.com/kb/263455

It doesn't mention XP, but the system restore is the same program from that OS- the only good thing that came from ME, honestly.

Another question:
Q.What should I do if my anti-virus scanner cannot access the System Volume Information folder to remove a virus?A.If the System Volume Information (SVI) folder is on a FAT partition and a virus infected file has been detected or copied to the data store before it was cleaned, the data store needs to be purged to remove the Restore Point with the infected file. To do this, the user should disable and then re-enable System Restore monitoring on that particular drive as specified in How can I disable System Restore from monitoring a particular drive? If the System Volume Information Folder is on an NTFS partition, the SVI directory can be accessed by a virus utility to clean an infected file as any other part of the file system.

While this article states that the volume is accessable, it's highly unlikely it will clean it. With a bootable CD, such as Winternals, and others, it's possible to delete the system restore folder, effectively ridding the computer of the virus (and all restore points, that could be infected)- this has always been my way of doing it, because it's simple, and full-proof.
__________________
Pctechmike
www.adequateitsolutions.com
Please Add To My Rep If I Helped You
pctechmike is offline   Reply With Quote
Old 10-26-2006, 04:44 AM   #8
Golden Master
 
Raffaz's Avatar
 
Join Date: Sep 2006
Posts: 6,798
Send a message via AIM to Raffaz Send a message via MSN to Raffaz Send a message via Yahoo to Raffaz
Default Re: System Restore on xp gone bad

Cheers for the info +1 rep
__________________
Raffaz is offline   Reply With Quote
Old 10-27-2006, 07:31 PM   #9
Daemon Poster
 
pctechmike's Avatar
 
Join Date: Jan 2006
Posts: 836
Send a message via AIM to pctechmike Send a message via MSN to pctechmike
Default Re: System Restore on xp gone bad

Thank you! I do appreciate it!
__________________
Pctechmike
www.adequateitsolutions.com
Please Add To My Rep If I Helped You
pctechmike is offline   Reply With Quote
Old 10-29-2006, 04:37 PM   #10
Fully Optimized
 
mikee286's Avatar
 
Join Date: Sep 2005
Posts: 2,134
Default Re: System Restore on xp gone bad

if the virus gets into your system restore folder just turn system restore off and the folder will clear including the virus in it.
__________________
AMD Phenom II x6 1045T @ 2.7 Ghz, 8Gb Corsair Vengeance Ram, crucial M500 240GB SSD, 500GB WD
1.5 TB Seagate, XFX Radeon 6670 1Gb GDDR5, Windows 7 Professional 64bit
mikee286 is offline   Reply With Quote
Old 10-30-2006, 12:55 AM   #11
BSOD
 
Join Date: Aug 2006
Posts: 329
Default Re: System Restore on xp gone bad

Quote:
Originally Posted by pctechmike
... While it is true you can disable system restore, the chances of getting rid of viruses that reside in the system restore folder are slim.....
Incorrect


Quote:
Originally Posted by mikee286
if the virus gets into your system restore folder just turn system restore off and the folder will clear including the virus in it.
Correct
__________________
DILLIGAF is offline   Reply With Quote
Old 10-31-2006, 02:22 AM   #12
In Runtime
 
AnonymousI's Avatar
 
Join Date: Mar 2005
Posts: 243
Default Re: System Restore on xp gone bad

I view system restore (by microsoft) as our own government (unreliable and sneaky). I never use system restore since it takes up resources (cpu load and a lot of disk space). From my past experiences, system restore will mess up your computer. Here's my philosophy: Nothing in the past can truly be recreated. My point is that system restore will never bring your computer to a time in the past - it will try to recreate the past by deleting things that have changed between the present and the restore point; but some things could still remain.

Instead of using system restore, use a disk imaging program (I reccommend Acronis True Image Workstation). These programs will take an exact picture of your computer. The only thing that will not be recreated is the date and time when you restore the image.
__________________
AnonymousI is offline   Reply With Quote
Old 11-01-2006, 08:33 PM   #13
Daemon Poster
 
pctechmike's Avatar
 
Join Date: Jan 2006
Posts: 836
Send a message via AIM to pctechmike Send a message via MSN to pctechmike
Default Re: System Restore on xp gone bad

DILLIGAF- How can my experience be "Incorrect"?
__________________
Pctechmike
www.adequateitsolutions.com
Please Add To My Rep If I Helped You
pctechmike is offline   Reply With Quote
Old 11-01-2006, 09:50 PM   #14
BSOD
 
Join Date: Aug 2006
Posts: 329
Default Re: System Restore on xp gone bad

Quote:
Originally Posted by pctechmike
DILLIGAF- How can my experience be "Incorrect"?
I should have quoted you better (post edited to reflect that)

It was not your experience that I was saying was incorrect but the information you provided.

It is a proven fact that trojan downloaders and virus' in system restore points can be removed by deleting the restore points by disabling and re enabling system restore.
__________________
DILLIGAF is offline   Reply With Quote
Old 11-03-2006, 11:49 PM   #15
Daemon Poster
 
pctechmike's Avatar
 
Join Date: Jan 2006
Posts: 836
Send a message via AIM to pctechmike Send a message via MSN to pctechmike
Default Re: System Restore on xp gone bad

Links to your proof would be nice, so I can review them. While I understand that disabling system restore, deletes all your restore points, isn't this about the same as deleting a file- your system says it's not there, but it actually is, until it gets over written. Every technician has their way of doing things- and this may have worked fine for you everytime, but I'm sticking to the way I do it for now.
__________________
Pctechmike
www.adequateitsolutions.com
Please Add To My Rep If I Helped You
pctechmike is offline   Reply With Quote
Old 11-04-2006, 01:26 PM   #16
The Candyman
 
~mr mixx~'s Avatar
 
Join Date: Jun 2004
Location: USA
Posts: 11,355
Default Re: System Restore on xp gone bad

although i have used system restore before and it saved my arse, i do have to say that i don't use it any more because it's more effective to use back up soutions to restore any file on your hhd. i have multiple back ups of everything on the hhd, so if anything acts up...restore from backup.


edit: and also for the fact that in the past turning off system restore and turning it back on will erase some virues, the viruses are getting more smarter too, and can cross over from partition to partition.
__________________
" Let the music move you "
~mr mixx~ is offline   Reply With Quote
Old 11-05-2006, 12:47 AM   #17
Fully Optimized
 
troy's Avatar
 
Join Date: Jul 2006
Location: USA
Posts: 2,410
Default Re: System Restore on xp gone bad

I'm not a fan of system restore either. It's saved me a few times, but it's also restored viruses too. Luckily my AV program has caught some stuff in the system restore folder in the past. I still don't use system restore unless I have to, I usually keep my backups on my other partition but occasionally have to use system restore.
__________________
Desktop: Dell Dimension E510, 2.5GB RAM, Intel P4 3.0GHZ, 250GB HDD, Windows Vista Premium. Might not be the best, but the old girl is still running good.
troy is offline   Reply With Quote
Old 11-07-2006, 01:19 AM   #18
BSOD
 
Join Date: Aug 2006
Posts: 329
Default Re: System Restore on xp gone bad

Quote:
Originally Posted by pctechmike
Links to your proof would be nice, so I can review them .....
Review away at your leisure.


-------> LINK <-------


Quote:
Microsoft on it's website (linked above)


Manually Purge the Data Store

To completely and immediately remove the infected file or files in the data store, disable and re-enable the System Restore feature.

WARNING: Using the following steps will completely remove all restore points from the data store. Do not use this method if this will cause problems. When you enable the System Restore feature again, the System Restore feature will create a new restore point and then resume monitoring your computer.

1. Click Start, point to Settings, and then click Control Panel.
2. Double-click System, and then click the Performance tab.
3. Click File System, and then click the Troubleshooting tab.
4. Click to select the Disable System Restore check box, click Apply, click to clear the Disable System Restore check box, click Apply, and then click OK.
5. Restart the computer when you are prompted to do so. When the computer restarts, the data store is purged and the System Restore feature begins monitoring the system again.
Well gosh darn and golly gee, will ya look at that

__________________
DILLIGAF is offline   Reply With Quote
Old 11-07-2006, 01:30 AM   #19
Daemon Poster
 
Toby's Avatar
 
Join Date: Jan 2006
Posts: 1,028
Send a message via MSN to Toby Send a message via Yahoo to Toby
Default Re: System Restore on xp gone bad

I use system restore, as I'm too lazy to do any proper backups

But yeah, it's saved me a few times, so I can't complain. I use to have it consume 12% of the HDD, but I've only got 10 GB left out of 80, so now it sits at 3% (roughly 2GB).

I need another HDD, or an external one, but running on USB 1.1, bugger that.
__________________
Dell Inspiron 9400 Notebook 120GB 5400RPM SATA HDD, 500GB 7200RPM SATA External HDD, DVD+-RW, DVD+-RW External, Mobile Intel Calistoga i945PM, Intel Core 2 Duo 2.0 GhZ, 2GB DDR2-667MhZ Dual Channel SDRAM, Nvidia GeForce GO 7900 GS 256MB Single-Pipe.
TinyXP Rev05, PerfectDisk, TuneUp Utilities, Window Washer, Nod32, Bo-Clean, SuperAntiSpyware Pro, Spyware Blaster, Comodo Firewall Pro.
Toby is offline   Reply With Quote
Old 11-07-2006, 07:04 AM   #20
Golden Master
 
Raffaz's Avatar
 
Join Date: Sep 2006
Posts: 6,798
Send a message via AIM to Raffaz Send a message via MSN to Raffaz Send a message via Yahoo to Raffaz
Default Re: System Restore on xp gone bad

Quote:
Originally Posted by DILLIGAF
Review away at your leisure.


-------> LINK <-------
This is what i was saying earlier on in here, i knew i had read it somewhere before lol
__________________

__________________
Raffaz is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 06:19 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0
×