Computer Hope

Software => Computer viruses and spyware => Topic started by: salty on September 27, 2008, 05:26:35 AM

Title: cannot access system restore or internet explorer
Post by: salty on September 27, 2008, 05:26:35 AM

recently downloaded a course form tiger woods course downloads.com  got a weird active x and mistakenly opened it after restarting my computer i could'nt  see anything on my desktop nothing at all played around some and got some icons back tryed to system restore but it says system restore cannot run until u restart your computer after restarting it is the same message also i cannot get online when i  click ie icon screen flashes and nothing happens have run cleaners and 2 antivirus programs and nothing detected i have tried safe mode in all catagories still nothing  any thoughts on which infection i have

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 27, 2008, 05:30:40 AM

Welcome to ComputerHope.

Get into Safe Mode (http://www.computerhope.com/issues/chsafe.htm) and try the System Restore again.

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 27, 2008, 05:43:30 AM

thank u will try

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 27, 2008, 05:45:43 AM

Good Luck!

Let us know what happens. ;)

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 03:31:16 AM

restarted in safe mode  get message cannot find  C:\WINDOWS\system32\rundll32.exe and i dont have a start button showing

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 03:38:38 AM

ok got to system restore it says same thing system restore is not able to protect your computer.  please restart your computer and then run system restore again 

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 03:39:59 AM

Is this Windows XP?

Boot into Normal Mode and do the following:
   1.  Click Start
   2. Click Run
   3. Type "sfc /scannow" and press enter. (Have your Windows CD handy.)

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 03:55:26 AM

yes it is xp pro sp2 and cyberpower did not send a disc just a restore to original unfortunately i have other xp discs but not with sp2 on it i have this computer running next to this one also

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 03:56:28 AM

Can you borrow an XP SP2 Disc?

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 03:59:32 AM

does it have to be xp pro and any xp sp2

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 04:05:29 AM

Yes, it has to be the same as your current Version of Windows.

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 06:35:04 AM

ok have xp disc in machine what next

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 06:37:23 AM

   1.  Click Start
   2. Click Run
   3. Type "sfc /scannow" and press enter.

It will ask you for the Windows CD.

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 06:56:31 AM

ok should i do a new install

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 06:59:03 AM

Quote from: salty on September 28, 2008, 06:56:31 AM

ok should i do a new install

You could, but it will erase everything (if you are willing). What about my suggestion?

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 07:03:59 AM

oops sorry doing that now its scanning

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 07:21:06 AM

ok scanned for along time and then just disappeared

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 28, 2008, 07:27:34 AM

Ummm....What?  ??? ???

It just disappears?

Can you try again, but this time don't do anything else.

Title: Re: cannot access system restore or internet explorer
Post by: salty on September 28, 2008, 11:27:15 AM

yes tried again scan ran and finished and went back to desktop still missing dlls etc

Title: Re: cannot access system restore or internet explorer
Post by: Carbon Dudeoxide on September 29, 2008, 02:14:11 AM

I found this:
http://support.microsoft.com/kb/274092

Title: Re: cannot access system restore or internet explorer
Post by: evilfantasy on September 29, 2008, 08:56:57 AM

Try repairing System Restore.

Go to Start > Run and type notepad.exe then click OK

Copy and paste the text in the Quote box below to Notepad and save as fixme.reg to Your Desktop

Quote

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableConfig"=dword:00000000
"DisableSR"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr]
"Type"=dword:00000002
"Start"=dword:00000000
"ErrorControl"=dword:00000001
"Tag"=dword:00000004
"ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72,00,2e,00,73,00,79,00,73,\
  00,00,00
"DisplayName"="System Restore Filter Driver"
"Group"="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters]
"FirstRun"=dword:00000000
"DontBackup"=dword:00000000
"MachineGuid"="{EAAFAEEC-4AFE-42BE-83D9-C12FDD4942A6}"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Enum]
"0"="Root\\LEGACY_SR\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalMachine\Software\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalMachine\Software\Policies\Microsoft\Windows NT\SystemRestore]
"DisableConfig"=dword:00000000

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalMachine\Software\Policies\Microsoft\Windows NT\SystemRestore]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalMachine\Software\Policies\Microsoft\Windows NT\SystemRestore]

Locate fixme.reg on your Desktop and double-click it. Answer Yes when prompted to merge with the Registry.

Accept any warnings.