unable to SYSTEM RESTORE my computer to previous dates.When I click on the back arrow on the calende

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

nirmala - 21 Aug 2008 02:29 GMT

Please help

I have Windows Defender and McAfee Security Center anti virus
softwares.
When I run them they are telling that I does'nt have any virus.

But I am unable to Go to previous restore points and many exe files
are missing in the C:\Window\System folder.

"Warning! Spyware detected on your computer. Install an antivirus or
spyware removal to clean your computer." error came on the desktop.
Whole desktop was white with an orange color box in between with the
above warning.

Antivirus2008 something like that was installed on the desktop and in
the control panel...so first I removed it.
Next I went to System32 and removed the recent files.

But I was Unable to restore to a previous date to get rid of the
virus.
My System restore is infected I beleive.

I don't have that much knowledge in this field.
So kindly let me know in detail what I can do to remove the whole
virus

1. From then I am unable to SYSTEM RESTORE my computer to previous
dates.When I click on the back arrow on the calender its not going to
the old date.
2. When I right click on the desktop and go to properties only Themes
Apperance and Settings are shown I am unable to see Desktop option.
3. I did a research on web but was unable to fix it.
4. I serached for RESTORE in C:\WINDOWS\SYSTEM and unable to find
that.
5. Statemgr.exe is missing its not there in C:\Windows\System
6. Even smgr.dll is not yhere in C:\Windows\System.

Please help me.......pleaseeeeeeeeee.....Please reply me as soon as
possible....

Thanks,

Reply to this Message

Mike M - 21 Aug 2008 03:06 GMT

Since you say you are running Windows Defender then this tells me that you
are not using the Windows Millennium operating system, for users of which
this newsgroup is intended. I suspect you are running XP or possibly
Vista.

Your system has unfortunately been infected by malware known as
Antivirus2008, this is anything but an antivirus application and is
widespread on the net and lurks on many compromised web sites. The
infection can take many forms from the relatively trivial to sufficiently
major that the only sensible recourse is to reinstall the operating
system. One of the many characteristics of Antivirus2008 (or its namesake
Antivirus2009) is that one of the first things it does is destroy system
restore and also the ability to install updates from the Windows Update
site. Note that the spyware message you are seeing is not from the
operating system or McAfee but instead from Antivirus2008 itself.

> 4. I serached for RESTORE in C:\WINDOWS\SYSTEM and unable to find
> that.

In both XP and Win Me system restore is run from the executable rstrui.exe
and in XP is located in the Windows\system32\restore\ folder and in Win Me
in the

> 5. Statemgr.exe is missing its not there in C:\Windows\System
> 6. Even smgr.dll is not yhere in C:\Windows\System.

Neither of these files are part of the XP operating system.

There are a number of good sites on the net that are designed to help
users remove Antivirus 2008 such as
http://www.spywareremove.com/security/antivirus2008-removal-instructions/
but note that removal can be difficult and becomes harder the longer you
leave it as it has a nasty habit of inviting all sorts of other nasty
friends to join the party including some very nasty rootkits. A good
place to go and get one to one help is the Parasites - Adware, Spyware &
Other Scumware forum at http://aumha.net/

Signature

Mike Maltby
mike.maltby@gmail.com

> Please help
>
[quoted text clipped - 37 lines]
>
> Thanks,

Reply to this Message

Mike M - 21 Aug 2008 11:09 GMT

You might want to try downloading and running the tool from Malwarebytes
(http://www.malwarebytes.org/). Using the tool is free, you only have to
pay if you go on to install it and want to use it for realtime protection,
with scheduled scanning, and scheduled updating. I have used the tool on
a number of occasions to successfully remove variants of Antivirus 2008
and 2009.

Signature

Mike Maltby
mike.maltby@gmail.com

> Please help
>
[quoted text clipped - 37 lines]
>
> Thanks,

Reply to this Message