Help recovery from worm damage..?


Recommended Posts

I was doing some OCing last night. my retail XP started giving me error messages. I ignored them at first. But eventually had to delete and reinstall the partition. But it seems my copy of that drive got viruses. msblast and the newer worm thing.Norton quarrantined them. But I seem not able to get into system restore. I believe msblast destroyed some system files before it was quarrantined. Any suggests on how to restore the system?

I will be looking at MS for ideas. I can only speculate that I might copy system files from windows on the C: and paste them to the D: Windows folder. hopefully restoring enough to do a system restore. Not sure of how to do it. Maybe a the repair feature in XPpro? :huh:

Link to comment
Share on other sites

Okay, well I found there are three versions of the same virus. All doing effectively similar things. I had Welcha and removed it. Something still blocks System Restore from running. So I am scanning again. I believe something loads and prevents it from runinng.

Link to comment
Share on other sites

System Restore ceases to function lots of times when you do a repair or manually delete the Windows Folder and reinstall from scratch.

Link to comment
Share on other sites

Thanx xStainDx,

I finally just reinstalled as an upgrade. That copy is on the H: and is not critical. Just I haven't halfway setup my primary yet. I wanted to recover lost data and continue to use the copy in the mean time. It works fine. I removed the virus manually via the Primary and then did the reinstall. I only have had to reinstall the Via and Nvidia drivers. So far everything seems fine....

Link to comment
Share on other sites

For future reference though, you don't want to use system restore when you get a virus, because no anti virus program out there can check system resotre and ensure it's clean, so you run the risk of getting the virus over and over again.

My recommendation is after removing a virus is to flush the system restore by turning it off than back on again.

Link to comment
Share on other sites

For future reference though, you don't want to use system restore when you get a virus, because no anti virus program out there can check system resotre and ensure it's clean, so you run the risk of getting the virus over and over again.

My recommendation is after removing a virus is to flush the system restore by turning it off than back on again.

Thanks Mac,

But when I was helping a friend who got msblast. We had just setup a new installation and bam, he got it again. Immediately I stopped the bugger from running an deleted it out. I then ran System Restore. It went thru the normal motions, but upon rebooting we were unable to boot into it. I eventually setup on a D: partition XP. With that I copied the windows files/folders and pasted them to replace the ones that were lost. After a little tinkering, We were able to boot normally. And would you know it? System Restore finalized. And everything was running perfectly. I took steps to keep from reinfection at that point.

So System Restore actually did some real good. msblast did not infect system restore. But I do get you point.

Link to comment
Share on other sites

update:

I had to reinstall a second time, but I got it right. I unplugged my internet connection and setup. I installed the firewall then connected the internet. Immediately I set about configuring my firewall. I've noticed incoming from remote computers, my belief is that they are ones with the blastervirus. So I don't allow them. So far so good. Things running smoothly.

I was suprised my XP install only took 12mins. That is way faster than the 1 hour install it used to take a couple years ago. This Barton rocks. I was almost tempted to put my 2400 back in just to see how high I could OC with my current ram. Can't wait to get that 400DDR... :D

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.