Re: Virus ????

From: TomD (anonymous_at_discussions.microsoft.com)
Date: 04/16/04 

Date: Fri, 16 Apr 2004 04:23:29 -0700

Bill,

Thanks for your input.

I was dubious to start with since I have Administrator
status on my account. However I did retart in safe mode
an opened up the Aministrator account that appeared.
Through this the system restore tab was available and I
switched off the facility. Not sure why, I, as an
Administrator didn't see it ??

I then decided to unistall the PC-Cillin AV package
(hence remove the huundreds of quarantined items) and
install Panda Titanium (including firewall). Full system
scan gave clean bill of health.

On returning to normal account usage, Sytem Restore Tab
back and system restore re-enabled

Thankyou for your help and also thanks to Dave and
Bernard for theirs. All your support very much
appreciated.

>-----Original Message-----
>Restart in safe mode, and sign in as administrator, is
what I'd try.
>
>It is likely that a limited user isn't allowed to make
this change, and thus
>can't see the tab--is there an administrator level user
that you can sign on
>as?
>
>"TomD" <anonymous@discussions.microsoft.com> wrote in
message
>news:18b1501c42339$bd529330$a001280a@phx.gbl...
>>
>> Benjamin/Dave,
>>
>> Thanks for your responses..............
>>
>> I've been to the site you both recommend and printed a
>> copy of the info. I'm running XP Home Edition (on Host
PC
>> with susspected virus) and the System restore Tab does
>> not appear (????). I'm running Pro on a Client and tab
>> is there. Any further suggestions as to switching off
>> SR off on host???
>>
>> -----Original Message-----
>>>Please read the following URL:
>>>http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore
.h
>> tm
>>>
>>>The objective:
>>>------------------
>>>- Turn off the System Restore function
>>>- Reboot the PC
>>>- Using your AV package, perform a full scan of all
>> files on the platform and clean/delete
>>> infectors found
>>>- Turn on the System Restore function, and re-apply any
>> System Restore preferences,
>>> e.g. HD space to use
>>>- Reboot the PC
>>>- Create a new System Restore point.
>>>
>>>Dave
>>>
>>>
>>>
>>>
>>>"TomD" <anonymous@discussions.microsoft.com> wrote in
>> message
>>>news:1d34101c4232d$8ef2e500$a501280a@phx.gbl...
>>>| I have in quarantine (via PC-Cillin 2000) a large
>> number
>>>| of virus's (?) i.e in access of 3 figures.
>>>|
>>>| All virus's (bar 1) are in the range A0006102.exe to
>>>| A0011468.exe. The only other one is shown as E8.tmp
>>>| They are in in the (hidden) System Volume
>>>| Information\_restore Folder of the root directory.
>> I've
>>>| tried to delete from quarantine but I think they keep
>>>| coming back as other numbers in the range (!?!)
>>>|
>>>| Can anyone tell me what they are and how to get rid
of
>>>| them
>>>|
>>>| Thanks
>>>
>>>
>>>.
>>>
>
>
>.
>

Relevant Pages

  • Re: Administrator locked out!!
    ... Boneita you should put your problem into the post as a seperate question so ... wasn't locked out from logging my Administrator in I could do that and get to ... Administrator account set up,no other user accounts, I have always ... To do a System Restore, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator locked out!!
    ... was able to log in as the Administrator. ... Administrator account set up,no other user accounts, I have always ... Get into Safe Mode by repeatedly tapping the F8 key as the computer is ... To do a System Restore, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing Approved Scripts to Run
    ... If it's not "administrator" then try changing it via another administrator level account ... creates a System Restore Point in seconds without having to open XP's slow, ... Just recently it won't run, but opens in notepad, so obviously I've done something to cause this, probably a program I've installed or tweak I've forgotten. ...
    (microsoft.public.windowsxp.general)
  • Re: Virus ????
    ... That's very interesting--not sure what had the effect of removing that tab. ... "true" administrator account which are different from an "administrator" ... > Through this the system restore tab was available and I ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)