Re: Trying to Restore after PSguard

Tech-Archive recommends: Speed Up your PC by fixing your registry

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
  http://aumha.org/a/quickfix.htm
  http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
  http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware. **Post your log to http://forums.spywareinfo.com/, http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30 for expert analysis, not here.**

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP

PSed wrote: 
I got infected with PSguard malware. I believe I have it cleaned out, but
I don't know how to get my system back to where I can use the computer
again.

From Start, program Files shows empty. I can, however, go to the shortcuts
on the desktop, right click, open and then run most programs. Internet
explorer does not work but Mozilla Firefox does.

I tried running compmgmt.msc but it gives the message "MMC cannot open the
file. This may be because the file does not exist (it does), is not an MMC
console, or was created by a later version of MMC. This may also be
because you do not have sufficient rights to the file."

I am logged in as Owner which I thought had all the rights.

I tried running eventvwr.msc and get the same message.

I cannot access control panel either.

I do not want to use system recovery and lose all the programs I have
installed, especially since the \windows\system32\restore\SR-RP file has
many entries like below

RestorePointName=System Checkpoint, RestorePointStatus=[VALID],
Number=301l, Date=Thursday September 1, 2005 15:26:13

which I take to mean that many restore points exist.

Will appreciate any help solving this problem!! 

.

Relevant Pages

  • Re: Netware Authentification Failure
    ... When all else fails, HijackThis v1.99.1 ... is the preferred tool to use. ... PLEASE MAKE SURE THAT ALL REQUIRED FILE SYSTEM DRIVERS ARE LOADED AND THE VOLUME IS NOT CORRUPTED. ... The only downside is that the disc drives, C & D, can no ...
    (microsoft.public.windowsxp.general)
  • Re: ERROR MESSAGE
    ... > I have at last managed to get hijackthis to work. ... > (Shockwave ActiveX Control) - ... > preferred tool to ... >>> Alan ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: oe and ie6.1 problems
    ... When all else fails, HijackThis v1.99.1 ... is the preferred tool to use. ... oh and double clicking a received email brings up messages that say that ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Help desperately needed - MVP required - "page not found" for 1 in 3 pages - why?
    ... When all else fails, HijackThis ... is the preferred tool to use. ... > Disabling firewall and anti virus software. ... > will show as broken links so it is like every HTTP request has the ...
    (microsoft.public.windowsxp.general)
  • Re: Help desperately needed - MVP required - "page not found" for 1 in 3 pages - why?
    ... When all else fails, HijackThis ... is the preferred tool to use. ... > Disabling firewall and anti virus software. ... > will show as broken links so it is like every HTTP request has the ...
    (microsoft.public.windowsxp.help_and_support)