Intermittant-Deleted files in _Restore
Results 1 to 5 of 5

Thread: Intermittant-Deleted files in _Restore

  1. #1
    Join Date
    Dec 2000
    Location
    Queensland, Australia
    Posts
    427

    Intermittant-Deleted files in _Restore

    Hi This is a repost, any advice before I cleans install this system please.

    Hi,
    I suspect that I have been hit by a Trojan, or an internet worm.
    After browsing a site (some java script graphics manipulation on the main page), I visited another site to download a couple of files. fine except I could not select the folder to store the File. cancelled the download, tried again..Same prob, Closed IE. Reopened IE, went back to the download site..Same story.
    Decided that a reboot was in order.. as the sys rebooted, I was greeted with a corupted BIOS message (Have Dual BIOS M/b BX-2000 Gigabyte)Bios was reloaded. Could only eneter ME in Safemode, Tried a restore.. No restore points.. Checked the _restore Folder.. Empty..
    Entered MSCONFIG, removed most prgs from the start up, including F-Prot, Talkworks, Zonealert. System restarted ok. Reenabled 1 at a time to find the above listed prevented a clean restart. Uninstalled these progs. then only to find that my DUN settings/properties changed, plus after validating my id with my isp, was unable to log on to the Internet.
    Did a install over of ME, ran Vet AV, then Norton AV, F-Prot, Tauscan.. Found nothing.
    System ran fine for a couple of weeks. Untill.. the system bootup and locked up, not sure of the reason, common MS Office Shortcut Bar, Symantic Talkworks. No programs installed in previous 48hrs.
    Restore?. Nope..All restore points deleted, as were the contents of the "_Restore" Folder..
    Any Ideas?
    System Details
    PII 400MHz
    Gigabyte BX2000 MoBo
    128MB SDRAm
    WinME - Upgraded from Win98se
    8.4Gb + 6.4Gb HDD's

    A further note.. system ended up with _Restor folder's files deleted again recently, but none of the other symptoms. Also when I run Tauscan, I end up with a complete system lockup..


    ------------------
    Well? it needs an Undertaker!
    The Name is not my Job.. It is my driving style..
    _ Currently Disgusted at Facebook's Nazi Admins_
    If they don't like your name they will delete your account without notice...
    und3rtak3r

  2. #2
    Join Date
    Feb 2000
    Location
    26.03°N 80.14°W
    Posts
    9,410
    Vernon Frazee, Microsoft MVP (Windows - Shell/User)

    Defenses Up!
    Tip: When prompted for a password, give an incorrect one first. A phishing site will accept it; a legitimate one won't.


    Inside Spyware: A Guide to Finding, Removing and Preventing Online Pests


    If you don't keep up with security fixes, your computer|network won't be yours for long.

  3. #3
    Join Date
    Dec 2000
    Location
    Queensland, Australia
    Posts
    427
    Thanks for the link Vernon.
    To answer your question, yes.
    The problem I have is the four files
    DISKCFG.DAT
    SRDISKID.DAT
    VxDMon.cfg
    VxDMon.dat
    Are missing when ever this occures, the pattern now appears to be, Locks up in IE, only recovery is reboot, returns in safe mode and ready to do a restore and... no restore points, that is after setting up a restore point only an hour before.


    Am I correct in assuming all restore points are "deleted" when Restore is disabled.

    Thanks and Cheers Glenn

    ------------------
    Well? it needs an Undertaker!
    The Name is not my Job.. It is my driving style..
    _ Currently Disgusted at Facebook's Nazi Admins_
    If they don't like your name they will delete your account without notice...
    und3rtak3r

  4. #4
    Join Date
    Feb 2000
    Location
    26.03°N 80.14°W
    Posts
    9,410
    Am I correct in assuming all restore points are "deleted" when Restore is disabled.

    A quote from the above Microsoft KB link:
    CAUTION: Disabling System Restore removes all previous restore points. To continue to use System Restore to restore your computer to a previous point, do not disable System Restore.
    Have you tried reinstalling IE? Are you running any older Norton utility type programs?
    Vernon Frazee, Microsoft MVP (Windows - Shell/User)

    Defenses Up!
    Tip: When prompted for a password, give an incorrect one first. A phishing site will accept it; a legitimate one won't.


    Inside Spyware: A Guide to Finding, Removing and Preventing Online Pests


    If you don't keep up with security fixes, your computer|network won't be yours for long.

  5. #5
    Join Date
    Dec 2000
    Location
    Queensland, Australia
    Posts
    427
    I haven't tried reinstalling IE, will do that tonight and see what happens. Not running any Nortons tools on my system (to be precise all Symantic software (Talkworks, winfax, Act) have been uninstalled. since this problem started.
    thanks for the leads Vernon,
    Cheers Glenn

    ------------------
    Well? it needs an Undertaker!
    The Name is not my Job.. It is my driving style..
    _ Currently Disgusted at Facebook's Nazi Admins_
    If they don't like your name they will delete your account without notice...
    und3rtak3r

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •