really bad virus....i need advice

[tashpop]

Originally Posted by JThiessen

I assume you are referring to "system restore"? In the case of my daughters pc, it wouldn''t run System restore, even in Safe mode. Somehow, it disabled it.

yes you are correct, but like i said you have to first prevent the software from starting then system restore. thats key otherwise you cannot do anything unless you have software that can remove it.

[Savage03]

Been dealing with this stupid thing myself lately and its not kool, had pretty much the same issues as boa and I know some about pc's and tried many things but this thing locked everything up and even deleted all my restore points and it would even start in safe mode so at that point it was obvious a format was in order. Gonna save those steps posted but if he has as bad as I did dont think its gonna help him.

[tashpop]

i had the same thing called system tools i believe. i got rid of it by hitting ctr alt delete to get in my task menue at start up then i stopped the process. you have to do it fast at startup because this thing once started shuts down any program you could use to stop or delete it. then searched for any file named system tools and did a system recovery for an earlier date. google it, its a very common attatchment. i tracked it and we got it from myspace page layout site.

oh, i think its process is just a 7 or 9 digit number, not named system tools.

[Arct1k]

Harrold had that thing - Tried like hell to get rid of it but couldn't...

I ended up with backing up data and reformatting hard disk...

I wouldn't fight it its a REAL PITA!

[Arct1k]

Yeah - It actually infected safe mode on Harrolds PC

[Overdriven]

My Pc modo is, if after an hour of trying to fix it with no luck, format and reinstall. But if you don't have a DVD writer to backup your pics, favorites, etc, get one. Or better yet an external hard drive. $125 will get you 1 terabyte these days. Makes starting all over alot easier, especially if you save an image of the drive (Norton Ghost or similar) on the external drive.

[scarletboa]

ok, well i couldn't find these files:

For XP:
C:\ document and settings \ [user] \ local settings \ Application Data \ [RANDOM CHARACTERS] \
C:\ document and settings \ [user] \ local settings \ Application Data \ [RANDOM CHARACTERS]sysguard.exe
C:\ document and settings \ [user] \ local settings \ Application Data \ sysguard.exe

or

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run -> “[RANDOM CHARACTERS]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run -> “[RANDOM CHARACTERS]”

but everything seems normal at the moment. i am able to use my itunes and ccleaner, but the internet is not working due to firewall settings? i am doing a virus scan right now