System Files Infected

The Learner · External Since: Mar 27, 2010 Posts: 2

While uninstalling Comodo (an app from Cnet) , my system stalled. Had to
shut down using the On/Off button. After trying to reboot, I found I was
infected and my system tried to fix the problems - but couldn't. I use
ERUNT and have a Raid 1 backup system. I was able to get into a prompt
mode and used ERUNT to get my system going. I used my backup to restore
everything back to a time when I didn't have Comodo installed. The
system booted. Then, I used Avira Free Version but it found five
unsigned system files. I tried System File Recovery - but I have an HP
Pavilion laptop which does not have an original Vista disk. It only has
a partition which is supposed to restore the system back to it's store
bought condition. I don't want to do this and believe if I had the I386
folder, I could used System File Checker to replace these unsigned files.
NOTE: I also ran my backup on the partition that is used for Restore
(and it found files that (I don't think) should have been there. In any
case, the backup corrected that partition since I only ran two backups of
it since I've owned the laptop. Bottom line: I need a way to fix those
five unsigned system files. Please help.......

The Learner · External Since: Mar 27, 2010 Posts: 2

On Sat, 27 Mar 2010 12:48:28 -0400, The Learner
wrote:

>While uninstalling Comodo (an app from Cnet) , my system stalled. Had to
>shut down using the On/Off button. After trying to reboot, I found I was
>infected and my system tried to fix the problems - but couldn't. I use
>ERUNT and have a Raid 1 backup system. I was able to get into a prompt
>mode and used ERUNT to get my system going. I used my backup to restore
>everything back to a time when I didn't have Comodo installed. The
>system booted. Then, I used Avira Free Version but it found five
>unsigned system files. I tried System File Recovery - but I have an HP
>Pavilion laptop which does not have an original Vista disk. It only has
>a partition which is supposed to restore the system back to it's store
>bought condition. I don't want to do this and believe if I had the I386
>folder, I could used System File Checker to replace these unsigned files.
>NOTE: I also ran my backup on the partition that is used for Restore
>(and it found files that (I don't think) should have been there. In any
>case, the backup corrected that partition since I only ran two backups of
>it since I've owned the laptop. Bottom line: I need a way to fix those
>five unsigned system files. Please help.......

Specifically, the errors I get from Avira Free are:

HEUR/Modified.system file (for the folloowing five files):
svchost.exe
wsock_32.dll
w32_32.dll
csrss.exe
alg.exe

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, The!

You wrote on Sat, 27 Mar 2010 21:00:53 -0400:

??>> laptop. Bottom line: I need a way to fix those five unsigned system
??>> files. Please help.......

TL> Specifically, the errors I get from Avira Free are:

Let Avira delete them, then (maybe) replace them from your original OS CD.

Worth a cry. Smile

or try.

--
With best regards, gufus. E-mail: stop.nospam.gbbsg.TakeThisOut@shaw.ca

Dave Cohen · External Since: Oct 16, 2004 Posts: 59

On 3/29/2010 5:17 PM, gufus wrote:
> Hello, The!
>
> You wrote on Sat, 27 Mar 2010 21:00:53 -0400:
>
> ??>> laptop. Bottom line: I need a way to fix those five unsigned system
> ??>> files. Please help.......
>
> TL> Specifically, the errors I get from Avira Free are:
>
> Let Avira delete them, then (maybe) replace them from your original OS CD.
>
> Worth a cry. Smile

or try.
>
>
>
He probably doesn't have a cd, a restore partition which is probably an
image.
I swear by imaging programs, first thing I did with my laptop was make
my own image.

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, Dave!

You wrote on Mon, 29 Mar 2010 21:34:45 -0400:

DC> I swear by imaging programs, first thing I did with my laptop was make
DC> my own image.

I never did setup any imaging programs.

Can you suggest a few /good/ ones?

--
With best regards, gufus. E-mail: stop.nospam.gbbsg.RemoveThis@shaw.ca

Dustin Cook · External Since: Jun 27, 2006 Posts: 74

"gufus" wrote in

> Hello, Dave!
>
> You wrote on Mon, 29 Mar 2010 21:34:45 -0400:
>
> DC> I swear by imaging programs, first thing I did with my laptop was
> make DC> my own image.
>
> I never did setup any imaging programs.
>
> Can you suggest a few /good/ ones?
>

Acronis TrueImage is probably one of the defacto standards now. I've always
been a fan of Norton Ghost myself.

--
"Hrrngh! Someday I'm going to hurl this...er...roll this...hrrngh.. nudge
this boulder right down a cliff." - Goblin Warrior

David H. Lipman · External Since: Jul 04, 2003 Posts: 2245

From: "Dustin Cook"

| "gufus" wrote in
|

>> Hello, Dave!

>> You wrote on Mon, 29 Mar 2010 21:34:45 -0400:

>> DC> I swear by imaging programs, first thing I did with my laptop was
>> make DC> my own image.

>> I never did setup any imaging programs.

>> Can you suggest a few /good/ ones?

| Acronis TrueImage is probably one of the defacto standards now. I've always
| been a fan of Norton Ghost myself.

Symantec Ghost -- The only Symantec product I swear by and not swear at!

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

FromTheRafters · External Since: Feb 16, 2009 Posts: 78

"gufus" wrote in message

> Hello, Dave!
>
> You wrote on Mon, 29 Mar 2010 21:34:45 -0400:
>
> DC> I swear by imaging programs, first thing I did with my laptop was
> make
> DC> my own image.
>
> I never did setup any imaging programs.
>
> Can you suggest a few /good/ ones?

I discovered that having my Seagate or Maxtor drives entitles me to a
free imaging program (powered by Acronis). It is not as versatile as the
full blown TrueImage program, but it suffices for making backups. The
one I have is called MaxBlast, but they may have newer offerings and
other drive manufacturers may have offerings also.

FredW · External Since: May 03, 2009 Posts: 30

This message is not archived

gufus · External Since: Mar 23, 2010 Posts: 21

News: alt.comp.virus,alt.comp.anti-virus [Thu, 01 Apr 2010
03:04:12 GMT @169]
From: Dustin Cook [DC] *

Subject: Re: System Files Infected

Hello, Dustin!

You wrote on Thu, 01 Apr 2010 03:04:12 GMT:

Acronis TrueImage is probably one of the defacto standards now. I've
always
been a fan of Norton Ghost myself.

Thanks
--
With best regards, gufus. E-mail: stop.nospam.gbbsg.TakeThisOut@shaw.ca

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, David!

You wrote on Wed, 31 Mar 2010 23:31:01 -0400:

DHL> Symantec Ghost -- The only Symantec product I swear by and not swear
DHL> at!

I sware at Symantec <.>

--
With best regards, gufus. E-mail: stop.nospam.gbbsg.RemoveThis@shaw.ca

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, FredW!

You wrote on Thu, 01 Apr 2010 13:49:33 +0200:

FL>> Can you suggest a few /good/ ones?

F> I use Macrium Reflect Free:
F> http://www.macrium.com/reflectfree.asp

Thanks Fred Smile

--
With best regards, gufus. E-mail: stop.nospam.gbbsg.DeleteThis@shaw.ca

David H. Lipman · External Since: Jul 04, 2003 Posts: 2245

From: "gufus"

| Hello, David!

| You wrote on Wed, 31 Mar 2010 23:31:01 -0400:

DHL>> Symantec Ghost -- The only Symantec product I swear by and not swear
DHL>> at!

| I sware at Symantec <.>

Tag -- You're it.

USB DOS driver and DOS CONFIG.SYS instructions.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, David!

You wrote on Thu, 1 Apr 2010 18:09:44 -0400:

DHL> Tag -- You're it.

Hehe... I'll go jump on my server, I'm away on my notebook right now.

DHL> USB DOS driver and DOS CONFIG.SYS instructions.

Smile

--
With best regards, gufus. E-mail: stop.nospam.gbbsg DeleteThis @shaw.ca

David H. Lipman · External Since: Jul 04, 2003 Posts: 2245

From: "gufus"

| Hello, FredW!

| You wrote on Thu, 01 Apr 2010 13:49:33 +0200:

FL>>> Can you suggest a few /good/ ones?

F>> I use Macrium Reflect Free:
F>> http://www.macrium.com/reflectfree.asp

| Thanks Fred Smile

http://clonezilla.org/

http://www.easeus.com/disk-copy/index.htm

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

gufus · External Since: Mar 23, 2010 Posts: 21

Hello, David!

You wrote on Thu, 1 Apr 2010 18:12:41 -0400:

FL>>>> Can you suggest a few /good/ ones?

DHL> http://clonezilla.org/
DHL> http://www.easeus.com/disk-copy/index.htm

Thanks David Smile

--
With best regards, gufus. E-mail: stop.nospam.gbbsg.RemoveThis@shaw.ca

Lil' Abner · External Since: Jan 14, 2005 Posts: 23

"gufus" wrote in

> Hello, Dave!
>
> You wrote on Mon, 29 Mar 2010 21:34:45 -0400:
>
> DC> I swear by imaging programs, first thing I did with my laptop was
> make DC> my own image.
>
> I never did setup any imaging programs.
>
> Can you suggest a few /good/ ones?

I use Acronis True Image Home to make a disk image once a week
automatically to a seperate internal drive.
I use Second Copy to update all my modified documents to a network computer
every night, so the most I stand to lose is one day's changes.
Acronis Disk Director is also an excellent application and in my option has
Norton's Partition Magic all beat to hell.
True Image and Disk Director can both be mounted on a single CD if you have
both apps installed.
I formerly used Ghost and Laplink to perform the above routines but due to
Windows 7 incompatibilty issues I wound up using Acronis and Second Copy.
Both work flawlessly and in the background.

--
--- Everybody has a right to my opinion. ---