Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

System Restore Is Encountering a VERY WEIRD problem

by bananas_in_pajamas Jul 11, 2007 7:53PM PDT

I think I accidently downloaded some viruses a few days back... so like my first solution was to turn to system restore.I can get into system restore BUT when i get to the "confirm restore point" page, and i press next NOTHING happens. I've pressed the next button like 500 times and still NOTHING happens. I've even tried running system restore from safe mode and from a command prompt but I still get the EXACT same problem. Any one have any ideas as to how to fix system restore or how to make the "next" button work on the "confirm restore point" page? OR better yet, does anyone know how to do system restore entirely in the boot up menu? (if it's possible) THANX EVERYONE!=D

Discussion is locked

16 Posts
- Collapse + Expand Details
- Collapse -
Boot into Safe Mode. . .
by Coryphaeus Jul 11, 2007 8:19PM PDT

One of the options should be something like "Last known good configuration."

Mine doesn't say "confirm restore point". When do you get this message?

- Collapse -
"confirm restore point"
by bananas_in_pajamas Jul 11, 2007 8:33PM PDT

After I pick a restore date and press next there's a page called "confirm restore point", it says like click next and your computer will be restored to the chosen date. But like ive said before nothing happens when i press next

- Collapse -
Try this
by tomron Jul 11, 2007 9:56PM PDT

Note: If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem....

What is your OS?

Do you have zone alarm?

Since you suspect a virus maybe purge system restore.

Try purging(flushing)system restore.

First disable system restore then scan in safe mode with an anti virus and also use AVG ANTISPYWARE

Reboot then scan again in normal mode,create a new restore point.


Tom

- Collapse -
Never saw that. . .
by Coryphaeus Jul 12, 2007 8:43AM PDT

Did you try the Safe Mode choice?

- Collapse -
System Restore is encuontering a VERY WEIRD PROBLEM
by bananas_in_pajamas Jul 12, 2007 2:05PM PDT

Yes I've tried safe mode as stated in the original message... Does anyone have any guesses what kind of a virus is responsible for disabling the "next" button on the "confirm restore point page"? and does anyone know where to locate such a virus...? OR if its not a virus can someone please give me an explanation as to why the next button fails to work? (My OS is windows xp btw)

- Collapse -
bananas_in_pajamas
by tomron Jul 12, 2007 2:25PM PDT
- Collapse -
OK
by tomron Jul 12, 2007 4:46PM PDT

Don't take offense to this LINK something could of caused a problem,Step 1: Verify System Restore is enabled & Step 2: Verify System Restore is active.

Try MSCONFIG to get into safe mode.BOOT.INI tab>check the safe boot option>click OK to restart.The computer will now start in safe mode.This should work.

If it works disable SR

Have avg antispyware already installed in case this works then scan with it and scan with your AV

Don't forget to uncheck the safe boot option when done or it will keep booting in safe mode.

Tom

- Collapse -
I forgot.....
by tomron Jul 12, 2007 4:48PM PDT

Did you try last known good config.

- Collapse -
Steps I've taken so Far
by bananas_in_pajamas Jul 13, 2007 1:37AM PDT

Ok so i havent done last known good configuration yet cause i dont know where it'll take me to...but i have scanned my computer for spyware in safe mode using AVG and i got this report
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:32:54 2007-7-13

+ Scan result:


[1024] VM_009A0000 -> Downloader.Zlob.aty : No action taken.
[1180] VM_00950000 -> Downloader.Zlob.aty : No action taken.
[1652] VM_00940000 -> Downloader.Zlob.aty : No action taken.
[1712] VM_008D0000 -> Downloader.Zlob.aty : No action taken.
[1940] VM_00A10000 -> Downloader.Zlob.aty : No action taken.
[2064] VM_00A30000 -> Downloader.Zlob.aty : No action taken.
[2092] VM_00A10000 -> Downloader.Zlob.aty : No action taken.
[212] VM_00A10000 -> Downloader.Zlob.aty : No action taken.
[2132] VM_00A50000 -> Downloader.Zlob.aty : No action taken.
[214Cool VM_00390000 -> Downloader.Zlob.aty : No action taken.
[2156] VM_00B10000 -> Downloader.Zlob.aty : No action taken.
[2204] VM_00B30000 -> Downloader.Zlob.aty : No action taken.
[2320] VM_00940000 -> Downloader.Zlob.aty : No action taken.
[2344] VM_01230000 -> Downloader.Zlob.aty : No action taken.
[242Cool VM_008D0000 -> Downloader.Zlob.aty : No action taken.
[2460] VM_003A0000 -> Downloader.Zlob.aty : No action taken.
[254Cool VM_00AA0000 -> Downloader.Zlob.aty : No action taken.
[4040] VM_00F80000 -> Downloader.Zlob.aty : No action taken.
[472] VM_00900000 -> Downloader.Zlob.aty : No action taken.
[540] VM_00AE0000 -> Downloader.Zlob.aty : No action taken.
[552] VM_01710000 -> Downloader.Zlob.aty : No action taken.
[576] VM_00DE0000 -> Downloader.Zlob.aty : No action taken.
[964] VM_00A30000 -> Downloader.Zlob.aty : No action taken.
[96Cool VM_00A50000 -> Downloader.Zlob.aty : No action taken.
[972] VM_00AF0000 -> Downloader.Zlob.aty : No action taken.


::Report end


I;ve gotten the same thing like 5 tiems already and quarrantine and deleting it doesnt work. Do you think this could be the virus that's causing me so many problems?

- Collapse -
More Steps Taken
by bananas_in_pajamas Jul 13, 2007 1:40AM PDT

O BTW ive also tried doing system restore in safe mode but like same problem... (i think i already said this before but...)

- Collapse -
BTW
by bananas_in_pajamas Jul 13, 2007 2:11AM PDT

BTW just out of curiosity does anyone know what exactly downloader.zlob.aty does? I've tried googling it up but i can't get any answers.

- Collapse -
It's a trojan so it does whatever it's controller wants.
by r. proffitt Former Forum moderator Jul 13, 2007 2:25AM PDT

Trojan.Downloader.Zlob is a trojan horse that downloads other trojans and attempts to hijack Internet Explorers home page as well as anything else it's creator wants.

There is no limit to what it can do.

Bottomline? It's not wanted on any PC.

Bob

- Collapse -
bananas_in_pajamas
by tomron Jul 13, 2007 2:14AM PDT
- Collapse -
I would Disable it First But...
by bananas_in_pajamas Jul 13, 2007 8:16PM PDT

I would disable system restore before scanning for viruses but, as mentioned on your link "Turning off System Restore will clear out all previous restore points". I want to use system restore as a means of getting rid of my viruses...if all my previous restore points are cleared then i cant do that anymore. R U POSITIVE that I'll be able to get rid of my Trojan.Downloader.Zlob if I first disable system restore and then run AVG antispyware or any other reccomended anti spyware/virus program?

- Collapse -
not tomron, but
by jonah jones Jul 13, 2007 9:26PM PDT

if you don't clear your system restore points, you can clean your PC from now 'til doomsday and never have a clean machine

so you understand, Windows won't allow the system restore points to be altered (cleaned) as a means of 'protecting them'...

as for being POSITIVE, there are no garuntees....

jonah

,,.

- Collapse -
bananas_in_pajama
by tomron Jul 14, 2007 1:57AM PDT

How can I possibly give a guarantee,anything can happen.

I would disable SR,boot in safe mode,run avg anti spyware,and a AV if you have one.Reboot in normal mode and scan again,then enable SR again.

If you don't have an AV,try AVG ANTI VIRUS and if you like try TROJAN HUNTER

Point is that you have to try something.

Tom

Back to Computer Help forum

CNET Forums

Operating Systems
Software
Electronics & Gadgets
Hardware
Tablets & Mobile Devices
General Help
Brand Forums
Roadshow Autos
Off Topic

Other Forums

Forum Info