Close

Results 1 to 12 of 12

Thread: XP Restore

  1. #1
    DF VIP Member DennisTheMenace's Avatar
    Join Date
    Aug 2009
    Location
    Pinhoe
    Posts
    228
    Thanks
    45
    Thanked:        26
    Karma Level
    188

    Default XP Restore

    Hi all,

    I hope somebody can help. Basically I was asked to clean up a infected PC which was full of spyware and malware etc .. i've never really seen anything like it, when you opened IE 7 yes 7 ... it had so many toolbars installed .. some of which looked right iffy ... anyway back to my problem ...

    Basically this PC had three profiles on it, and amongst one it had itunes with music etc and then some family photos ...

    Needless to say that I attempted a system restore using Hiren Boot CD .. basucally I booted the mini XP and then proceeded to use the ERD tools namely the system restore to restore the system back a few months ...

    And like magic this got rid of the infections so to speak .. however now when I look ast the contents of drive c: I can no longer see any files ... I have logged in as all three users and the same applies ... yet when you check the drive there is something taken up about 13 gig, so i'm sure the itunes music and family photos are there ..

    Is there anyway I can dig in the registry and find the profile and restore from this by using the command prompt ...

    I recall doing something like this years ago when XP was first out via the cmd prompt, and this resolved the issue, as you have the user profile and also the machine profile, any advice would be appreciated as really need to save the photos .. music we could recover if the worse came to the worse , as Apple would allow us to donwload all purchased music .. but if I could save the photos .. it would be good ..

    Thanks in advance
    DTM

  2. #2
    DF VIP Member Possy_99's Avatar
    Join Date
    Dec 2003
    Location
    UK
    Posts
    2,082
    Thanks
    15
    Thanked:        11
    Karma Level
    387

    Default Re: XP Restore

    if you cant see ANY files as you describe.. your problem isn't registry related.. don't go wasting your time and potentially messing things up even more by messing about in there..

    have you tried enabling viewing of hidden files?
    Sent from my PC using a keyboard

  3. #3
    DF Super Moderator
    evilsatan's Avatar
    Join Date
    Jul 2004
    Location
    Essex
    Posts
    20,079
    Thanks
    1,105
    Thanked:        3,241
    Karma Level
    1541

    Default Re: XP Restore

    If you boot to MiniXP, Mini Linux or another live OS can you access the HDD and see the files? If so backup all of the important files and then proceed from there. That way you know in the worst case scenario you have their photos etc. safe for a new OS install.

    Have you ran a full malware scan? As Possy says, enable viewing of hidden files as not too long ago a virus on one of my clients PCs did the same thing, also lost all desktop icons and it emptied the start menu. I viewed hidden files, selected the lot, right click, properties, unticked hidden and applied. Unfortunately this meant even files that should be hidden were visible, also the start menu folder was still empty so I had to manually rebuild it.


  4. #4
    DF VIP Member Possy_99's Avatar
    Join Date
    Dec 2003
    Location
    UK
    Posts
    2,082
    Thanks
    15
    Thanked:        11
    Karma Level
    387

    Default Re: XP Restore

    yeah, I'm finding it common that rogue's hide files nowerdays.. for future reference evil.. try this --> http://www.bleepingcomputer.com/forums/topic391939.html
    Sent from my PC using a keyboard

  5. #5
    DF VIP Member DennisTheMenace's Avatar
    Join Date
    Aug 2009
    Location
    Pinhoe
    Posts
    228
    Thanks
    45
    Thanked:        26
    Karma Level
    188

    Default Re: XP Restore

    Can see folders now but no iTunes folder or my pictures .. very strange ... yet it still looks as if space is being used by musivc and itunes music ... which I could try going back from the system restore I did but ERD doesn't go back .. not showing any restore points .... is there a way to run the system restore from a command prompt .. ??

  6. #6
    DF VIP Member Possy_99's Avatar
    Join Date
    Dec 2003
    Location
    UK
    Posts
    2,082
    Thanks
    15
    Thanked:        11
    Karma Level
    387

    Default Re: XP Restore

    system restore will not touch user files (including itunes music)

    best options have already been mentioned.. live disk or remove drive and attach to another (working) pc/laptop
    Last edited by Possy_99; 7th June 2011 at 04:48 PM.
    Sent from my PC using a keyboard

  7. #7
    DF VIP Member
    Welsh Pete's Avatar
    Join Date
    Apr 2004
    Location
    Ceredigion
    Posts
    4,523
    Thanks
    196
    Thanked:        95
    Karma Level
    681

    Default Re: XP Restore

    Personally, to save myself the headache I would have booted into safemode, pluggd in an external drive, backed up all 3 accounts and then format and reinstalled...sorted.
    Recent Mac convert...

  8. #8
    DF VIP Member danthescan's Avatar
    Join Date
    Dec 2003
    Location
    Midi Pyrenees
    Posts
    1,474
    Thanks
    4
    Thanked:        17
    Karma Level
    328

    Default Re: XP Restore

    Quote Originally Posted by Welsh Pete View Post
    Personally, to save myself the headache I would have booted into safemode, pluggd in an external drive, backed up all 3 accounts and then format and reinstalled...sorted.

    That is how it should be done.
    Backup User data and format,quicker easier and a lot less pain.

  9. #9
    DF Super Moderator
    DejaVu's Avatar
    Join Date
    Nov 2005
    Location
    Essex
    Posts
    9,107
    Thanks
    1,836
    Thanked:        4,004
    Karma Level
    953

    Default Re: XP Restore

    You checked to see if the iTunes folder and Pictures folder has not had the S Flag set? This would make them System files and would hide them even if Hidden Folder View is enabled. Some really bad threats to that 10 year OS now!

    I would have given up with this by now and simply used the XP sniffer dog to go hunting for MP3/AAC files.



    If he cant find them and he's allowed to look for system files. I'd be in file recovery mode - GetDataBack will find them without fail (if they still exist and probably if they dont!).

    If not, lesson learnt - Backup regularly!


  10. #10
    DF VIP Member Little John's Avatar
    Join Date
    Dec 2002
    Location
    Bolton
    Posts
    6,516
    Thanks
    96
    Thanked:        380
    Karma Level
    909

    Default Re: XP Restore

    Sounds like the current trick with spyware is to make all files hidden so set it to show hidden files and then change the ones you need to see to unhidden.

    Don't do them all do the desktop and reboot and make sure the hidden doesn't return.

    never underestimate the power of stupid people in large groups!:thumbup:

  11. #11
    DF MaSter moley2k5's Avatar
    Join Date
    Apr 2005
    Location
    Oop North
    Posts
    81
    Thanks
    2
    Thanked:        1
    Karma Level
    236

    Default Re: XP Restore


  12. #12
    DF Super Moderator
    evilsatan's Avatar
    Join Date
    Jul 2004
    Location
    Essex
    Posts
    20,079
    Thanks
    1,105
    Thanked:        3,241
    Karma Level
    1541

    Default Re: XP Restore

    Quote Originally Posted by moley2k5 View Post
    Good post but possy beat you to it


Similar Threads

  1. rangers restore some pride
    By diablos in forum Football
    Replies: 2
    Last Post: 21st October 2004, 10:14 PM
  2. System restore
    By Makaveli in forum The Dog and Duck
    Replies: 6
    Last Post: 23rd September 2004, 07:26 PM
  3. XP pro system restore
    By Floyd in forum PC Problems
    Replies: 3
    Last Post: 8th October 2003, 02:32 PM
  4. restore point on 2000 pro
    By 1badass in forum PC Problems
    Replies: 3
    Last Post: 6th July 2003, 08:54 PM
  5. Parkard Bell Restore CD'S
    By lennon in forum PC Problems
    Replies: 3
    Last Post: 22nd January 2003, 11:26 AM

Social Networking Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •