Bob, The reason that this happens is because Turn off system restore (my computer | properties | system restore (visible only as admin)) is unchecked and so it restores itself each time.
Having had to wrestle such snakes recently, have you tried using a RESTORE POINT from a date before this infection started? Start the computer, F8 to bring up SAFEMODE choice then pick Choose a restore point or some such and go from there. Make sure you clean all TEMP files and folders. I sincerely hope you don't have to reformat the HD. Claudine ________________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Thursday, April 23, 2009 7:51 AM To: RBASE-L Mailing List Subject: [RBASE-L] - Re: OT - no DOS box (FIXED!) Karen, I am jealous! I have ran ComboFix, SpyBot,Adaware,Malwarebytes, AVG and some others. I have ran them many times! In safe mode, regular mode, and angry mode. SpyBot and ComboFix report that they found and fixed the rootkit infection, but when the PC restarts, the @#...@#$ thing reinstalls itself again. It will even reinstall in safe mode! I have searched the forums and it now appears my only recourse is to format the hard drive and reinstall Windows. What a bummer. If I could ever meet the person who wrote this stuff I would like to shake their hand..... after I cut it off so they could not keyboard code any more. -Bob --- RBASE-L =======================3D=======================3 D= TO POST A MESSAGE TO ALL MEMBERS: Send a plain text email to [email protected] (Don't use any of these words as your Subject: INTRO, SUBSCRIBE, UNSUBSCRIBE, SEARCH, REMOVE, SUSPEND, RESUME, DIGEST, RESEND, HELP) =======================3D=======================3 D= TO SEE MESSAGE POSTING GUIDELINES: Send a plain text email to [email protected] In the message SUBJECT, put just one word: INTRO =======================3D=======================3 D= TO UNSUBSCRIBE: Send a plain text email to [email protected] In the message SUBJECT, put just one word: UNSUBSCRIBE =======================3D=======================3 D= TO SEARCH ARCHIVES: Send a plain text email to [email protected] In the message SUBJECT, put just one word: SEARCH-n (where n is the number of days). In the message body, place any text to search for. =======================3D=======================3 D=
