Infected with "XP Recovery"

BleepingComputer.com: Infected with "XP Recovery"

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Infected with "XP Recovery"

#1 sweetasman01

New Member

Group: Members
Posts: 3
Joined: 28-September 09

Posted 28 May 2011 - 09:38 AM

Hi,

My sisters laptop was infected with "XP Recovery". I used the tut on this site to remove it using rKill and running melwarebytes (spelling?). I have also run Unhidden files to unhide all the files on the hard disk. Unfortunately the virus has deleted the .ink files from the start menu. I dont really have time to manually put in all the links for the programs.

When I try to use the system restore to restore windows to a pre infected time it pops up a message saying "Windows restore cant fix your computer please reboot" so I THINK the comp is still infected. Nothing shows up in scans using Melwarebytes or the free Microsoft anti virus.

OS is XP SP3
Computer is a Lenovo 3000 N100 (model number unknown as it has rubbed off) update: model is Lenovo N100 0768-3NM

I have factory reset disks that I made when she first got the computer but have no idea how to use them. There is also a hidden partition that is 4gb in size on the disk for factory resets but I dont know how to activate it. Any help would be appreciated.

This post has been edited by sweetasman01: 28 May 2011 - 01:17 PM