Korean Job Discussion Forums

chaz47 · Joined: 11 Sep 2003

I've been trying to do a System Restore on a Korean Windows XP laptop. The System Restore icon from the Start Menu is missing, it displays the generic Windows icon instead of the appropriate one. Several other Administrative Tools also show the same symptoms.

I tried to click on the icon several times but nothing ever came of it.

Eventually I restarted the system in Safe Mode with Command Prompt and successfully began a System Restore. About 75% of the way through the machine starts this long beep punctuated only by a CPU spike.

I restarted the machine again in Safe Mode and told it to go into the last Good Configuration. The machine then opens to a dialog for the System Restore saying that the Restore Point was too far back and that another more recent one should be chosen. I tried it again with a date 2 weeks later and the same thing happened.

Before I could try it again my girlfriend cancelled the whole procedure and started browsing the internet for the daily gossip. Rolling Eyes

The machine still works but the performance is abysmal. On start up there's a command prompt window that opens, it's title is something like "WPROGRA~1WoperWoperu.exe"... (note the "W" is actually the funky Korean won symbol on the same key as the forward stroke, not available on my keyboard).

This command prompt window shows nothing except a random flashing cursor point around the window at various places. The window can be closed after which 4 or 5 spyware applications ask for access to the network.

SuperHero · Joined: 10 Dec 2003 Location: Superhero Hideout

complete fresh reinstall.

chaz47 · Joined: 11 Sep 2003

Well I fiddled further and got a virus scan of it. It is "Win32:virut-2b" , unfortunately the infection seems to have spread too deeply and upon restart I can't get past the login window... then desktop wallpaper... nuthin else

It seems drivers were infected and then quarantined by the antivirus software?

It appears that another system restore from command prompt safe mode is working... now that I know the bug's name I'll search for specific cures tomorrow, that is of course if the restore works.

blackjack · Joined: 04 Jan 2006 Location: anyang

you will probably have to turn system restore off to get rid of the virus otherwise it will hide in the system restore files

bondjimbond · Joined: 29 Dec 2007 Location: Seoul

Aye... if your documents and personal data are uninfected, back 'em up and wipe the hard disk... otherwise, well, simply wiping it is your best option.

Demophobe · Joined: 17 May 2004

Hurl it out the Windows, into the great Vista for the Ultimate Big Smash On the Driveway.

Get a Mac and never look back, buddy. Mac is the shizzle.

SuperHero · Joined: 10 Dec 2003 Location: Superhero Hideout

Temporary · Joined: 13 Jan 2008

I suggest downloading UBCD4WIN. It will fix just about anything even from blue screens. Check TPB or Mininova, or Isohunt.

Usually its updated with newest version of definitions and such.

This is a self boot CD no risk of infecting the media.. Make sure you scan your usb keys or any external drives that you may have had pluged into the machine. Especially if you have autorun enabled.

There are a lot of good "self boots" that are chalk full of great tools to restore dead OS.

You can manually empty the restore directory if you do this.

Demophobe · Joined: 17 May 2004

SuperHero · Joined: 10 Dec 2003 Location: Superhero Hideout

chaz47 · Joined: 11 Sep 2003

I managed to get it operational again but it is still heavily infected. I'm pretty sure the majority of her personal files are infected too.

I realized how bad the infection was at first by downloading and installing Avast. By the time the program had scanned the machine at start up it's own directories had been infected.

I'm thinking she has to take it to a tech to save what little she can and get the beast wiped. Any ideas about the cost?

SuperHero · Joined: 10 Dec 2003 Location: Superhero Hideout

Does this computer have only one partition? if so that makes it a little more difficult.

If the o/s and files (music, teaching, video etc) are on different partitions then all you need to do is reinstall windows and you'll be set with no loss of important data.

If not, then I would recommend taking the harddrive out, put it in an external case and scan it on a different computer. While there, back up all important files to a new disc/dvd(s). Return the drive to the new computer and reinstall windows.