sytem restore not accessible

Hello, I'm looking for help on these topics :
I am running Win XP PRO SP1 and i have different problems with this machine which has been infected. I hope to have cleaned them out, but i still have several things not working :
1 - i cannot open system restore; when i click on START>HELP AND SUPPORT, nothing happens
2 - when i boot up i get the message : "IE 6 has been removed from this computer. Do you want to erase your personal settings? " When i click no, i get the message "you must remove your current language version of IE before you install a new language version. To do this....." I removed IE and reinstalled it several times, but i keep getting these error messages. IE6 seems to work more or less (i can surf)
i tried  already fixing the registry with registry checkup, but it did not help for those topics
any help is appreciated

any ideas
LVL 93
Who is Participating?
CrazyOneConnect With a Mentor Commented:
How the System Restore Utility Uses Drive Letters;EN-US;287505

Information on System Restore and Password Restoration;EN-US;295050 

System Restore Suspended on System Drive Although Enough Space;EN-US;299904

System Restore and Hard Disk Space;EN-US;300044

from here 

download the fixwinxphelp.vbs file


start > Run helpctr -regserver

Both the above do the same thing and this is to set certain registry values.
To use them just double click on the file or run it like you do any of your programs or files.

this is the changes it makes








Repair System Restore

Right click on C:\Windows\Inf\SR.inf and select
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

nobusAuthor Commented:
hello Crazyone ! thanks for the quick response - you're not sleeping !
answers to your suggestions : = bad link  = engine not found
start > Run helpctr -regserver   = did nothing for me
Right click on C:\Windows\Inf\SR.inf and select    = ?? what ??
found nothing in the other links up to now

>>>  = engine not found

I am not having the problem of getting this web site and downloadin the said file

>>>Right click on C:\Windows\Inf\SR.inf and select    = ?? what ??

Select INSTAll

nobusAuthor Commented:
hey Crazy1,
>>>  = engine not found

I am not having the problem of getting this web site and downloadin the said file  <<<

that is ok, read carefully, it was the link above
I installed the sr.inf and it still does not open the help and support


Ah ok it comes across as virus, try this

Double Check for viruses
Online Scanners

 Norton Web Services  
Virus Detection provides an analysis of your results and offers suggestions for further action. It does not examine compressed files or fix infected files.

When Symantec receives notification about a new virus, we develop and post a solution as quickly as possible. We are committed to providing swift responses to all virus threats, including Trojan horses.

 Trend Micro HouseCall

eTrust Online antivirus scanner

PC Pitstop Virus Scan
When the download completes, you will receive an ActiveX security dialog for the PC Pitstop virus scanner. Click Yes to install the scanner and proceed to the virus scan.

If you are currently running an antivirus package such as Norton Antivirus, it may detect our own virus detection file as a virus. If this occurs and you wish to use our scanner, please (temporarily) disable any active background virus checking software before scanning, or add our signature file (PAV.SIG) to the scanner's file exclusion list

Check for adware and sypware and browser hijackers. The following link is a list of tools to try out.
nobusAuthor Commented:
As i sai in my first post, i cleaned them out, as good as possible with all the necassary tools; i ran Hijackthis and i found no malware, but you can check it - maybe i missed something :
and when i tried to run the onlinescan from it went to the page, but did not download the engine, so i could not run it

Logfile of HijackThis v1.98.2
Scan saved at 9:53:18, on 17/08/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Documents and Settings\Henri\Mijn documenten\Mijn eBooks\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - Startup: Resume Windows Update Installation.lnk = C:\WINDOWS\Windows Update Setup Files\ie6setup.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Onderzoekscentrum - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common Files\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .ssc: C:\WINDOWS\Downloaded Program Files\Ubizen\SmartStart\NPSmartStart32.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) -
O16 - DPF: {94B964F0-45CC-11D4-9F1D-0060085C7782} (Version Class) -
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) -

>>>As i sai in my first post, i cleaned them out

So what? So you think that means you are clean? Huh don't bet on it. Run Spybot and AdAware and I do mean run both of them. Then run at least two online AV's. If that doesn't help then give this a try.

How Do I Do a "Repair Installation"? 

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP;en-us;315341

Visual aid to the above procedure
Click on How To Run a Repair Install

You May Lose Data or Program Settings After Reinstalling, Repairing, or Upgrading Windows XP;EN-US;312369

Data Loss May Occur After Reinstalling, Repairing, or Upgrading Windows XP;EN-US;312368
nobusAuthor Commented:
>>>As i sai in my first post, i cleaned them out

So what? So you think that means you are clean? Huh don't bet on it. Run Spybot and AdAware and I do mean run both of them. Then run at least two online AV's. If that doesn't help then give this a try.

Crazy1 : you misunderstood, that was the first thing i ran, both of them, updated and more of those checkers and cleaners. Thanks for the links on repairing, but that is not an option, as you loose all the program settings; i prefer in that case to loose some time and do a fresh install.

But i still hope somebody brings me the light though...

points go up and will be awarded A grade for any of both questions above
>>> you misunderstood

I don't think so since you did not mention it.

>>>Thanks for the links on repairing, but that is not an option, as you loose all the program settings

Nope you do not please read the those links I provided about reparis. I am curious though where you go this idea that you would loose PROGRAM settings. If you have a true XP CD then no you will not loose those settings.


Symantec's award-winning solution is compatible with a range of workstations, network servers, and mail servers, including Microsoft Windows® 2003, Exchange® 2003, and Domino™ Server 6.5. It also supports Netware® Secure Console and 64-bit Intel® Itanium™ 2 hardware. Like all Symantec products, Symantec AntiVirus Enterprise Edition is supported by Symantec Security Response, the world's leading Internet security research and support organization.
oops sorry I posted the my last comment in the wrong question.
nobusAuthor Commented:
Crazy1 : Sorry if i was not clear enough in my first post; i said i hoped i cleaned them out, which was not very clear; my apologies.
As for repairing, i had bad experiences, but that does not mean i'm not interested in your links, and certainly now i will give them a try, after a proper backup, to be on the safe side.
the bad experiences were that after running the repair, all the installed programs and links were gone; that is to say they were still on the computer, but removed from the program list. Well, surely there was something i missed there.
BTW, since you're not sleeping, do you reside in Europe? Wa can be neighbours...

>>>BTW, since you're not sleeping, do you reside in Europe?

Ummm no USA, just having problems about not being able to sleep. :)

Yeah sometimes (very Rare) problems do happen when doing a Repair. I cannot guarantee that you won't run into problem but the chances if you follow the instructions are very slim that you should encounter the problem you stated.
nobusAuthor Commented:
thanks Crazy1 for all the effort you put in this post. and sorry for not being able to sleep; maybe you can try counting EE Questions instead of sheep??
Right now I'm preparing the backup, and if nothing useful comes up in the next few hours, i'll try first the repair, and if that does not work out, the full install. (I do not mind loosing some time, but i like to find out what is wrong)

so.... still waiting for the the brilliant suggestion

Were you able to get to System Restore?  It is also in Start -> Programs -> Accessories -> System Tools
Also, check in your registry in the keys:



Look for programs that you do not recognize and search them on google.  You might have a program that is starting up every boot that is not found or is not removable by ad-aware or spybot.
nobusAuthor Commented:
Points go to Crazyone; and the repair did not loose my program settings (one thing learned)
I was able to access system restore, and most thingies worked, except the NAV which i could not install, or uninstall; so i'm busy now reformatting the system.

Thanks Crazy1

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.