A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » The Basics
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

System Restore says computer has not been changed



 
 
Thread Tools Display Modes
  #1  
Old July 29th 11, 08:13 PM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

My computer has apparently been hit be a virus. When I do a search on
Google and click on a result an ad page comes up. Also, I'm having trouble
creating some queries in Microsoft Access. Also, when I boot the computer
I get 2 messages saying a file is missing.

So I tried to do a system restore. It keeps telling me that it can't do
the restore because the computer has not been changed. I've tried it using
several different dates going back weeks. How can I fix this? I'm using
Windows XP Professional.
  #2  
Old July 29th 11, 08:29 PM posted to microsoft.public.windowsxp.basics
Tim Meddick[_3_]
external usenet poster
 
Posts: 1,020
Default System Restore says computer has not been changed

System Restore will only detect and able to restore changes to the SYSTEM
(the system part of the registry & system files) and any unwanted changes
that occur to the CURRENT USER's profile will not be included.

So perhaps it might be a suggestion to re-post here the details of what you
were trying to achieve with System Restore (i.e - what changes exactly were
you hoping to return to their former state?).

==

Cheers, Tim Meddick, Peckham, London. :-)




"Lee" wrote in message
...
My computer has apparently been hit be a virus. When I do a search on
Google and click on a result an ad page comes up. Also, I'm having
trouble
creating some queries in Microsoft Access. Also, when I boot the
computer
I get 2 messages saying a file is missing.

So I tried to do a system restore. It keeps telling me that it can't do
the restore because the computer has not been changed. I've tried it
using
several different dates going back weeks. How can I fix this? I'm using
Windows XP Professional.


  #3  
Old July 29th 11, 09:45 PM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

I'm not trying to restore changes. I'm trying to repair the system.
My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up. Also, I'm
having trouble creating some queries in Microsoft Access. Also, when I
boot the computer I get 2 messages saying csrss.exe is missing.

"Tim Meddick" wrote in
:

System Restore will only detect and able to restore changes to the
SYSTEM (the system part of the registry & system files) and any
unwanted changes that occur to the CURRENT USER's profile will not be
included.

So perhaps it might be a suggestion to re-post here the details of
what you were trying to achieve with System Restore (i.e - what
changes exactly were you hoping to return to their former state?).

==

Cheers, Tim Meddick, Peckham, London. :-)




"Lee" wrote in message
...
My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up. Also, I'm
having trouble
creating some queries in Microsoft Access. Also, when I boot the
computer
I get 2 messages saying a file is missing.

So I tried to do a system restore. It keeps telling me that it can't
do the restore because the computer has not been changed. I've tried
it using
several different dates going back weeks. How can I fix this? I'm
using Windows XP Professional.



  #4  
Old July 29th 11, 10:07 PM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

Since the partial restore the csrss.exe messages have gone away. I'm
still having problems with Access and Google.

Lee wrote in
:

I'm not trying to restore changes. I'm trying to repair the system.
My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up. Also, I'm
having trouble creating some queries in Microsoft Access. Also, when
I boot the computer I get 2 messages saying csrss.exe is missing.

"Tim Meddick" wrote in
:

System Restore will only detect and able to restore changes to the
SYSTEM (the system part of the registry & system files) and any
unwanted changes that occur to the CURRENT USER's profile will not be
included.

So perhaps it might be a suggestion to re-post here the details of
what you were trying to achieve with System Restore (i.e - what
changes exactly were you hoping to return to their former state?).

==

Cheers, Tim Meddick, Peckham, London. :-)




"Lee" wrote in message
...
My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up. Also, I'm
having trouble
creating some queries in Microsoft Access. Also, when I boot the
computer
I get 2 messages saying a file is missing.

So I tried to do a system restore. It keeps telling me that it
can't do the restore because the computer has not been changed.
I've tried it using
several different dates going back weeks. How can I fix this? I'm
using Windows XP Professional.





  #5  
Old July 29th 11, 08:52 PM posted to microsoft.public.windowsxp.basics
Jeremy Nicoll - news posts[_2_]
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

Lee wrote:

My computer has apparently been hit be a virus. When I do a search on
Google and click on a result an ad page comes up.


All searches, or just a specific one? What are you searching for?

Also, I'm having trouble creating some queries in Microsoft Access. Also,
when I boot the computer I get 2 messages saying a file is missing.


What file?


--
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to replacing "aaa" by "284".
  #6  
Old July 29th 11, 09:41 PM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

There are 2 messages:
"Windows cannot find C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."
and
"Could not load or run C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."

Jeremy Nicoll - news posts wrote
in nvalid:

Lee wrote:

My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up.


All searches, or just a specific one? What are you searching for?

Also, I'm having trouble creating some queries in Microsoft Access.
Also, when I boot the computer I get 2 messages saying a file is
missing.


What file?



  #7  
Old July 29th 11, 10:07 PM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

Since the partial restore the csrss.exe messages have gone away. I'm
still having problems with Access and Google.

Lee wrote in
:

There are 2 messages:
"Windows cannot find C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."
and
"Could not load or run C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."

Jeremy Nicoll - news posts

wrote
in nvalid:

Lee wrote:

My computer has apparently been hit be a virus. When I do a search
on Google and click on a result an ad page comes up.


All searches, or just a specific one? What are you searching for?

Also, I'm having trouble creating some queries in Microsoft Access.
Also, when I boot the computer I get 2 messages saying a file is
missing.


What file?





  #8  
Old July 29th 11, 10:14 PM posted to microsoft.public.windowsxp.basics
Jeremy Nicoll - news posts[_2_]
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

Lee wrote:

There are 2 messages:
"Windows cannot find C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."
and
"Could not load or run C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."


That's odd; I'd not expect anything to be trying to use a file in

...\Temp\...

as you log in, unless - say - you'd been uninstalling a product and it

a) told you you needed to reboot (so it could perhaps do some
file renames or deletes as the system is rebooted), and

b) set up (in the registry) a command to run that program next time
you booted, and

c) before rebooting, you manually, or some program that clears up
temporary files etc, deleted something from \Temp\

If you know how to look at the eventlogs, is it possible to find out what
task/process was looking for csrss.exe ?

Google suggests that csrss.exe is part of Windows, provided it's the copy in
C:\WINDOWS\system32. Perhaps the one in \Temp\ is infected?


Do you have antivirus software?

Have you run anti-malware scans?

--
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to replacing "aaa" by "284".
  #9  
Old July 30th 11, 12:23 AM posted to microsoft.public.windowsxp.basics
Tim Meddick[_3_]
external usenet poster
 
Posts: 1,020
Default System Restore says computer has not been changed


That's right! - Alarm bells should start to ring if you find any file wants
to be run from a TEMP directory (except for in the midst of a program's
installation 'setup', perhaps).

The normal location for [CSRSS.EXE] in the [system32] folder.

It was probably a virus which switched the correct path in the registry for
[csrss.exe] to it's own bogus version residing in the TEMP directory...
The 'real' [csrss.exe] file probably didn't go anywhere - it was just that
it's registered path had been altered.

You have tried, of course, running a *full* scan with your installed
Anti-Virus Software?

==

Cheers, Tim Meddick, Peckham, London. :-)




"Jeremy Nicoll - news posts" wrote
in message nvalid...
Lee wrote:

There are 2 messages:
"Windows cannot find C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."
and
"Could not load or run C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."


That's odd; I'd not expect anything to be trying to use a file in

...\Temp\...

as you log in, unless - say - you'd been uninstalling a product and it

a) told you you needed to reboot (so it could perhaps do some
file renames or deletes as the system is rebooted), and

b) set up (in the registry) a command to run that program next time
you booted, and

c) before rebooting, you manually, or some program that clears up
temporary files etc, deleted something from \Temp\

If you know how to look at the eventlogs, is it possible to find out what
task/process was looking for csrss.exe ?

Google suggests that csrss.exe is part of Windows, provided it's the copy
in
C:\WINDOWS\system32. Perhaps the one in \Temp\ is infected?


Do you have antivirus software?

Have you run anti-malware scans?

--
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to replacing "aaa" by "284".


  #10  
Old July 30th 11, 05:24 AM posted to microsoft.public.windowsxp.basics
Lee
external usenet poster
 
Posts: 16
Default System Restore says computer has not been changed

The csrss.exe messages are gone now even though the restore supposedly
wasn't done. I have AVG and Malaware and have scanned both several
times (before the phantom restore). I'm still having a problem with
Access and Google. I'll try scanning again.


"Tim Meddick" wrote in
:


That's right! - Alarm bells should start to ring if you find any file
wants to be run from a TEMP directory (except for in the midst of a
program's installation 'setup', perhaps).

The normal location for [CSRSS.EXE] in the [system32] folder.

It was probably a virus which switched the correct path in the
registry for [csrss.exe] to it's own bogus version residing in the
TEMP directory... The 'real' [csrss.exe] file probably didn't go
anywhere - it was just that it's registered path had been altered.

You have tried, of course, running a *full* scan with your installed
Anti-Virus Software?

==

Cheers, Tim Meddick, Peckham, London. :-)




"Jeremy Nicoll - news posts"
wrote in message
nvalid...
Lee wrote:

There are 2 messages:
"Windows cannot find C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe. ..."
and
"Could not load or run C:\DOCUME~1\User\LOCALS~1\Temp\csrss.exe.
..."


That's odd; I'd not expect anything to be trying to use a file in

...\Temp\...

as you log in, unless - say - you'd been uninstalling a product and
it

a) told you you needed to reboot (so it could perhaps do some
file renames or deletes as the system is rebooted), and

b) set up (in the registry) a command to run that program next time
you booted, and

c) before rebooting, you manually, or some program that clears up
temporary files etc, deleted something from \Temp\

If you know how to look at the eventlogs, is it possible to find out
what task/process was looking for csrss.exe ?

Google suggests that csrss.exe is part of Windows, provided it's the
copy in
C:\WINDOWS\system32. Perhaps the one in \Temp\ is infected?


Do you have antivirus software?

Have you run anti-malware scans?

--
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to replacing "aaa" by "284".



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 06:11 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2023, Jelsoft Enterprises Ltd.
Copyright 2004-2023 PCbanter.
The comments are property of their posters.