.....Late to the party (again!!))......

ok - What we have here is a fairly common scenario, which is, unfortunately,
best dealt with not in newsgroups, but in 1:1 help sessions on a proper
forum for spyware problems.

As Harry (I think?) has already said, you should post your original data to
the Windows XP groups, and there they will give you up-to-date links to
appropriate forums.
Alternatively, go direct to Bleeping Computer, and read the instructions
there on how to post log to the spyware forums (fora?) , then follow those
instructions, and see what they say.
One of the problems with some of these nasties is that the leopard changes
spots every week - and the resulting mess may be something that no-one
recognises at first glance.

If you need detailed assistance, please feel free to mail me direct (but be
aware that IT MAY TAKE ME A FEW DAYS TO RESPOND, DUE TO OTHER COMMITMENTS) -
didn't mean to shout, but I'll let it stand, as a friend is seriously ill
(no-one known to the groups, BTW), and I have to deal with that before the
fun of NG interactions

All the Best


--
Noel Paton
CrashFixPC

Nil Carborundum Illegitemi
www.crashfixpc.co.uk
"Job" wrote in message
...
Hi Shane. Good to hear from you and thanks for the
suggestions. I don't think my daughter's computer has a
partition but I will check when I get back to her home this
coming weekend. I will also try your
"%systemroot%\system32\restore\rstrui.exe" prompt.

I read about BartPE at http://www.nu2.nu/pebuilder/ and that
looks worthwhile to try when I'm at her computer. I can
access the Internet in Safe Mode and might be able to
download the BartPE Installer via her DSL. I will give you
an update afterwards.

Hope your medical conditions have improved over the past
year.

P.S. I seem to recall reading somewhere that XP install
files are contained in something like i386. Does that ring
any bell for you?

Jim


"Shane" wrote in message
...

Is there a method whereas I can force the System Restore
to
proceed past the
"Confirm Restore Point Selection" window and complete its
process?

Thank you.


Try this:

"To start System Restore using the Command prompt, follow
these steps:

1. Restart your computer, and then press and hold F8
during the initial
startup to start your computer in safe mode with a Command
prompt.
2. Use the arrow keys to select the Safe mode with a
Command prompt
option.
3. If you are prompted to select an operating system, use
the arrow keys
to select the appropriate operating system for your
computer, and then press
ENTER.
4. Log on as an administrator or with an account that has
administrator
credentials.
5. At the command prompt, type
%systemroot%\system32\restore\rstrui.exe,
and then press ENTER.
6. Follow the instructions that appear on the screen to
restore your
computer to a functional state."

If that doesn't work, then I'd say, offhand, no. Either the
infection is
still present and still stopping it, or necessary file(s)
have been
corrupted or deleted and that is stopping it.

Most of my time is spent in XP Pro, and I could use a
regularly updated
BartPE cd (with NOD32, Trend Micro Sysclean, Stinger, McAfee
Virusscan and
Spybot S&D on there, not to mention Firefox and a host of
other goodies such
as Nero and Drive Image), the same on a USB stick; full
image backups that
run daily; and ERUNT which runs first boot every day and
saves up to 7
previous registry backups. It would be nice to know if your
daughter's
machine had as much as a hidden partition containing the
Windows files that
damaged or missing system files could be restored from. If
she doesn't have
even that then options are pretty limited. Without a CD she
can't run the
'Recovery Console' - though it is next to useless for most
stuff anyway -
unless it has previously been installed to the HD (which it
obviously
hasn't).

You personally couldn't burn a BartPE disc/stick without XP
or Server2003 -
but if you had a fast broadband connection you could be
supplied with much
of this stuff - e.g. a BartPE ISO (~450MB) though I expect
various license
agreements say not to. Not that having one at this stage
guarantees
anything, but you would be able to manipulate the
installation without
booting the HD.

You can also acquire XP itself (just not the necessary key)
via Bittorrent,
the veracity of which can be confirmed by checking the
checksums, for
running
SFC /scannow with, for example, or for doing a repair
reinstallation (if she
doesn't have a hidden partition containing the necessary
backup system
files).

Shane