Virus Alert in System restore

  • Thread starter Thread starter TheSlaz
  • Start date Start date
T

TheSlaz

Guest
Just removed a virus from my son's computer. Went to restore the
computer from a good clean point and I noticed that all the System
Restore points are named "Virus Alert: Software Distribution service
3:00 A.M."

Concerned about the "Virus Alert" part of the description. Can I safely
restore; or is this telling me that there is a virus in the restore point?
 
Re: Virus Alert in System restore

From: "TheSlaz" <theslaz@gmail.com>

| Just removed a virus from my son's computer. Went to restore the
| computer from a good clean point and I noticed that all the System
| Restore points are named "Virus Alert: Software Distribution service
3::00 A.M."

| Concerned about the "Virus Alert" part of the description. Can I safely
| restore; or is this telling me that there is a virus in the restore point?

Interesting. I'll bet you removed some malware in the form of a fake anti virus but this
was never the case of a true "virus."

Does/Did the system show "Virus Alert!" in the system tray at the clock ?
If you view/viewed a folder using; view --> details did that date & time stamp show "Virus
Alert!".


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: Virus Alert in System restore

You are absolutely right on. There still is a "Virus Alert" in the
system tray and the "Virus Alert" does show after the date and time stamp.
I am doing another virus scan as we speak. Me thinks I have some work to
do! If I could do a system restore; that would make it easy!

David H. Lipman wrote:
> From: "TheSlaz" <theslaz@gmail.com>
>
> | Just removed a virus from my son's computer. Went to restore the
> | computer from a good clean point and I noticed that all the System
> | Restore points are named "Virus Alert: Software Distribution service
> 3::00 A.M."
>
> | Concerned about the "Virus Alert" part of the description. Can I safely
> | restore; or is this telling me that there is a virus in the restore point?
>
> Interesting. I'll bet you removed some malware in the form of a fake anti virus but this
> was never the case of a true "virus."
>
> Does/Did the system show "Virus Alert!" in the system tray at the clock ?
> If you view/viewed a folder using; view --> details did that date & time stamp show "Virus
> Alert!".
>
>
 
Re: Virus Alert in System restore

Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"TheSlaz" <theslaz@gmail.com> wrote in message
news:9rSFk.762$DK3.142@edtnps82...
> You are absolutely right on. There still is a "Virus Alert" in the system
> tray and the "Virus Alert" does show after the date and time stamp.
> I am doing another virus scan as we speak. Me thinks I have some work to
> do! If I could do a system restore; that would make it easy!
>
> David H. Lipman wrote:
>> From: "TheSlaz" <theslaz@gmail.com>
>>
>> | Just removed a virus from my son's computer. Went to restore the
>> | computer from a good clean point and I noticed that all the System
>> | Restore points are named "Virus Alert: Software Distribution service
>> 3::00 A.M."
>>
>> | Concerned about the "Virus Alert" part of the description. Can I safely
>> | restore; or is this telling me that there is a virus in the restore
>> point?
>>
>> Interesting. I'll bet you removed some malware in the form of a fake
>> anti virus but this was never the case of a true "virus."
>>
>> Does/Did the system show "Virus Alert!" in the system tray at the clock ?
>> If you view/viewed a folder using; view --> details did that date & time
>> stamp show "Virus Alert!".
>>
 
Re: Virus Alert in System restore

"The Real Truth MVP" <toidi@tpap.com> wrote in news:HaTFk.2831$Ws1.1839
@nlpi064.nbdc.sbc.com:

> Use my Remove-it software, it will remove that malware from your system.
> Choose yes for all options when prompted. Download it here
> http://pcbutts1.com/downloads/tools/tools.htm
>


Don't listen to this guy. If it really is a virus then play it safe and
wipe the HDD and reinstall.
 
Re: Virus Alert in System restore

Em Domingo, 5 de Outubro de 2008 00:41, The Real Truth MVP escreveu:

> Use my Remove-it software, it will remove that malware from your system.
> Choose yes for all options when prompted. Download it here
> http://pcbutts1.com/downloads/tools/tools.htm
>


do you know that you're runningnow.exe trips 3 anti-malware programs?
eSafe, F-Secure and Rising.

checkit out in www.virustotal.com
 
Re: Virus Alert in System restore

From: "TheSlaz" <theslaz@gmail.com>

| You are absolutely right on. There still is a "Virus Alert" in the
| system tray and the "Virus Alert" does show after the date and time stamp.
| I am doing another virus scan as we speak. Me thinks I have some work to
| do! If I could do a system restore; that would make it easy!

I knew it. :-)

Please do NOT visit PCBUTTS1.Com or use Remove-It. Besides that it is based upon at least
two plagiarized utilities (RogueFix and the MVP Hosts File) it is so simple that it fails
on the complex capabilities of the new fake anti virus scanners. The modified Hosts file
in Remove-It is malicious. It will block legitimate anti malware sites and other
legitimate sites.

Additionally, there is NO need to wipe the PC and re-install the OS after this.

Start by using Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

If that does NOT correct the display of "Virus Alert!" on Time and Date stamps, it is EASY
to fix...

Go to; Control Panel --> Regional and Language Options --> Regional Options -->
Customize --> Time
Change "Time format:" to; h:mm:ss tt

Hit "Apply" and then "Ok"

Now all your Date and Time stamps will no longer show "Virus Alert!".


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: Virus Alert in System restore

In article <HaTFk.2831$Ws1.1839@nlpi064.nbdc.sbc.com>, toidi@tpap.com
says...
> Use my Remove-it software, it will remove that malware from your system.
> Choose yes for all options when prompted. Download it here
> http://pcbutts1.com/downloads/tools/tools.htm
>
> Ignore any posts made by the Stalker Leythos, he's still in love with me.
> He started stalking me after I spurned his advances towards me.
> He said he would stop Stalking me If I stopped mentioning his name.
> As you can see that does not work. He is a sick obsessive STALKER.
>
>


Do you really want to trust someone that was banned from posting
directly to Microsoft Usenet servers, someone that has posted links to
pornographic materials on HIS WEBSITE, who's website is in the MVP HOST
Block list, and who provides a tool for your use that will block access
to reputable anti-malware sites without telling you he's doing it?

Do you really want to trust someone that has had to change their posting
identity after being busted by MS as a fake MVP?

Stalking, even in usenet is a crime, there are enough pages from your
filthy site to prove you're stalking me in your posts, I have them
documented and certified authentic - it's your call now Stalker.

--
Leythos - spam999free@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
 
Re: Virus Alert in System restore

From: "ArameFarpado" <a-farpado.spam@netcabo.pt>

| do you know that you're runningnow.exe trips 3 anti-malware programs?
| eSafe, F-Secure and Rising.

| checkit out in www.virustotal.com

They are False Positive declarations based upon its checking of various registry entries.

The file is a ZIP file that holds a self extracting archive file that extracts and runs a
VBS script, runningnow.vbs.

It is NOT malicious. However it was plagiarized and stolen from Andrew Aronoff's "Silent
Runners" VBS script and is based upon a version of Silent Runners that is a year old.
http://www.silentrunners.org/


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: Virus Alert in System restore

Those are false positives, but these are true.

The Troll has gone crazy
http://pcbutts1-therealtruth.blogspot.com/
The truth about the David Lipman Troll
http://www.google.com/search?source...US265&q=David+H.+Lipman+Troll+Extraordinaire+


--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"ArameFarpado" <a-farpado.spam@netcabo.pt> wrote in message
news:gc906k$ivm$1@registered.motzarella.org...
> Em Domingo, 5 de Outubro de 2008 00:41, The Real Truth MVP escreveu:
>
>> Use my Remove-it software, it will remove that malware from your system.
>> Choose yes for all options when prompted. Download it here
>> http://pcbutts1.com/downloads/tools/tools.htm
>>

>
> do you know that you're runningnow.exe trips 3 anti-malware programs?
> eSafe, F-Secure and Rising.
>
> checkit out in www.virustotal.com
>
>
 
Re: Virus Alert in System restore

The Troll has gone crazy
http://pcbutts1-therealtruth.blogspot.com/
The truth about the David Lipman Troll
http://www.google.com/search?source...US265&q=David+H.+Lipman+Troll+Extraordinaire+


--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:umDk1CoJJHA.1304@TK2MSFTNGP02.phx.gbl...
> From: "TheSlaz" <theslaz@gmail.com>
>
> | You are absolutely right on. There still is a "Virus Alert" in the
> | system tray and the "Virus Alert" does show after the date and time
> stamp.
> | I am doing another virus scan as we speak. Me thinks I have some work to
> | do! If I could do a system restore; that would make it easy!
>
> I knew it. :-)
>
> Please do NOT visit PCBUTTS1.Com or use Remove-It. Besides that it is
> based upon at least
> two plagiarized utilities (RogueFix and the MVP Hosts File) it is so
> simple that it fails
> on the complex capabilities of the new fake anti virus scanners. The
> modified Hosts file
> in Remove-It is malicious. It will block legitimate anti malware sites
> and other
> legitimate sites.
>
> Additionally, there is NO need to wipe the PC and re-install the OS after
> this.
>
> Start by using Malwarebytes Anti-Malware
> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
>
> If that does NOT correct the display of "Virus Alert!" on Time and Date
> stamps, it is EASY
> to fix...
>
> Go to; Control Panel --> Regional and Language Options --> Regional
> Options -->
> Customize --> Time
> Change "Time format:" to; h:mm:ss tt
>
> Hit "Apply" and then "Ok"
>
> Now all your Date and Time stamps will no longer show "Virus Alert!".
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
 
Re: Virus Alert in System restore

Em Domingo, 5 de Outubro de 2008 01:24, David H. Lipman escreveu:

> The modified Hosts file in Remove-It is malicious. It will block
> legitimate anti malware sites
> and other legitimate sites.


so it might not be a virus, but it's something like a rootkit.
 
Re: Virus Alert in System restore

Something tells me that as*holes like you don't know what you are talking
about, you think you do but you don't. Please visit
http://pcbutts1.com/downloads/fu.htm you might learn more about yourself.


--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"Flat Earth Society" <luddite@here.invalid> wrote in message
news:Xns9B2DABCFA2FFE67890326@127.0.0.1...
> "The Real Truth MVP" <toidi@tpap.com> wrote in news:HaTFk.2831$Ws1.1839
> @nlpi064.nbdc.sbc.com:
>
>> Use my Remove-it software, it will remove that malware from your system.
>> Choose yes for all options when prompted. Download it here
>> http://pcbutts1.com/downloads/tools/tools.htm
>>

>
> Don't listen to this guy. If it really is a virus then play it safe and
> wipe the HDD and reinstall.
 
Re: Virus Alert in System restore

From: "ArameFarpado" <a-farpado.spam@netcabo.pt>

| Em Domingo, 5 de Outubro de 2008 01:24, David H. Lipman escreveu:

>> The modified Hosts file in Remove-It is malicious. It will block
>> legitimate anti malware sites
>> and other legitimate sites.


| so it might not be a virus, but it's something like a rootkit.

No. It is not like a RootKit.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: Virus Alert in System restore

It's nothing which is why he cannot give you a straight answer. My hosts
file is just like anybody else's hosts file except I've added the sites of
people who publicly tried to take down my website, or stolen from me and
lied about it, and who publicly have posted lies about me in these
newsgroups. As far as I am concerned there is no reason to visit any of
those sites. Despite what the lying troll Leythos has said before in another
post before my Remove-it program updates your host file you are told about
it and what it is getting ready to do and what a hosts file does. You are
then given a choice to say yes or no. Mine is the only one that does that,
it always has. Next time you have any questions about any of my programs
then please ask me and not anyone else because depending on who you ask they
will lie. I am the only one who will tell you the truth about it because I
wrote it.


--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"ArameFarpado" <a-farpado.spam@netcabo.pt> wrote in message
news:gc9448$92o$3@registered.motzarella.org...
> Em Domingo, 5 de Outubro de 2008 01:24, David H. Lipman escreveu:
>
>> The modified Hosts file in Remove-It is malicious. It will block
>> legitimate anti malware sites
>> and other legitimate sites.

>
> so it might not be a virus, but it's something like a rootkit.
 
Re: Virus Alert in System restore

In article <xpUFk.2598$D32.1322@flpi146.ffdc.sbc.com>, toidi@tpap.com
says...
> Ignore any posts made by the Stalker Leythos, he's still in love with me.
> He started stalking me after I spurned his advances towards me.
> He said he would stop Stalking me If I stopped mentioning his name.
> As you can see that does not work. He is a sick obsessive STALKER.
>


Do you really want to trust someone that was banned from posting
directly to Microsoft Usenet servers, someone that has posted links to
pornographic materials on HIS WEBSITE, who's website is in the MVP HOST
Block list, and who provides a tool for your use that will block access
to reputable anti-malware sites without telling you he's doing it?

Do you really want to trust someone that has had to change their posting
identity after being busted by MS as a fake MVP?

Stalking, even in usenet is a crime, there are enough pages from your
filthy site to prove you're stalking me in your posts, I have them
documented and certified authentic - it's your call now Stalker.
--
Leythos - spam999free@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
 
Re: Virus Alert in System restore

In article <OpUFk.2599$D32.1065@flpi146.ffdc.sbc.com>, toidi@tpap.com
says...
> Ignore any posts made by the Stalker Leythos, he's still in love with me.
> He started stalking me after I spurned his advances towards me.
> He said he would stop Stalking me If I stopped mentioning his name.
> As you can see that does not work. He is a sick obsessive STALKER.
>


Do you really want to trust someone that was banned from posting
directly to Microsoft Usenet servers, someone that has posted links to
pornographic materials on HIS WEBSITE, who's website is in the MVP HOST
Block list, and who provides a tool for your use that will block access
to reputable anti-malware sites without telling you he's doing it?

Do you really want to trust someone that has had to change their posting
identity after being busted by MS as a fake MVP?

Stalking, even in usenet is a crime, there are enough pages from your
filthy site to prove you're stalking me in your posts, I have them
documented and certified authentic - it's your call now Stalker.
--
Leythos - spam999free@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
 
Re: Virus Alert in System restore

In article <vkVFk.326$8_3.161@flpi147.ffdc.sbc.com>, toidi@tpap.com
says...
> Ignore any posts made by the Stalker Leythos, he's still in love with me.
> He started stalking me after I spurned his advances towards me.
> He said he would stop Stalking me If I stopped mentioning his name.
> As you can see that does not work. He is a sick obsessive STALKER.
>


Do you really want to trust someone that was banned from posting
directly to Microsoft Usenet servers, someone that has posted links to
pornographic materials on HIS WEBSITE, who's website is in the MVP HOST
Block list, and who provides a tool for your use that will block access
to reputable anti-malware sites without telling you he's doing it?

Do you really want to trust someone that has had to change their posting
identity after being busted by MS as a fake MVP?

Stalking, even in usenet is a crime, there are enough pages from your
filthy site to prove you're stalking me in your posts, I have them
documented and certified authentic - it's your call now Stalker.
--
Leythos - spam999free@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
 
Re: Virus Alert in System restore

In article <vkVFk.326$8_3.161@flpi147.ffdc.sbc.com>, toidi@tpap.com
says...
> As far as I am concerned there is no reason to visit any of
> those sites. Despite what the lying troll Leythos has said before in another
> post before my Remove-it program updates your host file you are told about
> it and what it is getting ready to do and what a hosts file does.


Your crapware does block access to reputable websites - ask the
community if they trust those sites that you block access too, they will
say they trust them. As the community if they trust your sites - 100% fo
them will say no.

Why is it that your crap always lags the real authors updates?

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
 
Back
Top