Virus that disables system restore and hardware device manager?

[arunbg]

Hi,
My PC runs on Windows XP Professional SP2.
Today when I turned on my PC, I found that my desktop appearance had changed, more specifically the start taskbar was the white Windows classic version, not the usual blue XP version. But I didn't take it much seriously, thinking somebody else might have changed settings before me.

But then when I tried to play music in Windows media player, the program signalled an error, stating that my sound card or drivers(Realtek audio) were not properly connected or were malfunctioning. I tried to play in other media players, but was not able to get audio output. So I checked my device manager, to confirm whether the soundcard was detected. I was shocked to find that the list of devices was empty. But almost all other hardware except the sound card, seem to be working fine!

I was now suspecting a virus, although there had been no recent downloads or installations from unknown sources. So I ran a virus scan(Norton) and still nothing showed up.

Then as a last resort, I tried System Restore and got my second shock, when I found that all previous restore points including the ones I set manually, were gone! I have run out of options

Has anyone had any experience or knows of anything similar? Is a reloading of the operating sysytem the only way out?

Thanks in advance.

 

[Crosson]

It sounds like maybe the computer started up in safe mode.

Run the msconfig, go to the startup tab, and make sure a box isn't checked that says "startup in safe mode".

 

[arunbg]

It works

As you said, I ran msconfig, and as I thought the selective start option(just to uncheck all those pesky messenger sevices from startup; all drivers were checked) was checked, not diagnostic. For the sake of it, I clicked normal startup, loading all services and drivers(I should have thought of all this ages ago). On restart, voila everything was back to normal again. Well almost, system restore still hasn't got any previous restore points, but atleast all hardware has been detected and are functioning properly
It was as if safe mode was running without the computer(and me) knowing it! With system restore hoodwinked as well, should I still suspect a virus?

BTW, thanks a ton Crosson for your timely help.

 

[Beller]

I'm afraid it's not something you did.
My lap top just got hte same virus. My device manager has been erased and the computer won't read my restore disk and all my restore points are gone as well.

 

[LudusRex]

As a scientist, my first response would be to gather more information about the situation. It is important to understand the specific symptoms and behaviors of the virus in order to effectively combat it.

Based on the description provided, it appears that the virus has targeted and disabled certain system components, specifically the system restore and hardware device manager. This could be a sign of a sophisticated and targeted attack, as these are critical components that can be used to restore a system to a previous state or troubleshoot hardware issues.

In order to address this issue, I would recommend taking the following steps:

1. Run a thorough scan with a reputable antivirus software: Since the virus was not detected by the initial scan with Norton, it is possible that it is a new or unknown virus. Running a scan with a different antivirus software may help to identify and remove the virus.

2. Research the specific symptoms and behaviors of the virus: This can help to identify the type of virus and potential solutions that have worked for others who have encountered it.

3. Check for any recent downloads or installations: It is possible that the virus was downloaded or installed unknowingly. Look for any suspicious files or programs and remove them if necessary.

4. Consider seeking professional help: If the virus cannot be removed or the system cannot be restored, it may be necessary to seek help from a professional computer technician.

In terms of your specific situation, reloading the operating system may be a last resort option if all other attempts to remove the virus have failed. However, this should only be done as a last resort and with caution, as it will result in the loss of all data and programs on the computer.

In the future, it is important to regularly back up important files and keep antivirus software up to date to prevent and mitigate the impact of potential viruses.