As a newbie, I reconize that each of my posts, especially any New Topic may in fact be "old Hat "to most users
If it is, plese excuse me and try to forget the whole thing

In brief, as you Win folks know, System Restore is probably the easiest way to remove any problem PROVIDED you know when the problem came on board.......in VISTA it takes only 3 or 4 clicks and you're into SYS RES.

You may choose any date you wish, either one of your own or one of an existing list. I've used it several times and it has always worked fine until SAVEKEEP!

Some my ASAV programs will not even detect SK and no program gets any of it deleted or quarantined etc. Especialy as an older but still a newbie to modern problems, I was totally stumped, especialy when it blocked access to any site that said it could delete SK.

The really vicious part is that SK over rides any date you chose as the Restore Date and instead uses the actual date and time to the minute on the actual current date , thus preserving itself.

I had to use a local professional and after 2 hours he had cleaned 99% of SK and the remaining fragments were harmless. He would not disclose the method he used.

One of the BIG problems is that other black hats may copy these SK procedures, thus making more malware unable to be deleted by Sys Res and possible crippling ANY use of that powerful tool

If there is some interest, I will discuss two approaches that just might work as a counter attack

Cheers to all

Hi whrx, welcome to the Piriform Community Forums


Please read over and follow the guide here and then post the required logs.

Good advice, but at least two major problems:

All of the action on SAVEKEEP took place at least two weeks ago and it a professional who finally cleared SK

I have tried repeatedly to DL a workable copy of Comedian. I had hoped the last DL which showed no problems would over write the prior unuseable copy, alas it did not and apparently created its own new folder; As a real newbie on this (remember this computer is only 1+ yrs old and until then was using Win 2000, given as pity by a neighbor lad because I was then using Win 98). Any attempt to run CMD lasts about 2 sec then says CMD has ceased working.....only option is to quit.

In a nutshell, I think I need to delete at least one and possibly more folders, but my unoffiicial VISTA guidebook avoids this entire topic, including even how to locate files.

Would appreciate any help on 2nd problem, but there seems to be little interest so far on SAVEKEEP
TIA WHRX

Since you are having problems with Comedian, please skip that step and move onto the rest of the steps and post the logs I need.

Many thanks Spy Sentinal and also to DennisD, Hazelnut, and yes Fireyman also. Each of you have done your best and I HAVE tried hard to get up to at last a little speed, but is has become obvious that a combination of:

1. My obvious lack of even the basic modern computer skills (I cannot sucessfully follow most of the suggestions)

2. My hunt and peck typing
3. My failures in posting
4. My lack of knowledge to be of any help to others

I have decided to retire 99% from this forum, and unless something really drastic occurs, I believe it will better for all concerned if I regress to "Read Only" status. If any serious problems develope, I will rely on paid local experts, as I did with SAVEKEEP

I have just one more new topic, very generic," Encryption and Keystroke Grabber Virus." Hopefully I will learn something. Otherwise I now agree with my wife who for seveal weeks has urged me to quit "spending too much time on problems and topics that are way over my head.....Thanks Again Cheers to all WHRX

Hi whrx,


If you like I can go ahead and close this topic. If you ever need anything, we are always here to help. We make this the most easy, and user friendly experience we can to help you through problems.

Thanks very much for your offer, please end all my topics except the last one RE: Encryption and Keystroke
Grabber

I had no idea there was any way to end topics nor in fact any need to, have never seen any such option on my screens. Just in case I do return as a poster and not just "Read Only" that I have decided upon, pls tell just how I can end a topic

TIA over and out Willard

You're welcome. I will always be here if you need help, just shoot me a PM and I can reopen this topic.

Members cannot open or close topics so you will need to PM me or another Mod.