When nothing else works and you don't have access to another computer,
that's the only time *I* use System Restore.
If it worked,you still have a 'Friend With a Problem'. You *NEED* to get
said friend set up with some decent security skills and software.
Do whatever you can to download either MBAM or SAS, but *don't* install
whichever you choose while the pooter is still running in "full windows
mode", then reboot into SAFE mode and install it and run it in SAFE mode.
(Both MBAM and SAS are good, I'm just more versed with MBAM)
I just went thru that on a "LD phone call from an old friend" thingie.
(warning; friend is not exactly friendly/skilled with pooter use)
His was the "MS Removal Tool" fakeware. I don't know what variant of
this crap/scare/fakeware or dropper was used, but it did all of the nasties:
1) blocked access to his installed "security software"(PCcillin)
2) blocked access to any reasonably well-known 'security' site to
download any goodies.
3) wouldn't allow any remote access app to work.
Some of the above might be in error, as this was all done by phone and
all of it was thru the eye>brain>mouth>phone>ear>brain interface. (I
still have to slap him up longside the haid about reading dialog boxes
back to me..)
So I emailed MBAM and some other files and docs (with files renamed).
Long string of the usual snags, dead CDR drive in his (uninfested)
worklaptop, his lack of skills.... 4 hours later.
"We" finally got MBAM set up and running in SAFE Mode.
Friend is buying MBAM full/paid tomorrow... it worked well!
(FWIW, paid-for MBAM runs in the background, worth it!)
The immediate problem (AS2011) is gone, but tomorrow is gonna be another
wringer session, setting up remote access and a bunch of cleanup on his
pooter