Past malware, which I believe to have been killed, but my restore points disappear

I had a computer virus some time ago, and I killed it.
But then I notice a small ongoing problem.

My restore points are missing. I did some troubleshooting, and found that the space for restore points on drive C was set to zero.
I upped it, and I created a few restore points.

So far so good.

A few days later, the restore points were all gone.
A message
"The system has not created any restore points"

Well, OK.

I had done a malware removal thread over at bleepingcomputer, after their process they declared the system free of malware, which I agree with. As I said, I am pretty good, so I killed it when I discovered it, which was just after I got it.

Then I noticed the problem with the restore points.

The thread over there on the malware is at
http://www.bleepingcomputer.com/for...some-stuff-but-i-want-someone-else-to-verify/

The one about restore points is at
http://www.bleepingcomputer.com/forums/t/584238/system-restore-has-not-created-any-restore-points/

Someone suggested trying SRM 2, which I did.

I posted a thread about the missing restore points here:
http://forums.majorgeeks.com/showthread.php?p=1923852&posted=1#post1923852

Someone suggested running MGTools.

I ran MGTools, and the log is below. Eldon suggested I start a thread here, so here I am.

Anyone have any ideas to isolate this issue?

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

Hm. I attached the log, but I don't see it.
Is the log here? If not it's on the other thread, and I can upload it here if necessary.

I wonder why I can't see the log? Did I make an error?

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

I just restarted the software protection service.
We'll know by tomorrow.

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

I just looked, 20 minutes later, software protection service is stopped again.
So that's the problem. Something is stopping it.

I am looking in the event viewer logs.
It says
The Software Protection service entered the stopped state.
The multimedia class scheduler stopped too.
The windows error reporting service stopped too.

- System

- Provider

[ Name] Service Control Manager
[ Guid] {555908d1-a6d7-4695-8e1e-26931d2012f4}
[ EventSourceName] Service Control Manager

- EventID 7036

[ Qualifiers] 16384

Version 0

Level 4

Task 0

Opcode 0

Keywords 0x8080000000000000

- TimeCreated

[ SystemTime] 2015-08-05T16:08:14.371454100Z

EventRecordID 709886

Correlation

- Execution

[ ProcessID] 716
[ ThreadID] 6924

Channel System

Computer Dell

Security


- EventData

param1 Multimedia Class Scheduler
param2 stopped
4D004D004300530053002F0031000000


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 004D004D 00530043 002F0053 00000031


In Bytes

0000: 4D 00 4D 00 43 00 53 00 M.M.C.S.
0008: 53 00 2F 00 31 00 00 00 S./.1...

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

I just looked, stopped again.

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

It seems to depend on RPC, and that is started.

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

It stopped again.
Is it supposed to be running or not?

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

Is software protection related to system restore or not?
I read about it, and it might be microsoft licensing.

 

Re: Past malware, which I believe to have been killed, but my restore points disappea

I found this.
http://www.howtogeek.com/forum/topic/win-7-system-restore-service-name