157 replies to this topic

[Doug]

Edited the above to include link to ATF-Cleaner.exe download site

[cld]

hi doug i did everything that you outlined except the manual way to do the iso. any how now i'm getting "page failed to load" when i tried to down load the iso from one of the posts in this topic. perhaps if a new link was put into this thread it would work?

[cld]

ok now the fast reply isnt working again the tools in the reply are gone and i cant read my emails. i explained this the other thread i believe i rebooted.

[Doug]

It never rains but it pours. What Browser are you using? Consider using Internet Explorer 7.0 or 8.0 just for a moment. Right-click on the IE icon and select "Start with no add-ons" See how that goes for you.

[cld]

i was using firefox. ok i used IE and now i can view and switch folders in my email, but i am still getting a rar file so i guess i will have to get it the other way, which i will attempt tonight.

[paws]

Hi cld, something strange is going on here, Doug and I and maybe some of the other Techs will be joining forces to see if we can get you up and running again..............so I suggest you try to download the rc.iso file but this time we will use another source:(Only use IE for this please.)
http://www.webtree.c.../xp_rec_con.zip
Try this link, but check carefully please that the file you intend to download has the following characterics....
Name: xp_rec_con.zip
Type: WinZip File, 4.46MB
From: www.webtree.ca
if you are sure this is the file you are downloading then save it to your desktop.
Next extract the file to your desktop you should then get the following file:
xp_rec_con.iso
it should be 7.35MB
if you are happy that that you have the correct file then burn it to CD using ImgBurn.....I strongly suggest that you use ImgBurn and nothing else.......just copying the file using ordinary CD burning software will not work.......
Then you can follow my other instructions and boot from the CD and hopefully be able to get your machine going.

IMPORTANT if at any stage of the above you find that the information differs from that given by me then please STOP and report back..thanks

I know that you have experienced a bit of hassle over this......but I also see from your logs over in Infections Removal forum that your machine has had peer to peer file sharing applications on it (P2P)

If files have been downloaded from sources where their provenance is not guaranteed.......as most of them are not then this is exactly the sort of problem that is likely to follow. Once your machine is up and running again .... you will be doing yourself a big favour if you uninstall them and delete any downloaded files of less than known good provenance.
Regards
paws

Edited by paws, 18 May 2010 - 01:08 PM.

[Ztruker]

Hi cld, sorry I've been away a day or two, glad to see you are getting helped.

Please do one thing for me though. Please right click on this link using Internet Explorer rc.iso and select Copy shortcut, then paste that data in a reply here. I want to see what exactly you see when you click on a link.

It should look like this: http://www.thecomput...om/files/rc.iso

[cld]

hey Ztruker!! no problem and now it appears as though the new link works properly when i right click it says burn with imgburn that didnt happen before it would only let me open with winrar. but i still deleted without burning. THANK YOU for the help thus far from everyone and i in no way feel that i wasted time in any of the steps or at the malware forum. as a side note to all..please keep in mind that the pc i am currently using is my sisters. i am stilling waitng for my processor to arrive, i'm quite certain that it should be here tomorrow and then i can follow Ztrukers instructions to boot from the disk. BTW Paws when i clicked on you provided link the only difference was that it said WinRAR Zip file instead of Win Zip. which link should i download and use to burn? dont want to make an error here hmmm..interesting when i use firefox to try the original link it comes up as unable to load same for your new link, but paws link works the same way as i described, just wanted to see what would happen with firefox. still going to wait to see if its ok to proceed and make the disc for when i get my processor.. also i noticed that evry few seconds an hour glass appears by my cursor and i never noticed that before, just wondering could that be "anything"? i dont have anything downloading or anything like that

Edited by cld, 18 May 2010 - 05:28 PM.

[cld]

ok today i used the cd this is what happened.. blue screen with Windows Setup in upper left corner then loads files then it says setup is starting then i am presented with 3 choices 1. set up windows xp (when i choose that it soon says Setup can not find the EULA press F3 to quit, then it reboots and the same problem occurrs) 2. To repair an XP installation using recovery press r, this was the next one i tried.. then it asks which windows install and it has a whole bunch of commands CHKDSK etc. i tried that it said it appears to be in good condition 3. to quit press F3 after having chose xp install i was never asked for the admin password, maybe i did something wrong? i'm not quite certain because i did follow the instructions you gave

Edited by cld, 20 May 2010 - 03:38 PM.

[Ztruker]

Did you do as I asked?

Boot the CD and at the first opportunity, enter R to start the Recovery Console.
Next, choose which XP installation you want to login to. Normally this will be 1.
Lastly you will be asked for the Administrator password. Just press the Enter key as the Administrator does not have a password (unless you gave it one, then you would enter it).
From the command prompt, enter: chkdsk c: /r
Allow it to complete undisturbed. It can take an hour or more depending on the size of the hard drive.

The /r is important.

[cld]

i ran it as instructed and at the end it said that one or more files were fixed. when i rebooted i got this message: windows could not start because the following file is missing or corrupt. <windows root>\system32\ntoskrn/.exe please install a copy of above

[Ztruker]

Read this thread on a similar problem with a couple ways to fix it: Re: Missing file <Windows root>\system32\ntoskrnl.exe. help needed thank you

Try F8 and select Last known good configuration that worked first, see if that helps. Otherwise give the RC a try as mentioned.

Edited by Ztruker, 22 May 2010 - 08:06 AM.

[cld]

could you explain to me how would locate , copy and apply the copied file? would i have to use a working pc etc? last known good config was one of the 1st things that i tried before posted. thank you in advance

[Ztruker]

This is from the 2nd post in the link I provided, modified a bit to hopefully make it clearer:

1. Boot to recovery console from the CD you created from rc.iso.
2. Type ren \windows\system32\ntoskrnl.exe ntoskrnl.old and press Enter
3. Type copy \windows\system32\dllcache\ntoskrnl.exe \windows\system32 and press Enter
4. Reboot

See if that fixes the problem.

[cld]

hi Ztruker, i tried it a few times checking what i typed each time and made sure the spaces were where they were suppose to be but it didnt work. when i type in the 1st line and press enter it says can not find file, but i proceeded anyway but recieved the same message after doing the "copy" line.

Edited by cld, 23 May 2010 - 01:18 PM.