19 replies to this topic

[TMGTEch]

I returned the HDD to the laptop (I pulled it out to try to recover some of my work documents) I didn't get the screen to chose which OS to start (I'm running Vista so most of my knowledge on fixing stuff doesn't work... Grrr MS) But by going into Startup repair then having the system run it's checks, find nothing it allowed me to go to advanced options. In advanced options I could get into the command prompt which allowed me to run those commands. Unfortunately in C:\Windows\ERDNT there is no Subs directory just a Cache directory. I tried to run Batch erdnt.con anyway but it came up as Batch isn't a recognised program. But on the bright side, it allowed me to attach an external HDD and I was able to pull most of my data off the drive.... I've still got about 100Gb to transfer and will do that tonight when I get home from work.

[CatByte]

Try this command at the prompt:

cd erdnt\hiv-backup

hopefully that will restore your windows.

Unfortunately, you had a very nasty rootkit onboard. If the registry backups don't work, at least you have a way to retrieve your files and start over.
Sometimes that's the best option when rootkits are involved.

Keep me updated.

[TMGTEch]

One good thing is if I do need to rebuild it, I can rebuild it without some of the junk I've uistalled over the last 6 or so months that I've had the laptop.

[CatByte]

true...it's good to completely wipe every now and then, but I'm sure you didn't plan it under these circumstances

[CatByte]

Due to inactivity this topic will be closed. If you need help please start a new thread.