Ukash Removal and File Repair

Hi Elise, I too have a similar problem. after starting up in safe mode with networking the screen then goes white, If i touch the off button and X the "end now box" my desk top comes up. I run Rkill and the spybot i have and they say all clear.. i cannot access the malware i get an error "5".. i cannot run the emsisoft.. any help please ... Jim

scousepie, in safe mode/command prompt look for the following file and delete it if present: c:\documents and settings\<your username>\application data\skype.dat

Thank you for your swift reply i will try it later .. Jim

Hi Elise. when i do that it and click safe mode/prompt command it scrolls down then i press enter and up pops a cmd.exe box with the words ..  c:\Documents and setting\James>

i am running XP

Just type explorer and press enter, that will load the desktop.

 I can get on desk top

and can run commandline scanner

only for a short time then says press any biutton and when i do it goes off. cannot run emergency kit scanner

Sorry, I don't understand what you mean with your last post.

Can you type the following at the command prompt instead and press enter?

del "%appdata%\skype.dat"

You should then return to the prompt without any further message. Restart the computer and see if normal mode works now.

Hi Elise,

There seems to be some confusion about who your replying to. It's Scousepie who have the issues you mentioned. You kindly replied to my issues and thanks very much.

After the Ukash attack my computer seems to be running OK apart from that I can't open any files that I had. I can open newly added files. As you say I've probably lost all my JPEGS,PDF's Word,excel etc that were damaged during the attack. I'll have to accept that.

I tried a Kapersky file recovery program which wanted an original and a damaged version of the file to run. If I had the original I wouldn't be looking for a repair. Are these people real ?

^{Hi Elis, when i click safemode/command prompt it goes to  another page .. windows xp and when i click that ne page is m my click my name page to get on which then goes to  cmd.exe page which says .. documents and setting\james>}

Yes and at that point you need to type the command as I gave you in my previous post.

now says .. filename or directory name or volume label syntax is incorrect

del"%appdata%\skype.dat" .. i typed in