Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Problems after removing Malware - Win 2K Pro


  • Please log in to reply
2 replies to this topic

#1 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:01:35 PM

Posted 24 September 2005 - 11:40 AM

Hello,

Working on a Win 2000 Pro machine, removing malware. Owner had installed Win Antispyware
2005, which itself is malware, according to:

http://www.spywarewarrior.com/rogue_anti-s...re.htm#products

Some of the malware I removed using Spysweeper, Norton A/V, and Trend Micro on line
scanner:
moneytree
internet optimizer
winad
hotbar
java byteverify
180 search assistant
a better internet
Serhs.exe trojan
cash back

As a result, there was a corruption in the Winsock (the computer would not surf the
internet), and I repaired that easily by using Winfix. Anyway, now the machine will
not boot into safe mode, nor does the start menu open. The button pushes, but then
stays 'in' and nothing opens or happens. It also will not open when I try the windows
button on the keyboard (which I understand to be the start menu shortcut). Other
shortcuts do work, such as windows+r to get the run box.

Any ideas how to effect a repair? Owner does not want a clean install of Windows
at this time.

Thanks so much.

Albert Frankenstein
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:12:35 PM

Posted 24 September 2005 - 12:36 PM

If you have access to the machine you would normally click on start>help, but you stated you do not have that capability, so I will post what it says in there.

To use emergency repair on a system that will not start

You can use the Windows 2000 emergency repair feature to fix problems that may be preventing you from starting your computer. This includes problems with your registry, system files, partition boot sector, and startup environment. However, you may not be able to use the emergency repair process to fix your system unless you have created an Emergency Repair Disk (ERD), which you can create using the Backup utility. If you haven't created an ERD, you can still attempt to use the emergency repair process to fix your computer, but the emergency repair process may not be able to fix your problems.

The following steps provide a general overview of the emergency repair process:

Start your computer from the Windows 2000 Setup disks or the CD

You can start your system using either the Windows 2000 Setup disks or the Windows 2000 CD. However, you can only use the CD to start your computer if your computer hardware and BIOS support this functionality.

Choose the repair option during setup
After your computer starts, the Setup program will start. During Setup you will be asked whether you want to continue installing the Windows 2000 operating system. You must press ENTER to continue. This will start the installation process, which allows you to repair your system. During this process you can choose whether you want to install a fresh version of Windows 2000, or whether you want to repair an existing installation of Windows 2000. To repair a damaged or corrupt system, you should press R. You will then be asked whether you want to repair your system using the Recovery Console or the emergency repair process. You should press R if you want to repair your system using the emergency repair process.
Choose the type of repair
You can choose either the fast repair option, which is the easiest and doesn't require any user interaction, or you can choose the manual repair option, which requires user interaction. The fast repair option will attempt to repair problems related to the registry, system files, the partition boot sector on your boot volume, and your startup environment (if you have a dual-boot or multiple-boot system). The manual repair option lets you choose whether you want to repair system files, partition boot sector problems, or startup environment problems, but it doesn't let you repair problems with your registry. For example, using the manual repair option, you can attempt to repair only your system files if you know your partition boot sector and your startup environment are both intact.
The manual repair option should only be used by advanced users or administrators.
The fast repair option will use a backup copy of the registry that was created when Setup was first run on your system. If you choose this option, you may lose settings or preferences you have created since Setup was first run.
If you want to manually repair individual registry files or replace your entire registry, you can use the Recovery Console. However, this is recommended for advanced users only.
To start the repair process, you should have the 1.44 MB ERD that you created in the Backup utility, and the original Windows 2000 installation CD. If you do not have an ERD, the emergency repair process can attempt to locate your Windows 2000 installation and start repairing your system, but it may not be able to do so.
Note
If the emergency repair process can't fix your system, you can try using the Recovery Console or you can try reinstalling Windows 2000.

If you need the information posted regarding the recovery console let me know as the help files are too lengthy to post here and I will send them in an email attachment if you wish.

#3 Albert Frankenstein

Albert Frankenstein
  • Topic Starter

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:01:35 PM

Posted 24 September 2005 - 12:48 PM

Thanks so much for the quick response. I will now ponder my next course of action...

For what it's worth, I have a typo in my original message. I did not use
Winfix. Rather I used Winsockfix. Thanks.

--
Albert Frankenstein
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users