Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Running prompt in recovery mode


  • Please log in to reply
43 replies to this topic

#1 xodus2222

xodus2222

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 10:29 AM

Hello,

A few days ago malwarebytes sent out an update that managed to quarantine over 800 files that contained dll’s and registry information.  This happened to a lot of people.  They have given me, what they thing, is a fix, but I am little confused about a few things and need some guidance.  They sent me a file that I unzipped on my C drive.  I was then told to go into recovery mode and then launch the fix at the c prompt. 

 

The recovery console/menu is the one listed below…correct?

· Startup Repair

· System Restore

· System Image Recovery

· Windows Memory Diagnostic

· Command Prompt

I then choose command prompt and it gives me this

X:\sources>

If I saved the fix in C:MBAMFIX then it should look like this

X:\sources>C:\MBAMFIX ?

Will that take me to the folder where I then run the runthis.bat file?  Do I have to click run or what do I do to get the application to launch, as admin, and to run.  I am unsure about this last part.

 

I do appreciate any help you can give me.

 

 



BC AdBot (Login to Remove)

 


#2 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 19 April 2013 - 02:45 PM

The recovery console changes the drive letters..  x:\ is most likely your c drive.

 

if your are at x:\sources

- type what is inside the quotations "cd.." (2 periods) and press enter.

- once you are at x:\ go ahead and type "dir"

- if you saved MBAMFIX at the c drive, then the command "dir" should show you the file is located at the x drive.

- now you should be able to run the fix by typing "MBAMFIX"

 

let us know how it goes. :)


Edited by WalkingAtNight, 19 April 2013 - 02:47 PM.


#3 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 04:17 PM

I got in and got this message 

 

MBAMFIX>FIXTOOL.EXE/PMOFF The subsystem needed to support the image type is not present. C:\MBAMFIX>fixtool.exe/ quarantine - list ; grep "file.trojan[.]Downloader[.] ED." ; sed-e./file Trojan etc..... the subsystem needed to support the image type is not present. What do I do now please?          



#4 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 19 April 2013 - 04:30 PM

:scratchhead:

 

I'm guessing since the recovery console renames the c drive into x drive that now you're encountering this issue because it is still looking for c..

 

- Reboot computer, press F8 continuously

- Boot into safe mode with command prompt

- Log in

- At the command prompt, type "cd.." "cd.." until you are at the c:\ prompt.

- Now try running MBAMFIX

 

I've never used that fix, but this option thru command prompt doesn't rename the drive.  Hope it helps.



#5 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 04:55 PM

Thanks for the help, but it gave me the same error.



#6 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 19 April 2013 - 05:05 PM

You have followed their instructions correctly.  I don't know much more about what they are trying to fix etc.. My recommendation would be to contact them again and let them know you attempted the fix two different ways.  "It did run" but "encountered an error" and tell them what you mentioned here.  They should know better what to do with their fix that was given to you by them.

 

Hope they can help you and/or hopefully someone else here has encountered this issue in the past and can assist you.

 

----

Side question,

Are you able to use your computer?  Are you encountering problems with your computer? Or are you just trying to get back all those files that were deleted because you know Malwarebytes shouldn't have deleted it?


Edited by WalkingAtNight, 19 April 2013 - 05:11 PM.


#7 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 05:29 PM

The files were registry files, applications to make programs run and dll files.  It took away 800 files.  For some, it took more than 11000 files.  I can get on my pc.  However, I get dll missing errors, my internet explorer wont play videos or load pages all the way.  If I try to update IE, my pc goes dark with only a visible cursor and I have to restore.  Many programs are no longer working without the files.  This fix is suppose to release the files from quarantine and put them back.  Im just trying to get to that point now.



#8 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 19 April 2013 - 05:34 PM

Try this,

 

- Click on start

- On the search bar type cmd

- When cmd icon appears, right click and run as administrator

- At the command prompt type sfc /scannow

- Should take a while to check your windows files

 

I'm leaving for an appointment.  Will be back like in an hour or so. Maybe more..



#9 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 05:42 PM

I got it running and will report back.  Thanks again.



#10 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 06:45 PM

It spat out this huge file and said that it had corrected some issues.  However, when I tried to do the routine all over again in recovery mode, I got the same error message. 



#11 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 19 April 2013 - 06:50 PM

I'm back..

 

Reboot.

Run sfc /scannow again..  Lets see if it corrects more issues..  It can take more than one run to fix issues. 

 

-------

Also, this procedure has nothing to do with the fix from malwarebytes.  Just trying to get ur dll missing errors eliminated.  You might not need the malwarebytes fix anymore if this corrects all ur missing files.


Edited by WalkingAtNight, 19 April 2013 - 06:55 PM.


#12 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 19 April 2013 - 06:55 PM

Good to know.  I am now out and about and will run it when I get back in.  I do so appreciate your help and comments. 



#13 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 20 April 2013 - 10:38 AM

On the next run through it did not find any errors.



#14 WalkingAtNight

WalkingAtNight

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:15 AM

Posted 20 April 2013 - 11:23 AM

How is the computer functioning since the corrected issues on the first scan?



#15 xodus2222

xodus2222
  • Topic Starter

  • Members
  • 47 posts
  • OFFLINE
  •  
  • Local time:07:15 AM

Posted 20 April 2013 - 11:33 AM

Nothing has changed unfortunately.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users