[jackh12]

Hi,

Think I got a trojan horse on the system, was getting pop up after pop up from something called "malware doctor". Anyway as soon as they started appearing and crashing my netbook I shut the computer down and now whenever i try to restart it I get the BSOD just after the windows XP loading page(when starting normally). When I try to boot in any safe mode it loads as far as mup.sys before freezing and then going to the BSOD.

Can anyone help with this? Not worried about losing any data on the computer, its not used for anything beyond basic word processing and web surfing. Also, don't know if its relevant but its a samsung netbook, so no CD drive.

Thanks, this forum is a life saver!

[Advertisements]

and I'm not sure if this will help being that this was caused by a infection. If it does then I am going to include further instructions to have you get assistance with the infection.

1. To start the Recovery Console directly from the Windows XP CD you would do the following:

* Insert the Windows XP cd in your computer.
* Restart your computer so you are booting off of the CD.
* When the Welcome to Setup screen appears, press the R button on your keyboard to start the Recovery Console.
* The Recovery Console will start and ask you which Windows installation you would like to log on to. If you have multiple Windows installations, it will list each one, and you would enter the number associated with the installation you would like to work on and press enter. If you have just one Windows installation, type 1 and press enter.
* It will then prompt you for the Administrator's password. If there is no password, simply press enter. Otherwise type in the password and then press enter.
* If you entered the correct password you will now be presented with a C:\Windows> prompt and you can start using the Recovery Console.
2. Type map and press enter.
It will give you the drive letters. Note down the letter of you CD-ROM. If it is a letter other than E you should replace the letter e when applying the expand command later on if the command is needed to be applied.

ren c:\windows\system32\drivers\atapi.sys atapi.old
(It will returns to the prompt again without notification)
Copy c:\windows\servicepackfiles\i386\atapi.sys c:\windows\system32\drivers
(If you get a notification "1 file(s) copied you don't need to do the next expand command and go to exit command. But if you get notification that the file doesn't exist proceed with expand command)
expand e:\I386\atapi.sy_ c:\windows\system32\drivers
(You should be notified that the file expanded)
exit
You may remove the CD or let Windows boot normally.


Thanks to farbar for the instructions


Now if this works right then follow the instructions below immediately.


I suggest you go to the Malware Removal and Spyware Removal Forum and run all the steps located in the
START HERE. These self-help tools will help you clean up 70% of problems on your own.
If you are still having problems after doing the steps, then please post the reguested logs in THAT forum.
If you are unable to run any of the tools then start a new topic in the malware forum and put this in the subject line...I am unable to run any malware tools

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

Add a link to this topic so that malware tech can see what steps have been taken here

[rshaffer61]

and I'm not sure if this will help being that this was caused by a infection. If it does then I am going to include further instructions to have you get assistance with the infection.

1. To start the Recovery Console directly from the Windows XP CD you would do the following:

* Insert the Windows XP cd in your computer.
* Restart your computer so you are booting off of the CD.
* When the Welcome to Setup screen appears, press the R button on your keyboard to start the Recovery Console.
* The Recovery Console will start and ask you which Windows installation you would like to log on to. If you have multiple Windows installations, it will list each one, and you would enter the number associated with the installation you would like to work on and press enter. If you have just one Windows installation, type 1 and press enter.
* It will then prompt you for the Administrator's password. If there is no password, simply press enter. Otherwise type in the password and then press enter.
* If you entered the correct password you will now be presented with a C:\Windows> prompt and you can start using the Recovery Console.
2. Type map and press enter.
It will give you the drive letters. Note down the letter of you CD-ROM. If it is a letter other than E you should replace the letter e when applying the expand command later on if the command is needed to be applied.

ren c:\windows\system32\drivers\atapi.sys atapi.old
(It will returns to the prompt again without notification)
Copy c:\windows\servicepackfiles\i386\atapi.sys c:\windows\system32\drivers
(If you get a notification "1 file(s) copied you don't need to do the next expand command and go to exit command. But if you get notification that the file doesn't exist proceed with expand command)
expand e:\I386\atapi.sy_ c:\windows\system32\drivers
(You should be notified that the file expanded)
exit
You may remove the CD or let Windows boot normally.


Thanks to farbar for the instructions


Now if this works right then follow the instructions below immediately.


I suggest you go to the Malware Removal and Spyware Removal Forum and run all the steps located in the
START HERE. These self-help tools will help you clean up 70% of problems on your own.
If you are still having problems after doing the steps, then please post the reguested logs in THAT forum.
If you are unable to run any of the tools then start a new topic in the malware forum and put this in the subject line...I am unable to run any malware tools

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

Add a link to this topic so that malware tech can see what steps have been taken here

[jackh12]

Thanks for the fast reply.

Like I said its a netbook so no CD drive(and I don't have an external one). Would it be possible to boot a OS from a USB drive? Its a relatively new USB drive and the netbook is only about a year old.....


Update

Tried to boot from a USB drive(copied the WIN XP OS onto it). Changed the boot order etc but it says "No bootable partion in table". I assume this means the USB drive isn't compatible?

Edited by jackh12, 18 September 2010 - 04:05 PM.

[rshaffer61]

Did you check in the bios to make sure it is set to boot to a USB drive?