Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus Infection - Programmes Disabled


  • Please log in to reply

#76
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

A directory is what looks like a folder.  If you type: dir and hit enter it will tell you what is in the current folder which will often have subfolders in it.  

 

cd is the Change Directory command:

 

cd space and then the directory name and Enter and will it Change to the new Directory.

 

See if this one is easier to follow:

 

https://support.micr...en-us/kb/307545

 

Start with Part 2 Step 6


  • 0

Advertisements


#77
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

tried : "cd _restore{CDSFSD"+tab

got : the system cannot find the path specified

 

https://support.micr...en-us/kb/307545 won't open


Edited by elielieli, 18 December 2015 - 06:13 AM.

  • 0

#78
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

cd  \sys

 

then

 

dir

 

Look at what it tells you.  Don't blindly type what they wrote. 

 

Apparently there is another directory called "RPxx" where xx is a number.  You will need to do a dir to one of those directories then do another dir to see what is in there that starts with -Restore.  Then CD to one of them.

 

The link is good. 

 
https://support.microsoft.com/en-us/kb/307545

  • 0

#79
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

okay , I'm following instructions from the 2nd link , which is now working.

I'm at point 10.

theres no sign of : _REGISTRY_MACHINE_SAM , in any of the RP folders.


  • 0

#80
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

I checked mine and there is a _REGISTRY_MACHINE_SAM.  SAM is Security Accounts Management.  Doubt it changes much so you can try just leaving the original and replacing the others.


  • 0

#81
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

part 3 point 2

whenever i type any of these in , i get the message: the system cannot find the specified path

 

copy c:\windows\tmp\software c:\windows\system32\config\software 

copy c:\windows\tmp\system c:\windows\system32\config\system 

copy c:\windows\tmp\security c:\windows\system32\config\security 

copy c:\windows\tmp\default c:\windows\system32\config\default

 

​wait , I've just realised  I've been using the cmd in mini xp to carry this out instead of recovery console.

now that I'm in recovery console i am unable to type the commands , as some of my keys do not work.

​I've been working round this with cut and paste , which is not possible in recovery console.

 

this is too much rigmarole for me . how about a factory restore?


Edited by elielieli, 20 December 2015 - 07:00 AM.

  • 0

#82
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

do

dir  c:\windows\tmp

Does it show any files?

 

You can stay in miniXP for the whole thing if that is easier.


  • 0

#83
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

i get this : file not found


  • 0

#84
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

Go back to minixp and try it again.


  • 0

#85
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

same result


Edited by elielieli, 20 December 2015 - 12:03 PM.

  • 0

Advertisements


#86
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

if you can do  a factory restore that would probably be best.  Save any data you don't want to lose first.


  • 0

#87
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

as far as rescuing data is concerned , it looks as though there are some files I'm unable to access that were on the desktop.

they're not there now.

is there anyway to locate them or are they inaccessible in mini?


Edited by elielieli, 20 December 2015 - 01:31 PM.

  • 0

#88
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

They won't be on your desktop in minXP since it doesn't know your user name.

 

Look in C:\Documents and Settings\Asus\Desktop\  for your missing files.


  • 0

#89
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

as I'm only able to boot up with the hirens cd  , the normal method for a factory restore is not available.

how do i proceed?


  • 0

#90
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,017 posts
  • MVP

Normal Method for a factory restore is to hit F12 or some other key at boo (check the PC maker's website)t.  You normally don't need to boot into windows.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP