Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus got me BAD! [RESOLVED]


  • This topic is locked This topic is locked

#16
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
OK. That looks usefull.

Rename Systemprofile_NTUSER.DAT.txt as a backup for what we will do next.

Copy FromRepairFolder_ntuser.dat.log to the c:\windows\system32\config\systemprofile directory

Then try and reboot into that Windows install.

Let me know if it works. I'll keep them crossed. :tazz:

Regards,
  • 0

Advertisements


#17
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
Ok, thanks.

I'll try that tonite when I get home from work.
  • 0

#18
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Keep me posted. :tazz:
  • 0

#19
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I did what you said but was not able to log in; same result as before. :)

What do we do next? :tazz:
  • 0

#20
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Can you see if you have this file:
c:\windows\repair\RegBack

Let me know.

Regards,
  • 0

#21
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I searched my entire C drive. This file does not exist.
  • 0

#22
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Which files are there in the Repair folder?

Regards,
  • 0

#23
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I answered that one in a previous post. "This folder contains the files:autoexec.nt, config.nt, default, ds_SAM, ds_SECURITY, ds_SOFTWARE, ntuser.dat, sam, secsetup.inf, security, setup.log and software."

Do you think there should be more files?
  • 0

#24
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
There should be more yes, but maybe we can manipulate secsetup.inf into helping us.

Can you find the part under the header:
[Registry Values]
and post that here.

Regards,
  • 0

#25
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
Here you go...

Attached Files


  • 0

Advertisements


#26
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Can you add this line
machine\software\microsoft\windows nt\currentversion\winlogon\Userinit=1,"C:\WINDOWS\system32\userinit.exe"
after:
machine\software\microsoft\windows nt\currentversion\winlogon\allocatecdroms=1,"0"

Then find c:\autoexec.bat
Rightclick it and open in notepad
Post the content of the file.

Regards,
  • 0

#27
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
The line has been added.
The Autoexec.bat file is empty. What does that mean?
  • 0

#28
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts

The line has been added.
The Autoexec.bat file is empty. What does that mean?

View Post


Nothing special. I was just checking that it wouldn't interfere.

Can you try rebooting. I'm hoping the extra line will enable your normal user-account to log in.
If it does, please try not to reboot untill we have applied a more permanent solution.

Regards,
  • 0

#29
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I tried rebooting but no such luck.

Do you think this has to do with the registry? Is there a way to rebuild one or to create one? Once inside I can restore to an earlier date. Your thoughts...
  • 0

#30
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
The problem is that rebuilding the regsitry from the outside is usually such a brutal change that System Restore is no longer an option.

Just checking. When you try to boot into safe mode, you should get a prompt that enables you to choose System Restore.
Do you get that one?

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP