Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Virus got me BAD! [RESOLVED]


  • This topic is locked This topic is locked

#16
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
OK. That looks usefull.

Rename Systemprofile_NTUSER.DAT.txt as a backup for what we will do next.

Copy FromRepairFolder_ntuser.dat.log to the c:\windows\system32\config\systemprofile directory

Then try and reboot into that Windows install.

Let me know if it works. I'll keep them crossed. :tazz:

Regards,
  • 0

Advertisements


#17
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
Ok, thanks.

I'll try that tonite when I get home from work.
  • 0

#18
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Keep me posted. :tazz:
  • 0

#19
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I did what you said but was not able to log in; same result as before. :)

What do we do next? :tazz:
  • 0

#20
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Can you see if you have this file:
c:\windows\repair\RegBack

Let me know.

Regards,
  • 0

#21
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I searched my entire C drive. This file does not exist.
  • 0

#22
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Which files are there in the Repair folder?

Regards,
  • 0

#23
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I answered that one in a previous post. "This folder contains the files:autoexec.nt, config.nt, default, ds_SAM, ds_SECURITY, ds_SOFTWARE, ntuser.dat, sam, secsetup.inf, security, setup.log and software."

Do you think there should be more files?
  • 0

#24
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
There should be more yes, but maybe we can manipulate secsetup.inf into helping us.

Can you find the part under the header:
[Registry Values]
and post that here.

Regards,
  • 0

#25
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
Here you go...

Attached Files


  • 0

Advertisements


#26
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Can you add this line
machine\software\microsoft\windows nt\currentversion\winlogon\Userinit=1,"C:\WINDOWS\system32\userinit.exe"
after:
machine\software\microsoft\windows nt\currentversion\winlogon\allocatecdroms=1,"0"

Then find c:\autoexec.bat
Rightclick it and open in notepad
Post the content of the file.

Regards,
  • 0

#27
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
The line has been added.
The Autoexec.bat file is empty. What does that mean?
  • 0

#28
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts

The line has been added.
The Autoexec.bat file is empty. What does that mean?

View Post


Nothing special. I was just checking that it wouldn't interfere.

Can you try rebooting. I'm hoping the extra line will enable your normal user-account to log in.
If it does, please try not to reboot untill we have applied a more permanent solution.

Regards,
  • 0

#29
Dinofish

Dinofish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts
I tried rebooting but no such luck.

Do you think this has to do with the registry? Is there a way to rebuild one or to create one? Once inside I can restore to an earlier date. Your thoughts...
  • 0

#30
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
The problem is that rebuilding the regsitry from the outside is usually such a brutal change that System Restore is no longer an option.

Just checking. When you try to boot into safe mode, you should get a prompt that enables you to choose System Restore.
Do you get that one?

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP