
am i infected or missing stuff after running the OTL thingy
Started by
rupertdigby
, Jan 29 2011 11:19 AM
#61
Posted 01 February 2011 - 08:02 PM

#62
Posted 01 February 2011 - 08:07 PM

when the open terminal pops up the black box has the letters sh-4.0# . i'm just typing where the line starts blinking, not starting a new entry line. is ok?
#63
Posted 01 February 2011 - 08:14 PM

That should be fine.
#64
Posted 01 February 2011 - 08:18 PM

do i need to send these 2 to you
#65
Posted 01 February 2011 - 08:18 PM

Yes, I need to see both of them.
#66
Posted 01 February 2011 - 08:23 PM

Search results for winlogon.exe
01c3346c241652f43aed8e2149881bfe /mnt/sda2/i386/winlogon.exe
490.5K Aug 10 2004
5fac810673f3bc3e9965ad9468788120 /mnt/sda2/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
ed0ef0a136dec83df69f04118870003e /mnt/sda2/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008
01c3346c241652f43aed8e2149881bfe /mnt/sda2/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 10 2004
01c3346c241652f43aed8e2149881bfe /mnt/sda2/i386/winlogon.exe
490.5K Aug 10 2004
5fac810673f3bc3e9965ad9468788120 /mnt/sda2/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
ed0ef0a136dec83df69f04118870003e /mnt/sda2/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008
01c3346c241652f43aed8e2149881bfe /mnt/sda2/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 10 2004
#67
Posted 01 February 2011 - 08:24 PM

Search results for explorer.exe
12896823fb95bfb3dc9b46bcaedc9923 /mnt/sda2/WINDOWS/ServicePackFiles/i386/explorer.exe
1009.5K Apr 14 2008
7712df0cdde3a5ac89843e61cd5b3658 /mnt/sda2/WINDOWS/$hf_mig$/KB938828/SP2QFE/explorer.exe
1009.0K Jun 13 2007
a0732187050030ae399b241436565e64 /mnt/sda2/WINDOWS/$NtServicePackUninstall$/explorer.exe
1008.0K Aug 10 2004
a0732187050030ae399b241436565e64 /mnt/sda2/WINDOWS/$NtUninstallKB938828$/explorer.exe
1008.0K Aug 10 2004
f54d30e8c799b962c380ea2961c74733 /mnt/sda2/WINDOWS/explorer.exe
1009.5K Apr 14 2008
12896823fb95bfb3dc9b46bcaedc9923 /mnt/sda2/WINDOWS/ServicePackFiles/i386/explorer.exe
1009.5K Apr 14 2008
7712df0cdde3a5ac89843e61cd5b3658 /mnt/sda2/WINDOWS/$hf_mig$/KB938828/SP2QFE/explorer.exe
1009.0K Jun 13 2007
a0732187050030ae399b241436565e64 /mnt/sda2/WINDOWS/$NtServicePackUninstall$/explorer.exe
1008.0K Aug 10 2004
a0732187050030ae399b241436565e64 /mnt/sda2/WINDOWS/$NtUninstallKB938828$/explorer.exe
1008.0K Aug 10 2004
f54d30e8c799b962c380ea2961c74733 /mnt/sda2/WINDOWS/explorer.exe
1009.5K Apr 14 2008
#68
Posted 01 February 2011 - 08:31 PM

looks like when i remove the flash drive and put it back it creates another sub folder sdd1
#69
Posted 02 February 2011 - 09:05 AM

I am looking these two latest logs over, and should have instructions for you soon.
#70
Posted 02 February 2011 - 09:14 AM

is there a way for me to get a file to the flash drive then use it in my desktop?
#71
Posted 02 February 2011 - 10:18 AM

Hello,
How are you doing today?
What type of file are you looking to grab?
Hopefully we will be able to get you back up and booting today.
Lets see how you make out with these instructions.
Download the enclosed
Replace.txt 183bytes
219 downloads file and save it in the USB drive
Post the contents of the filerep.txt in your next reply and try the computer in Normal Mode.
How are you doing today?
What type of file are you looking to grab?
Hopefully we will be able to get you back up and booting today.
Lets see how you make out with these instructions.
Download the enclosed

- Boot to xPUD as before and insert the USB drive
- Follow the prompts
- A Welcome to xPUD screen will appear
- Press File
- Expand mnt
- sda1,2...usually corresponds to your HDD
- sdb1 is likely your USB
- Click on the folder that represents your USB drive (sdb1 ?)
- Confirm that you see driver.sh and Replace.txt that you downloaded there
- Press Tool at the top
- Choose Open Terminal
- Type bash driver.sh -r
- Press Enter
- After it has finished a report will be located on your USB drive named filerep.txt
Post the contents of the filerep.txt in your next reply and try the computer in Normal Mode.
#72
Posted 02 February 2011 - 10:54 AM

i want to get my last saved quicken file so i can work on my books.
#73
Posted 02 February 2011 - 10:56 AM

Do you happen to know where the file is located?
#74
Posted 02 February 2011 - 11:12 AM

Beginning replacement procedure
mv "/mnt/sda2/WINDOWS/system32/winlogon.exe" "/mnt/sda2/WINDOWS/system32/winlogon.exe.orig"
cp "/mnt/sda2/WINDOWS/ServicePackFiles/i386/winlogon.exe" "/mnt/sda2/WINDOWS/system32/winlogon.exe"
started in normal mode pushing button. can see desk top wall paper but no icons or start menu line.
pop up Explorer.EXE - Application Error
the instruction at "0x01000003" referenced memory at "0x01000003". the memory could not be "written"
Click on OK to terminate the program
Click on Cancel to debug the program
i have not clicked anything and won't until u tell me what's next
are u really in Antarctica
mv "/mnt/sda2/WINDOWS/system32/winlogon.exe" "/mnt/sda2/WINDOWS/system32/winlogon.exe.orig"
cp "/mnt/sda2/WINDOWS/ServicePackFiles/i386/winlogon.exe" "/mnt/sda2/WINDOWS/system32/winlogon.exe"
started in normal mode pushing button. can see desk top wall paper but no icons or start menu line.
pop up Explorer.EXE - Application Error
the instruction at "0x01000003" referenced memory at "0x01000003". the memory could not be "written"
Click on OK to terminate the program
Click on Cancel to debug the program
i have not clicked anything and won't until u tell me what's next
are u really in Antarctica
#75
Posted 02 February 2011 - 11:16 AM

Looking into this right now.i have not clicked anything and won't until u tell me what's next
Maybe...are u really in Antarctica
Similar Topics
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
As Featured On:






