
Challenging Rootkit
Started by
rootkits-r-evil
, Aug 20 2011 04:03 PM
#136
Posted 22 August 2011 - 11:24 PM

#137
Posted 22 August 2011 - 11:30 PM

No, I got it right. Should I re-do it to make sure? Lot of work. :-)
#138
Posted 22 August 2011 - 11:31 PM

How about this theory- I did it right, but when I booted into bad windows accidentally, the newly made good hal got corrupted?
#139
Posted 22 August 2011 - 11:33 PM

You are replacing the good HAL with the one from the bad Windows right? Sounds like you might have done it the other way around.
Wait a minute. I am supposed to copy the one from the good machine and put it in place of the one in the infected laptop right? Because that is what I tried to do.
Wait a minute. I am supposed to copy the one from the good machine and put it in place of the one in the infected laptop right? Because that is what I tried to do.
#140
Posted 22 August 2011 - 11:35 PM

Do you think it's odd that the error message is saying there is a corrupted file at "<Windows Root>System32\hal.dll" and not "C:\Windows\System32\hal.dll"?
#141
Posted 22 August 2011 - 11:41 PM

Type:
copy E:\hal.dll c:\Windows\System32\hal.dll"
it came back with "The system cannot find the file specified".
Wait a minute......... is that case sensitive? Did it say it cannot find it because it was called "HAL.DLL" when it looked? What if I tried it now that it's there with small letters?
copy E:\hal.dll c:\Windows\System32\hal.dll"
it came back with "The system cannot find the file specified".
Wait a minute......... is that case sensitive? Did it say it cannot find it because it was called "HAL.DLL" when it looked? What if I tried it now that it's there with small letters?
#142
Posted 22 August 2011 - 11:44 PM

It's a possibility. Can also be that the hal.dll from your working PC is not the right one. There are about 4 different versions out there depending on the number of processors and the type.
Too bad you don't have an XP CD.
You might try a chkdsk just to see if it's just hard drive corruption and not the virus.
In Recovery Console type:
CHKDSK /r
Ron
Too bad you don't have an XP CD.
You might try a chkdsk just to see if it's just hard drive corruption and not the virus.
In Recovery Console type:
CHKDSK /r
Ron
#143
Posted 22 August 2011 - 11:46 PM

Does Hiram's have the file on their somewhere? Ah, but you say there are different versions.
And that could account for the different file sizes, no?
And that could account for the different file sizes, no?
#144
Posted 22 August 2011 - 11:47 PM

Should I really dig for the CD? I don't think I have it, but it's possible. I hate to think of the crap I would have to go dig through. What would it do if I had it? And what does it look like?
#145
Posted 22 August 2011 - 11:52 PM

In Recovery Console type:
CHKDSK /r
Under "E" or "C"?
CHKDSK /r
Under "E" or "C"?
#146
Posted 23 August 2011 - 12:00 AM

Hey! I think I found the disk! I got fooled because it's open. I think I opened it and tried to use it when..... eh-hem, "The good PC" got infected and I was going to try to fix it.
Anyway, there are two disks. One is the OS, and the other is the drivers specific to the laptop. It has to be the right disk, because there is a disk for the laptop with it.
Anyway, there are two disks. One is the OS, and the other is the drivers specific to the laptop. It has to be the right disk, because there is a disk for the laptop with it.
#147
Posted 23 August 2011 - 12:04 AM

Stick it in and see if you can run a repair on C:
#148
Posted 23 August 2011 - 12:08 AM

How does that work? Never done it before. Just boot from it and follow the prompts?
#149
Posted 23 August 2011 - 12:11 AM

#150
Posted 23 August 2011 - 12:18 AM

"have your CD-KEY ready if needed."
It's a legit disk, but there is no "key". Hope it doesn't ask for it.
It's a legit disk, but there is no "key". Hope it doesn't ask for it.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:






