My PC with windows Xp SP2 was infected by trojan.dropper virus.

To remove the virus, as advised in symantec website, I disbaled system
restore and opted for safe boot in mosonfig.

Since then I am unable to boot or system restore.

I am unable to start in the safe mode also even if I select. The PC
automatically restarts after whatever option I choose.

Pl help.

I donot want to loose any data by formatting.

Thanks & regards

Bijay

Bijay Muduli wrote:

> My PC with windows Xp SP2 was infected by trojan.dropper virus.
>
> To remove the virus, as advised in symantec website, I disbaled system
> restore and opted for safe boot in mosonfig.
>
> Since then I am unable to boot or system restore.
>
> I am unable to start in the safe mode also even if I select. The PC
> automatically restarts after whatever option I choose.
>
> Pl help.
>
> I donot want to loose any data by formatting.

1. Retrieve the data you neglected to back up. This can be done by booting
with a rescue CD such as a Bart's PE or a Linux Live CD (I prefer Knoppix)
and copying the data to an external hard drive. You can also pull the
drive, attach it to another machine, and copy the data off that way. When
this is over, create and implement a backup strategy because Stuff Happens.

2. Once the data is safe - if you are sure the computer is really clean (and
I'm frankly doubtful), you can try a Repair Install. If the Repair Install
works and you are able to get into Windows, do a thorough scan for viruses
and malware per the link below.

If the Repair Install doesn't work, then I'm sorry but you will need to do a
Clean Install (or restore your computer to factory condition depending on
what kind of computer you have).

http://www.elephantboycomputers.com/...moving_Malware

http://www.michaelstevenstech.com/XPrepairinstall.htm - Repair Install
How-To

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/...alling_Windows - What
you will need on-hand

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ

Malke,

As you should be aware: removing the HDD & adding it as a slave in another
system is not really an option & doesn't always get detected meaning your
option there fails at the first hurdle. What if the machine you are putting
it is is running a raid system etc?

A Windows PE CD built by Microsoft is a safe option then using the Linux
kernal options you provided. Cannot always trust third parties. Just because
you link to it doesn't mean it's safe. Besides, what guarantee has the user
got when this go pair-shaped?

A repair install. What if the user has something in the RUN registry keys or
plugged into WinLogon? Your suggestion fails again because the registry will
still be intact

You can search the Internet instead of pushing people to your site all the
time. There are way better resources found else where

A backup strategy - a valid suggestion but how? Backup Exec 12.5 with a
solid state disc or a tape drive. Maybe the user has enough money for a LTO3
or LTO4 drive. Maybe you are thinking about Ghosting using a Norton
Enterprise product or were you actually talking about copying data to an
external drive?

Oh and Malke your domain registration runs out in June. Be sure to renew

--
SPAMCOP User


"Malke" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Bijay Muduli wrote:
>
>> My PC with windows Xp SP2 was infected by trojan.dropper virus.
>>
>> To remove the virus, as advised in symantec website, I disbaled system
>> restore and opted for safe boot in mosonfig.
>>
>> Since then I am unable to boot or system restore.
>>
>> I am unable to start in the safe mode also even if I select. The PC
>> automatically restarts after whatever option I choose.
>>
>> Pl help.
>>
>> I donot want to loose any data by formatting.
>
> 1. Retrieve the data you neglected to back up. This can be done by booting
> with a rescue CD such as a Bart's PE or a Linux Live CD (I prefer Knoppix)
> and copying the data to an external hard drive. You can also pull the
> drive, attach it to another machine, and copy the data off that way. When
> this is over, create and implement a backup strategy because Stuff
> Happens.
>
> 2. Once the data is safe - if you are sure the computer is really clean
> (and
> I'm frankly doubtful), you can try a Repair Install. If the Repair Install
> works and you are able to get into Windows, do a thorough scan for viruses
> and malware per the link below.
>
> If the Repair Install doesn't work, then I'm sorry but you will need to do
> a
> Clean Install (or restore your computer to factory condition depending on
> what kind of computer you have).
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> http://www.michaelstevenstech.com/XPrepairinstall.htm - Repair Install
> How-To
>
> http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
> http://www.elephantboycomputers.com/...alling_Windows - What
> you will need on-hand
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> http://www.elephantboycomputers.com/#FAQ
>

SPAMCOP User wrote:

> Malke,
>
> As you should be aware: removing the HDD & adding it as a slave in another
> system is not really an option & doesn't always get detected meaning your
> option there fails at the first hurdle. What if the machine you are
> putting it is is running a raid system etc?

[sigh] Obviously you would attach it in the manner appropriate for your
equipment. I just use an external adapter. Contrary to your first
statement, I have had plenty of success slaving drives in my testbed boxen.
Since the advent of inexpensive external drive enclosures and adapters, I
think this is the easiest way but if someone doesn't have equipment they
may have a second computer.
>
> A Windows PE CD built by Microsoft is a safe option then using the Linux
> kernal options you provided. Cannot always trust third parties. Just
> because you link to it doesn't mean it's safe. Besides, what guarantee has
> the user got when this go pair-shaped?

The above paragraph makes no sense. End users don't have access to WinPE for
XP. You should read about Bart's PE to understand what it is. Link to what?
As for your last sentence, I believe you meant to say "pear-shaped" but I'm
not sure why.

> A repair install. What if the user has something in the RUN registry keys
> or plugged into WinLogon? Your suggestion fails again because the registry
> will still be intact

Doing a repair install is a quick and easy next troubleshooting step in this
instance. I stand by what I said, which after all was not stating that the
repair install would definitely work. I said it was worth a try in the OP's
situation.

> You can search the Internet instead of pushing people to your site all the
> time. There are way better resources found else where

Then use them. I have spent a lot of time putting information on my website
for people to use as a public service. There are no ads and I make no
revenue from the website so I think saying that I "push" people to my site
makes no sense. After all, I pay for all my bandwidth.

> A backup strategy - a valid suggestion but how?

(snip) If the OP wants details about backup strategies, he most certainly
can ask. It wasn't germane to the immediate issue. If you want backup
strategies, I'm sure you can find good sources that you like on the
Internet.

> Oh and Malke your domain registration runs out in June. Be sure to renew

My domain automatically renews, thank you.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ

"Malke" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> SPAMCOP User wrote:
>
>> Malke,
>>
>> As you should be aware: removing the HDD & adding it as a slave in
>> another
>> system is not really an option & doesn't always get detected meaning your
>> option there fails at the first hurdle. What if the machine you are
>> putting it is is running a raid system etc?
>
> [sigh] Obviously you would attach it in the manner appropriate for your
> equipment. I just use an external adapter. Contrary to your first
> statement, I have had plenty of success slaving drives in my testbed
> boxen.
> Since the advent of inexpensive external drive enclosures and adapters, I
> think this is the easiest way but if someone doesn't have equipment they
> may have a second computer.
>>
>> A Windows PE CD built by Microsoft is a safe option then using the Linux
>> kernal options you provided. Cannot always trust third parties. Just
>> because you link to it doesn't mean it's safe. Besides, what guarantee
>> has
>> the user got when this go pair-shaped?
>
> The above paragraph makes no sense. End users don't have access to WinPE
> for
> XP. You should read about Bart's PE to understand what it is. Link to
> what?
> As for your last sentence, I believe you meant to say "pear-shaped" but
> I'm
> not sure why.
>
>> A repair install. What if the user has something in the RUN registry keys
>> or plugged into WinLogon? Your suggestion fails again because the
>> registry
>> will still be intact
>
> Doing a repair install is a quick and easy next troubleshooting step in
> this
> instance. I stand by what I said, which after all was not stating that the
> repair install would definitely work. I said it was worth a try in the
> OP's
> situation.
>
>> You can search the Internet instead of pushing people to your site all
>> the
>> time. There are way better resources found else where
>
> Then use them. I have spent a lot of time putting information on my
> website
> for people to use as a public service.

And I personally thank you for it!
SC Tom


>There are no ads and I make no
> revenue from the website so I think saying that I "push" people to my site
> makes no sense. After all, I pay for all my bandwidth.
>
>> A backup strategy - a valid suggestion but how?
>
> (snip) If the OP wants details about backup strategies, he most certainly
> can ask. It wasn't germane to the immediate issue. If you want backup
> strategies, I'm sure you can find good sources that you like on the
> Internet.
>
>> Oh and Malke your domain registration runs out in June. Be sure to renew
>
> My domain automatically renews, thank you.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> http://www.elephantboycomputers.com/#FAQ
>

SC Tom wrote:

> And I personally thank you for it!

Thank you for your kindness. I always enjoy reading your very knowledgeable
posts. This one made a tough day easier.

Cheers and thanks again,

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
http://www.elephantboycomputers.com/#FAQ