Booting and system restore problem.

[Bijay Muduli]

My PC with windows Xp SP2 was infected by trojan.dropper virus.

To remove the virus, as advised in symantec website, I disbaled system
restore and opted for safe boot in mosonfig.

Since then I am unable to boot or system restore.

I am unable to start in the safe mode also even if I select. The PC
automatically restarts after whatever option I choose.

Pl help.

I donot want to loose any data by formatting.

Thanks & regards

Bijay

 

[Malke]

My PC with windows Xp SP2 was infected by trojan.dropper virus.

To remove the virus, as advised in symantec website, I disbaled system
restore and opted for safe boot in mosonfig.

Since then I am unable to boot or system restore.

I am unable to start in the safe mode also even if I select. The PC
automatically restarts after whatever option I choose.

Pl help.

I donot want to loose any data by formatting.

1. Retrieve the data you neglected to back up. This can be done by booting
with a rescue CD such as a Bart's PE or a Linux Live CD (I prefer Knoppix)
and copying the data to an external hard drive. You can also pull the
drive, attach it to another machine, and copy the data off that way. When
this is over, create and implement a backup strategy because Stuff Happens.

2. Once the data is safe - if you are sure the computer is really clean (and
I'm frankly doubtful), you can try a Repair Install. If the Repair Install
works and you are able to get into Windows, do a thorough scan for viruses
and malware per the link below.

If the Repair Install doesn't work, then I'm sorry but you will need to do a
Clean Install (or restore your computer to factory condition depending on
what kind of computer you have).

http://www.elephantboycomputers.com/page2.html#Removing_Malware

http://www.michaelstevenstech.com/XPrepairinstall.htm - Repair Install
How-To

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/page2.html#Reinstalling_Windows - What
you will need on-hand

Malke

 

[Guest]

Malke,

As you should be aware: removing the HDD & adding it as a slave in another
system is not really an option & doesn't always get detected meaning your
option there fails at the first hurdle. What if the machine you are putting
it is is running a raid system etc?

A Windows PE CD built by Microsoft is a safe option then using the Linux
kernal options you provided. Cannot always trust third parties. Just because
you link to it doesn't mean it's safe. Besides, what guarantee has the user
got when this go pair-shaped?

A repair install. What if the user has something in the RUN registry keys or
plugged into WinLogon? Your suggestion fails again because the registry will
still be intact

You can search the Internet instead of pushing people to your site all the
time. There are way better resources found else where

A backup strategy - a valid suggestion but how? Backup Exec 12.5 with a
solid state disc or a tape drive. Maybe the user has enough money for a LTO3
or LTO4 drive. Maybe you are thinking about Ghosting using a Norton
Enterprise product or were you actually talking about copying data to an
external drive?

Oh and Malke your domain registration runs out in June. Be sure to renew

 

[Malke]

Malke,

As you should be aware: removing the HDD & adding it as a slave in another
system is not really an option & doesn't always get detected meaning your
option there fails at the first hurdle. What if the machine you are
putting it is is running a raid system etc?

[sigh] Obviously you would attach it in the manner appropriate for your
equipment. I just use an external adapter. Contrary to your first
statement, I have had plenty of success slaving drives in my testbed boxen.
Since the advent of inexpensive external drive enclosures and adapters, I
think this is the easiest way but if someone doesn't have equipment they
may have a second computer.

A Windows PE CD built by Microsoft is a safe option then using the Linux
kernal options you provided. Cannot always trust third parties. Just
because you link to it doesn't mean it's safe. Besides, what guarantee has
the user got when this go pair-shaped?

The above paragraph makes no sense. End users don't have access to WinPE for
XP. You should read about Bart's PE to understand what it is. Link to what?
As for your last sentence, I believe you meant to say "pear-shaped" but I'm
not sure why.

A repair install. What if the user has something in the RUN registry keys
or plugged into WinLogon? Your suggestion fails again because the registry
will still be intact

Doing a repair install is a quick and easy next troubleshooting step in this
instance. I stand by what I said, which after all was not stating that the
repair install would definitely work. I said it was worth a try in the OP's
situation.

You can search the Internet instead of pushing people to your site all the
time. There are way better resources found else where

Then use them. I have spent a lot of time putting information on my website
for people to use as a public service. There are no ads and I make no
revenue from the website so I think saying that I "push" people to my site
makes no sense. After all, I pay for all my bandwidth.

A backup strategy - a valid suggestion but how?

(snip) If the OP wants details about backup strategies, he most certainly
can ask. It wasn't germane to the immediate issue. If you want backup
strategies, I'm sure you can find good sources that you like on the
Internet.

Oh and Malke your domain registration runs out in June. Be sure to renew

My domain automatically renews, thank you.

Malke

 

[SC Tom]

Malke,

As you should be aware: removing the HDD & adding it as a slave in
another
system is not really an option & doesn't always get detected meaning your
option there fails at the first hurdle. What if the machine you are
putting it is is running a raid system etc?

[sigh] Obviously you would attach it in the manner appropriate for your
equipment. I just use an external adapter. Contrary to your first
statement, I have had plenty of success slaving drives in my testbed
boxen.
Since the advent of inexpensive external drive enclosures and adapters, I
think this is the easiest way but if someone doesn't have equipment they
may have a second computer.

A Windows PE CD built by Microsoft is a safe option then using the Linux
kernal options you provided. Cannot always trust third parties. Just
because you link to it doesn't mean it's safe. Besides, what guarantee
has
the user got when this go pair-shaped?

The above paragraph makes no sense. End users don't have access to WinPE
for
XP. You should read about Bart's PE to understand what it is. Link to
what?
As for your last sentence, I believe you meant to say "pear-shaped" but
I'm
not sure why.

A repair install. What if the user has something in the RUN registry keys
or plugged into WinLogon? Your suggestion fails again because the
registry
will still be intact

Doing a repair install is a quick and easy next troubleshooting step in
this
instance. I stand by what I said, which after all was not stating that the
repair install would definitely work. I said it was worth a try in the
OP's
situation.

You can search the Internet instead of pushing people to your site all
the
time. There are way better resources found else where

Then use them. I have spent a lot of time putting information on my
website
for people to use as a public service.

And I personally thank you for it!
SC Tom

 

[Malke]

And I personally thank you for it!

Thank you for your kindness. I always enjoy reading your very knowledgeable
posts. This one made a tough day easier.

Cheers and thanks again,

Malke