Spybot CHANGED kernel32.dll, user32.dll and ntoskrnl.exe...

G

Guest

Hi Everybody!
I have Windows XP Pro-SP2 with all of the current upgrades installed. I
installed Spybot and it repeatedly displayed this obscure dialog box asking
if I wanted to change a file, but the 'OK' and 'Cancel' buttons were covered
so that you could not tell which button was the correct choice. "X"ing to
close the dialog box only re-opened another. The result is that
C:\windows\system32\kernel32.dll, user32.dll and ntoskrnl.exe have been
changed and I cannot use Windows Explorer. When I attempt to re-install from
my Windows XP Pro CD (...yes I have a legal Key), it displays a message that
my CD is an older version than what is currently installed on my computer, I
assume because of all the updates and SP-2 I have installed since I
originally set up XP Pro from my CD. I have tried to overwrite the files in
question, from SAFE mode, as well as command line with no joy! I am really
up a river with this one friends, how do I replace these important files
without having to back up all of my crap, or worse, reformatting the HD???

Yes I uninstalled %$@ Spybot! Please tell me there is a simple fix out there
somewhere. Thanks in advance, I am tired of Firefox and want my Windows back.

Respectfully;
Sixbells
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
S

Shenan Stanley

Sixbells said:
I have Windows XP Pro-SP2 with all of the current upgrades installed. I
installed Spybot and it repeatedly displayed this obscure dialog box
asking
if I wanted to change a file, but the 'OK' and 'Cancel' buttons were
covered
so that you could not tell which button was the correct choice. "X"ing to
close the dialog box only re-opened another. The result is that
C:\windows\system32\kernel32.dll, user32.dll and ntoskrnl.exe have been
changed and I cannot use Windows Explorer. When I attempt to re-install
from
my Windows XP Pro CD (...yes I have a legal Key), it displays a message
that
my CD is an older version than what is currently installed on my computer,
I
assume because of all the updates and SP-2 I have installed since I
originally set up XP Pro from my CD. I have tried to overwrite the files
in
question, from SAFE mode, as well as command line with no joy! I am
really
up a river with this one friends, how do I replace these important files
without having to back up all of my crap, or worse, reformatting the HD???

Yes I uninstalled %$@ Spybot! Please tell me there is a simple fix out
there
somewhere. Thanks in advance, I am tired of Firefox and want my Windows
back.

Spybot...??
Spybot Search & Destroy from http://safer-networking.org/ ?

Otherwise - a few things with you trying to install.

- You are trying to do it within Windows XP. Ever tried to pull a rug from
the floor while standing on it?
- You have Windows XP SP2 installed (good) but your CD is SP1 or before (not
bad - but it makes doing a repair install or such difficult.) You will have
to integrate SP2 into your installation media and burn a new CD (likely
using another computer.)

My suggestions...

- Tell us what *Spybot* you are referring to... As I cannot see it being the
one I referenced above.
- Integrate SP2 into your current installation media (Google for "slipstream
SP2 into Windows XP CD") and use it to perform a repair installation:

How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm

How to perform an in-place upgrade (reinstallation) of Windows XP
http://support.microsoft.com/kb/315341
 
G

Guest

Sixbells said:
Hi Everybody!
I have Windows XP Pro-SP2 with all of the current upgrades installed. I
installed Spybot and it repeatedly displayed this obscure dialog box asking
if I wanted to change a file, but the 'OK' and 'Cancel' buttons were covered
so that you could not tell which button was the correct choice. "X"ing to
close the dialog box only re-opened another. The result is that
C:\windows\system32\kernel32.dll, user32.dll and ntoskrnl.exe have been
changed and I cannot use Windows Explorer. When I attempt to re-install from
my Windows XP Pro CD (...yes I have a legal Key), it displays a message that
my CD is an older version than what is currently installed on my computer, I
assume because of all the updates and SP-2 I have installed since I
originally set up XP Pro from my CD. I have tried to overwrite the files in
question, from SAFE mode, as well as command line with no joy! I am really
up a river with this one friends, how do I replace these important files
without having to back up all of my crap, or worse, reformatting the HD???

Yes I uninstalled %$@ Spybot! Please tell me there is a simple fix out there
somewhere. Thanks in advance, I am tired of Firefox and want my Windows back.

Respectfully;
Sixbells
~~~~~~~~~~~~~~~~~~~~~~~~~~

You did run Spybot in Tea Timer mode, didn't you?.
Try system restore to before the installation of Sbybot or disable the Tea
timer Mode then try Repair/install XP:

How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm
You will need to slipstream SP2 to your XP CD installation media, read this
article here:
http://www.theeldergeek.com/slipstreamed_xpsp2_cd.htm
HTH.
nass
 
G

Guest

Thanks "nass";
I was able to create a bootable CD with SP-2 slipstreamed into my XP-Pro
install. I tested it on my parent's desktop (just to see if it would boot
after changing the order of boot devices from their BIOS). It did boot, but
went right to the blue window set-up screen and automatically began the
install process. Luckily I was able to stop the install, my Dad would be a
bit upset if I changed ANYTHING on his computer! However, when I tried the
same on my problem machine, a Dell Inspiron 8200, I get an error stating that
"The file pciide.sys is corrupted". Man, I am frustrated, do you have any
suggestions my friend?? I did change the boot order on my laptop so that the
CD Drive is first. And yes, I did run Spybot in Tea Timer mode...my bad!

Thanks in advance,
Sixbells
~~~~~~~~~~~~

T
 
G

Guest

Thanks nass;
I am finally almost there; you all have been very helpful. I was able to
slipstream a bootable CD, even made it as far as accessing the Command
Console. When prompted for the Administrative password however, I was not
sure which PW they meant, I do not use a PW for my XP User account (with
admin privileges), so I referenced article 312149, and enabled an
administrator to log in automatically in Recovery Console. Now after all of
this, I hope to be able to repair the pciide.sys file, then on to what
originally brought me to contact yawl’ in the first place, restoring the
original kernel32.dll, user32.dll and ntoskrnl.exe files that were changed
when I had SpyBot in Teacup mode. Please, just briefly explain to me how I
can use my new Install CD with XP-Pro SP-2 slipstreamed to re-install these
three files that were changed WITHOUT over writing the entire C-Drive.
Wouldn't they (the three changed files) be repaired when I use the Recovery
Console? I am anxious to move on and finish correcting the original problem,
but I also want to say in advance thank you nass as well Shenan Stanley for
your wonderful and knowledgeable help. This is a great forum, and I will be
sure to rate this series of posts most favorably, plus I learned some new
skills!

Many Regards;
Sixbells
~~~~~~~~~~~~
 
G

Guest

Hi Sixbells,
You should left the password Blank as you didn't set up one, but if you did
try to enter the password on the prompt command.
Boot up with your CD in the CD ROM and when you presented with Windows Setup
Options:
1- Install Windows
2- Repair existing copy
3- Quit
Select 2 by Pressing R on your keyboard, on the Command Prompt type:
C:\Windows>CD.. Hit [Enter..] on your Keyboard
on the new Prompt type this:
C:\>
copy X:\i386\ntoskrnl.ex_ C:\Windows\system32
copy X:\i386\user32.dl_ C:\windows\system32\user32.dll where X is the Drive
Letter for your CD-ROM in all cases of copying here.
copy X:\i386\kernel32.dl_ C:\windows\system32\kernal32.dll

Please type one at a time click/Hit [Enter..]
You may need to rebuild your Boot.ini type this on the Prompt:
C:\>Boot.ini click Enter and you will see your Boot.ini you can Edit it or
if was intact leave as is, the boot.ini will look like this, be aware this
for XP Home so if you have XP pro:
[boot loader]
timeout=5
default=multi(0)disk(0)rdisk(1)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="Microsoft Windows XP Home
Edition" /fastdetect
You will get Boot Indentifier: Enter this " Microsoft Windows XP Home Edition"
Boot Loader: Enter this" /fastdetect"
When you finished type: reboot (I'm not sure if it is right you can Type ?
to get the list of commands and see if reboot is one) or Exit.

For Repair/Install XP follow these steps form MS:
<MS::>
Method 2: Reinstall Windows XP by starting your computer from the Windows XP
CD
To reinstall Windows XP by starting your computer from the Windows XP CD,
follow these steps:
1.Insert the Windows XP CD into your computer's CD-ROM or DVD-ROM drive, and
then restart your computer.
2.When the "Press any key to boot from CD" message appears on the screen,
press a key to start your computer from the Windows XP CD.

Note Your computer must be configured to start from the CD-ROM or DVD-ROM
drive. For more information about how to configure your computer to start
from the CD-ROM or DVD-ROM drive, see your computer's documentation or
contact your computer manufacturer.
3.You receive the following message on the Welcome to Setup screen that
appears:
This portion of the Setup program prepares Microsoft Windows XP to run on
your computer:
To setup Windows XP now, press ENTER.

To repair a Windows XP installation using Recovery Console, press R.

To quit Setup without installing Windows XP, press F3.
Press ENTER to set up Windows XP.
4.On the Windows XP Licensing Agreement screen, press F8 to agree to the
license agreement.
5.Make sure that your current installation of Windows XP is selected in the
box, and then press R to repair Windows XP.
6.Follow the instructions that appear on the screen to reinstall Windows XP.
After you repair Windows XP, you may have to reactivate your copy of Windows
XP.
</MS::>
HTH.
Please let us know.
Regards,
nass
 
G

Guest

Hi nass;
I am so frustrated, I am able to get the windows slipstreamed CD to start to
boot, even get as far as the blue windows setup screen, but then I get a
message saying that the file pciide.sys is currupt, and I can go no further!!
I have attempted to over-write it and even copy one from my CD, but of
course, this is a system file, and it cannot be installed while in windows
setup. HHEELLPP! I am about to throw my computer in the lake!

Thanks in Advance;
Douglas (sixbells);
BYW: I really am not stupid, but this seems to have been really challenging
for me for some reason.
~~~~~~~~~~~~~~~~~~

nass said:
Hi Sixbells,
You should left the password Blank as you didn't set up one, but if you did
try to enter the password on the prompt command.
Boot up with your CD in the CD ROM and when you presented with Windows Setup
Options:
1- Install Windows
2- Repair existing copy
3- Quit
Select 2 by Pressing R on your keyboard, on the Command Prompt type:
C:\Windows>CD.. Hit [Enter..] on your Keyboard
on the new Prompt type this:
C:\>
copy X:\i386\ntoskrnl.ex_ C:\Windows\system32
copy X:\i386\user32.dl_ C:\windows\system32\user32.dll where X is the Drive
Letter for your CD-ROM in all cases of copying here.
copy X:\i386\kernel32.dl_ C:\windows\system32\kernal32.dll

Please type one at a time click/Hit [Enter..]
You may need to rebuild your Boot.ini type this on the Prompt:
C:\>Boot.ini click Enter and you will see your Boot.ini you can Edit it or
if was intact leave as is, the boot.ini will look like this, be aware this
for XP Home so if you have XP pro:
[boot loader]
timeout=5
default=multi(0)disk(0)rdisk(1)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="Microsoft Windows XP Home
Edition" /fastdetect
You will get Boot Indentifier: Enter this " Microsoft Windows XP Home Edition"
Boot Loader: Enter this" /fastdetect"
When you finished type: reboot (I'm not sure if it is right you can Type ?
to get the list of commands and see if reboot is one) or Exit.

For Repair/Install XP follow these steps form MS:
<MS::>
Method 2: Reinstall Windows XP by starting your computer from the Windows XP
CD
To reinstall Windows XP by starting your computer from the Windows XP CD,
follow these steps:
1.Insert the Windows XP CD into your computer's CD-ROM or DVD-ROM drive, and
then restart your computer.
2.When the "Press any key to boot from CD" message appears on the screen,
press a key to start your computer from the Windows XP CD.

Note Your computer must be configured to start from the CD-ROM or DVD-ROM
drive. For more information about how to configure your computer to start
from the CD-ROM or DVD-ROM drive, see your computer's documentation or
contact your computer manufacturer.
3.You receive the following message on the Welcome to Setup screen that
appears:
This portion of the Setup program prepares Microsoft Windows XP to run on
your computer:
To setup Windows XP now, press ENTER.

To repair a Windows XP installation using Recovery Console, press R.

To quit Setup without installing Windows XP, press F3.
Press ENTER to set up Windows XP.
4.On the Windows XP Licensing Agreement screen, press F8 to agree to the
license agreement.
5.Make sure that your current installation of Windows XP is selected in the
box, and then press R to repair Windows XP.
6.Follow the instructions that appear on the screen to reinstall Windows XP.
After you repair Windows XP, you may have to reactivate your copy of Windows
XP.
</MS::>
HTH.
Please let us know.
Regards,
nass
------
www.nasstec.co.uk

Sixbells said:
Thanks nass;
I am finally almost there; you all have been very helpful. I was able to
slipstream a bootable CD, even made it as far as accessing the Command
Console. When prompted for the Administrative password however, I was not
sure which PW they meant, I do not use a PW for my XP User account (with
admin privileges), so I referenced article 312149, and enabled an
administrator to log in automatically in Recovery Console. Now after all of
this, I hope to be able to repair the pciide.sys file, then on to what
originally brought me to contact yawl’ in the first place, restoring the
original kernel32.dll, user32.dll and ntoskrnl.exe files that were changed
when I had SpyBot in Teacup mode. Please, just briefly explain to me how I
can use my new Install CD with XP-Pro SP-2 slipstreamed to re-install these
three files that were changed WITHOUT over writing the entire C-Drive.
Wouldn't they (the three changed files) be repaired when I use the Recovery
Console? I am anxious to move on and finish correcting the original problem,
but I also want to say in advance thank you nass as well Shenan Stanley for
your wonderful and knowledgeable help. This is a great forum, and I will be
sure to rate this series of posts most favorably, plus I learned some new
skills!

Many Regards;
Sixbells
~~~~~~~~~~~~
 
A

ares

Sixbells said:
Hi Everybody!
I have Windows XP Pro-SP2 with all of the current upgrades installed. I
installed Spybot and it repeatedly displayed this obscure dialog box asking
if I wanted to change a file, but the 'OK' and 'Cancel' buttons were covered
so that you could not tell which button was the correct choice. "X"ing to
close the dialog box only re-opened another. The result is that
C:\windows\system32\kernel32.dll, user32.dll and ntoskrnl.exe have been
changed and I cannot use Windows Explorer. When I attempt to re-install from
my Windows XP Pro CD (...yes I have a legal Key), it displays a message that
my CD is an older version than what is currently installed on my computer, I
assume because of all the updates and SP-2 I have installed since I
originally set up XP Pro from my CD. I have tried to overwrite the files in
question, from SAFE mode, as well as command line with no joy! I am really
up a river with this one friends, how do I replace these important files
without having to back up all of my crap, or worse, reformatting the HD???

Yes I uninstalled %$@ Spybot! Please tell me there is a simple fix out there
somewhere. Thanks in advance, I am tired of Firefox and want my Windows back.

Respectfully;
Sixbells
~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top