TechSpot

Google redirect.

Solved
By davidanthony
Nov 14, 2010
  1. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    OK, this is not working....

    We need to use the Recovery Console to fix your issue.

    • You'll need to find your Windows XP installation disk.
    • Insert the Windows XP CD into the CD-ROM drive, then restart your computer.
    • If prompted, click any options that are required to start the computer from the CD-ROM drive.
    • When the Welcome to Setup screen appears, press R to start the Recovery Console.
    • The Recovery Console will start and ask you which Windows installation you would like to log on to.
      • If you have multiple Windows installations, it will list each one, and you would enter the number associated with the installation you would like to work on and press enter. If you have just one Windows installation, type 1 and press Enter.
    • It will then prompt you for the Administrator's password. If there is no password, simply press enter.
    • You will now be presented with a C:\Windows> prompt
    • At the comand prompt window, type exactly the bolded text below (watch for "spaces"). (The d after the word expand is the drive letter to your CDROM. If it's different on your computer, please make the necessary adjustment).

      expand d:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe /y
      expand d:\i386\explorer.ex_ c:\windows\explorer.exe /y


    • type exit to exit the command prompt and restart your computer.

    Post fresh Combofix log.
     
  2. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    after i entered the lines for winlogon and explorer the pc came back and said it couldn't expand the file
    ?
     
  3. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    First of all, I need EXACT error message.
    Then...
    Is your CD drive listed as letter D?
    Did you type the command correctly? There are two "spaces" in each command.
    Are you pressing Enter after each command?
     
  4. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    Unable to create file explorer.exe
    0 file(s)

    the same message wiith winlogon

    this is what i typed at the prompt c:\windows>


    expand e:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe /y
    :
     
  5. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Try little bit different commands:
    expand d:\i386\winlogon.ex_ c:
    expand d:\i386\explorer.ex_ c:
     
  6. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    that worked running combofix...
     
  7. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Nooooooooooooo.
     
  8. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Do NOT run Combofix!
     
  9. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    sorry....my bad
     
  10. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Did you start it already?
     
  11. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    * expand d:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe /y
    expand d:\i386\explorer.ex_ c:\windows\explorer.exe /y

    * type exit to exit the command prompt and restart your computer.


    Post fresh Combofix log.


    I thought we were still working on using this fix.....
     
     
  12. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    do u want me to do the expand commands again?
     
  13. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Sorry for the confusion.
    Combofix was fine to run, if the 1st expand command worked, but it didn't and we're forced to use 2 steps fix. We just completed 1st one.

    I need to know, if you started/ran Combofix, or not.
     
  14. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    We posted at the same time....
    Please, answer my last question regarding Combofix.
     
  15. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    yes i ran combofix
     
  16. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    OK, you need to go back to my reply #30 and repeat same commands:
    expand d:\i386\winlogon.ex_ c:
    expand d:\i386\explorer.ex_ c:


    IF successful, run these commands:
    copy c:\winlogon.exe c:\windows\system32\winlogon.exe /y
    copy c:\explorer.exe c:\windows\explorer.exe /y


    Let me know, if you're able to perform both sets of commands
     
  17. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    both files expanded ok

    but when i tried to use copy command it said /y invalid parameter so deleted it from command

    then entered new command but in both cases "winlogon" and "explorer" it said file not found
     
  18. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    Open Windows Explorer and see, if both files explorer.exe and winlogon.exe are located in root C:\folder.
     
  19. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    neither file found under c:\ using start:explorer
     
  20. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    I'm not sure, what's going on here...

    Have your Windows CD in.
    Open Windows Explorer and navigate to i386 folder on Windows CD.
    Can you see these two files:
    explorer.ex_
    winlogon.ex_

    They'll look just like that, with "underscore" instead of the last letter.
     
  21. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    explorer.ex_ on cd
    winlogon.ex_ on cd
     
  22. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    OK, copy both files to your desktop.
    Using any unzipping program, unzip both files.
    Then, copy both unzipped files to C:\ folder.
    Make sure, they're both there.
    Let me know, when you're done.
     
  23. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    both files are now in a folder called c:\virus delete
     
  24. Broni

    Broni Malware Annihilator Posts: 47,076   +257

    No.
    Copy them to root C:\ directory.
    Don't create any new folder, just paste them to C:
     
  25. davidanthony

    davidanthony TS Rookie Topic Starter Posts: 64

    C:\ folder.

    sorry i took you literally...lol
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.