also @ TechSpot: Qualcomm shows off Mirasol, 1.5-inch panel shipping in products soon

Hijacked browser, ie script errors, unwanted audio - help

Discussion in 'Virus and Malware Removal' started by Tony R, Apr 20, 2011.

  1. Broni Malware Annihilator Posts: 39,324   +175

    Wait. Are you saying, you can boot to Safe Mode, no problem?
  2. Tony R Newcomer, in training Posts: 45

    Sorry for the delay forum switched pages. I never did try to actually boot in safe mode. just in last good configuration. Shall I try to boot in safe mode.
  3. Broni Malware Annihilator Posts: 39,324   +175

    Give it a shot.
  4. Tony R Newcomer, in training Posts: 45

    Tried to boot in safe mode, and that just went into the Start Windows Normally loop. Every thirty seconds it loops back to Start Win.....
  5. Broni Malware Annihilator Posts: 39,324   +175

    OK, at this point, your computer is clean, so it looks like some Windows update created your issue.

    Let's see, if we can use system restore from recovery console.
    You should have two restore points there.
    One created by OTL and another one created by Windows updates.

    1. Restart computer.

    2. When you reboot you will see an option to boot into the Recovery Console or the normal Windows installation.
    You have to use the up/down arrows to choose the Recovery Console. Then press Enter.

    3. You'll find yourself at this screen:

    [IMG]

    4. Once you are at the Recovery Console you will be given at least one choice of Windows installations. Normally the choice you want is the number 1 choice. Click the number 1 key at the "top" of the keyboard and click enter.

    NOTE: at this point your numbers to the right of your keyboard are turned off. If you insist on using these keys for your numbers remember to hit the Numbers Lock key before clicking a number over there or your computer will automatically reboot and you will have to wait through the previous steps to get back to the console.

    5. You will be given a message asking for the administrator password. Unless someone or something has messed with your computer there is no password so you just click the Enter key.

    6. This will bring you to a prompt that says:

    C:\WINDOWS>

    7. Type:

    cd \

    Press Enter

    Note: between "cd" and "\" there should be a "blank space" otherwise the command won't work

    8. The prompt should now say:

    C:\>

    9. Type:

    cd system~1\_resto~1

    Press Enter.

    ===============================================================================

    Note: If it gives an error "Access Denied" while accessing the folder, follow the method below

    Type: cd \

    Press Enter

    Type: cd windows\system32\config

    Press Enter

    Type: ren system system.bak

    Press Enter

    (note the spaces between ren and system, and then between system and system.bak)

    Type: exit

    Press Enter

    now the computer should restart, then follow steps 1-9


    ===============================================================================

    10. Type:

    dir

    Press Enter

    NOTE: When you hit enter it will list all the restore points folders like "rp1", "rp2" we have to see the last restore point to copy the file from a recent backup. If the restore points have more than one page then you have keep on hitting the key to view the last restore point folder.

    NOTE: It is a good rule of thumb to choose the files from the restore point folder which the second to the last one.

    11. Type:

    cd rp{with the second to the last restore point number }

    Press Enter

    Example: cd rp9. if rp10 is the last restore point

    12. Type:

    cd snapshot

    Press Enter.

    NOTICE: Now the command prompt will look like this:

    c:\system~1\resto~1\rp9\snapshot

    Note : restore point 9 assumed for clarity of the content.


    13. Type:

    copy _registry_machine_system c:\windows\system32\config\system

    Press Enter

    14. Type:

    Exit

    Press Enter.

    Final note : If the above procedure won't solve the problem, repeat all steps, but in step 13 type:

    copy _registry_machine_software c:\windows\system32\config\software

    Alternatively, select different restore point.
  6. Tony R Newcomer, in training Posts: 45

    When I renamed system system.bak it said that the system.bak file already exists, and exit puts me back into the boot up loop.

    Would a hard boot make any difference
     
  7. Broni Malware Annihilator Posts: 39,324   +175

    Rename it to system.old
    Any three letter extension will do.
  8. Tony R Newcomer, in training Posts: 45

    There are no restore points on the directory. Left the computer on windows\system32\config

    c:>dir no rp's there either
  9. Broni Malware Annihilator Posts: 39,324   +175

    Do you have Windows XP CD?
  10. Tony R Newcomer, in training Posts: 45

    Yes I have an original w/ SP2
  11. Broni Malware Annihilator Posts: 39,324   +175

  12. Tony R Newcomer, in training Posts: 45

    Windows XP repair

    Went through the steps on website: after I agree went to this;

    * To set up Windows XP on selected partition press Enter
    *To create parttion in unpartioned space press C
    *To delete selected partition Press D

    Highlights > C: Patritition1 many,many MB

    Pressed Enter

    Warning: Choosing to install Windows XP that contains O/S may cause other O/S to function improperly. This is not reccommended.

    Nowhere does it ask me if I want to repair like it says on the website.

    It says if no installations are found the repair option will not be given

    Edit: It says that this may happen if the partition is corrupted. If you install a new copy all data on partition will be lost
  13. Broni Malware Annihilator Posts: 39,324   +175

    Please download OTLPE (filesize 120,9 MB)

    • When downloaded double click on OTLPENet.exe and make sure there is a blank CD in your CD drive. This will automatically create a bootable CD.
    • Reboot your system using the boot CD you just created.
      • Note : If you do not know how to set your computer to boot from CD follow the steps HERE
    • Your system should now display a REATOGO-X-PE desktop.

    Using File Manger there, you'll be able to backup your data.

    Then, you can proceed with what you're doing before.
  14. Tony R Newcomer, in training Posts: 45

    Boot CD?

    What do I have to backup my data for?. And where do I back it up to? What type of data is it?
    I seem to be confused as to what we are trying accomplish. I know just about enough about computers to be dangerous.
    so bare with me.
  15. Broni Malware Annihilator Posts: 39,324   +175

    I assume, you have some important files on your computer, you don't want to lose, in case Windows repair goes wrong?
  16. Tony R Newcomer, in training Posts: 45

    Windows XP repair

    Hi again. Downloaded OTPLENet.exe burned CD and tried to boot my computer with it. It didn't recognize it. Bios was already set for CD to be first boot device. I also have a boot menu after F8 which I selected that CD. Nothing happens there either. Getting just a little nervous.
  17. Tony R Newcomer, in training Posts: 45

    Happy Easter Broni. Just one last note. After the Start System Normally loop, it finally says "Windows cannot install because the windows\system32\config.sys is corrupted"
    I trust you will have a great Easter Sunday. I will pick this thing up again first thing Monday. Thanks. Tony
  18. Broni Malware Annihilator Posts: 39,324   +175

    Happy Easter to you :)

    We can try to fix it, but in order to do so, we have to make OTLPE CD working.

    First, let's check, if the CD you created is good.
    Try to boot your WORKING computer with it and see, if it works.
  19. Tony R Newcomer, in training Posts: 45

    XP fix

    Good morning Broni. I trust that your Easter weeekend went well. I am working on a Dimension 3100 (slow). Went to boot menu (F12) and booted w/OPTLENet.exe. Windows ran normally from the CD. I ment to edit my last response windows\system32\config.sys "missing" or corruped. I have an "Ebook" ran about a month ago which I saved my entire hard drive. I am missing Turbo Tax from that save, so data and program from this drive are not on it. I don't know the Ebook program well enough at this point to retrieve "specific" information from it. I must also free up a USB port (disconnect the printer) to plug it in. I am pretty weak when we get into this type of stuff, so your responses to me need to be pretty specific. Thanks. Tony
  20. Broni Malware Annihilator Posts: 39,324   +175

    Are you saying, that you booted your WORKING computer from OTLPE CD and it went to REATOGO-X-PE desktop?