Network connections and sound not working after malwarebytes

By dahernandez
Feb 7, 2009
Topic Status:
Not open for further replies.
  1. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Ok so can I use the same commands you gave me before for the recovery console with the UBCD4win?
  2. mflynn

    mflynn Newcomer, in training Posts: 2,793

    Yes from the cmd prompt of UBCD4win or use My Computer to browse to C:\WINDOWS\ServicePackFiles\i386\userinit.exe and then copy it to C:\WINDOWS\system32 (the bad one is here) and replace it. And to dllcache and replace it (tihis one is also bad).

    OK because this bad userinit was in charge all may still not be fixed but it should now let us fix the issues more easily.

    Just reboot and report back.


    Or from the prompt
    type
    copy C:\WINDOWS\ServicePackFiles\i386\userinit.exe C:\WINDOWS\system32

    answer yes to over write existing file

    Then
    type
    copy C:\WINDOWS\ServicePackFiles\i386\userinit.exe C:\WINDOWS\system32\dllcache
    answer yes to over write existing file

    Good luck.

    Mike
  3. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    :( When in cmd prompt and I tried the commands it said the device is not ready I also tried the cd system32 and the cd windows and I forget what it said but something to the effect of it could not find it, went to my computer and hit C:\ it then asked me to insert a cd into C:\ :confused:

    Should I try the recovery console with the UBCD4win? Because I just let it boot normally, or well the time ran out on me before I made a decision.

    And not that I'm crying for any long lost relatives or anything but since the problem is isolated pretty much to the userinit I should be safe to back up my files such as my documents and some program files yea? Def not crying uncle yet though, unless your out of ideas.. I think i've come along so far at this point I really want to teach this thing a lesson instead of just reinstalling xp. Well I should be home tommorow evening (for me) night for you EST ppls.
  4. mflynn

    mflynn Newcomer, in training Posts: 2,793

    No it sounds as if UBCD4Win is not seeing your windows. Or is seeing it as a different drive letter.

    Open My Computer and look at all the drives UBCD4Win runs from the CD and a RAM drive.

    With My Computer browse Program Files on any drive that has one, and look for your installed programs.

    Not there then you are not seeing your drive? This is unusual as that UBCD has the Driver packs and SATA drivers installed and should boot the Sata drivers.

    Did you not say you had an XP SP3 cd coming also with that UBCD4Win?

    We may need it?

    Mike
  5. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Yes I have the XP pro sp3 but its not the same edition (media center) as mine but if it helps I have it
  6. mflynn

    mflynn Newcomer, in training Posts: 2,793

    So I assume the UBCD does not see the HD for some reason.

    Before you do the install of Recovery Console do the below,

    Start-Run
    type
    devmgmt.msc
    click OK

    Here rt click and uninstall any devices with a yellow Exclamation point (!) and if there is a category for Unknown or Other devices open these and do the same.
    --------------------------------------------------------------------------------------------------------

    OK so we will use the SP3 CD to install the Recovery console.

    Here is the instructions: http://support.microsoft.com/kb/307654

    Once installed boot to it and it should end up at C:\WINDOWS>

    If so do the copy operation as posted earlier.

    Mike
  7. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Well there were only 2 things with the yellow exclamation point A magiciso driver and a WAN Miniport (IP) under network adapters the magiciso uninstalled fine but the wan miniport said it couldnt because it might be needed to startup.

    ...well installed recovery console ok rebooted and the option for it came up so I clicked it and it started loading then boom, BSOD no error message like before...:blackeye:
    tried it 3 times each with the same result, the bottom progress bar shows up and asks to hit f6 to install third party scsi or raid drivers and after the progress bars hits the end bam.
  8. mflynn

    mflynn Newcomer, in training Posts: 2,793

    All this points to a SATA driver problem.

    Boot from the XP SP3 cd and chose R for recovery console and see it ends up at a C:\WINDOWS>

    If so it has recognized the SATA drivers if it just say c:\> the it has not recognized the SATA.

    If you get to the C:\WINDOWS> the do the copies as posted.

    Mike

    EDIT: Too tired gone to bed!
  9. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    well can't seem to catch a break.. I booted the xp cd and then it loaded a ton of files/drivers then finally came to a screen that asked me to hit enter to enter windows installation and no recovery so I pressed up and then crash with a different error than any before. but so I rebooted and this time I saw (right after hit f6 to install 3rd party drivers) hit f2 to enter system recovery so I did and then it came to a screen saying enter the cd called system recovery and hit enter when ready I hit enter and it came back to the same screen... apparently my computer hates me, btw I got the reinstall cd from dell today in case I could try to do the recovery from there but it only says reinstall cd and not a normal windows cd so I'm not sure.
  10. mflynn

    mflynn Newcomer, in training Posts: 2,793

    We need to go after the SATA drivers. Boot up go to device manager and click Disk controllers and get me all the info about the SATA controller.

    Does this computer have a Floppy disk?

    The DELL CD may recognize the SATA controller and offer Recovery console, and it may even have a Repair option to repair windows with out wiping the HD.

    Get me the info from the CD and I can look it up at Dell and perhaps help more.
    -------------------------------------------------------------------------------------------------------------------------

    The below will make an attempt to fix the Internet (even with the bad userinit).

    Download XP TCP/IP Repair (Netrepair.exe) http://www.xp-smoker.com/freeware.html
    Install (check place shortcut on desktop).

    Then shut down/power off.

    While off, reset the Router and Modem for at least 30 seconds

    Boot back up and run the XP TCPIP Repair icon and first click Reset TCP/IP it may or may not require a reboot here if it does not require a reboot then click the Repair Winsock and approve all to fix/repair and it will then require a reboot for sure. Reboot recheck for internet.

    If the first Repair Reset TCP/IP does require a reboot the as soon as it comes back up the run the second Reset Winsock!

    Mike.
  11. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    The infected computer does have a floppy disk drive if thats what your asking the current computer I'm on does not though nor do I think I even have any floppy disks lying around, id have to check my storage unit to possibly find any.

    So nothing that explicitly says Disk controllers in the device manager, there is a floppy disk controller which I dont believe is what you meant and a SCSI and RAID controller which im thinking might be what you want and if so what info do you want on it just the name of the driver or do you want me to go into its properties and get some more info from there.

    The Dell Cd's I have are operating system reinstallation dvd microsoft xp media center edition ersion 2005 with update rollup 2 more specifically part number x13-77497 bottom of disk has P/N MW892 and Drivers and Utilities dell xps 600 resource cd (contents: device drivers, diagnostics and utilities, and computer documentation) no part nomber that i can find but at the bottom of the cd there is P/N TC054 rev. A09, also an application cd for reinstalling dell tools system software (contents: antivirus software, support software, multimedia software, internet software) P/N H8516 Rev. A00. There are also a bunch of other cd's but not really relavant just other software that came with the computer.

    I'm going to try the internet repair right now and ill post back with any news.
     
  12. mflynn

    mflynn Newcomer, in training Posts: 2,793

    I want name and model of raid controller.

    Also carefully boot the Dell CD and see what options it has, if it has an option for Recovery Console try boot using that.

    If not then see if it has an option to a non destructive WIndows (not disk/HD) repair.

    Mike
  13. mflynn

    mflynn Newcomer, in training Posts: 2,793

    Try this to do the job on the userinit!

    COMBOFIX-Script
    Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

    Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
    Code:
    KillAll::
    
    FCopy::
    C:\WINDOWS\ServicePackFiles\i386\userinit.exe | C:\WINDOWS\system32\userinit.exe
    C:\WINDOWS\ServicePackFiles\i386\explorer.exe | C:\WINDOWS\explorer.exe
    Then drag this script and drop on top of ComboFix.

    ComboFix will now run a scan on your system.

    It may reboot your system when it finishes. This is normal.

    When finished, it will create a log. Attach the log back.

    Mike
  14. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    There were two which struck me as weird but I have a dualcore so maybe thats why? It also struck me as weird that they both seem different in ways but very similar.
    http://i186.photobucket.com/albums/x152/AsgClan/1-1.jpg
    http://i186.photobucket.com/albums/x152/AsgClan/2-2.jpg
    http://i186.photobucket.com/albums/x152/AsgClan/3-1.jpg

    The internet thing didn't work the resetlog is attatched.

    I haven't tried the dell cd's just yet because I saw your combofix script first I ran it and the log is attached, it seemed to do something when my computer restarted I didn't have to hit ctrl alt del and explorer.exe to bring up my desktop icons but initially my start menu wasn't shown then after combofix finished it came back up but still classic not normal xp still no internet or sound, but seemed like something happened which makes me at least a little excited.
  15. mflynn

    mflynn Newcomer, in training Posts: 2,793

    OK but it looks like we did fix userinit.

    Another Combofix to confirm. no script.

    Mike
  16. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    new log it still found something with userinit and eplorer.exe?
  17. mflynn

    mflynn Newcomer, in training Posts: 2,793

    OK boot to safe mode

    First do post #6 Copy paste! (I have edited it).

    Followed by post # 113 (jeeze) with the CFscript!

    Have you booted with the Dell Disks to see what recovery options it gives? let me know on that!

    Mike
  18. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Ok did the steps heres the log. As for the dell cd's I booted into the resource cd and there was a diagnostics menu and I'm having it do a scan of the devices on my computer to test for problems says it takes about an hour as for the reinstallation cd it says it is only for reinstallation so I'm a little scared of booting from it as I don't have my files backed up.
  19. mflynn

    mflynn Newcomer, in training Posts: 2,793

    Still no go on the userinit!

    No you are right about not reinstallation without backup.

    Do that now!

    Copy the entire Documents and settings folder to another partition or disk. This geys your documents and email favorites and address book.

    Get anything else you need.

    Copy the Program Files as a reference later on what to install.


    After that boot up the Dell CD it will not begin automaticly without warning and one of its options may be "Reinstallation" of Windows only.

    Mike
  20. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Don't have any other partitions or space really on my computer and I have about 150 gigs or more that need backing up, I was just going to backup onto dvd but at only a lil more than 4 gigs each this could take forever. I know there is software out there that compresses and backs up the folders you designate automatically can anyone recommend any? Or should I just try to .rar all my files into 4 gig files and just burn them one at a time?

    Also my taskbar/startmenu isnt showing up anymore, at startup all the programs run that are supposed to and my desktop icons do show up now but now my taskbar isnt I tried explorer.exe and it only opens up a window with the folders explorer open and I tried the windows button to try to get to the start menu and nothing when I minimze a window it seems to minimize to the taskbar but I cant seem to get it back up without hitting alt tab.
  21. mflynn

    mflynn Newcomer, in training Posts: 2,793

    Boot up the Dell CD it will not begin automatically without a dire warning and one of its options may be "Reinstallation" (repair install) of Windows only. Or even an option to open Recovery console.

    The reason for your start menu problems is that Explorer is infected.

    Mike
  22. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Ok so the cd I received can do a repair install from what I've read on dell's site so this might be able to fix the explorer and userinit problems? Everything I keep reading about repair installs always first warns to backup all files just to be safe and I'm paranoid so I'm trying to backup my files atm, Im having to revive an old computer I haven't used in a few years and use most of this computers HDD to backup my files. its taking me a while and I haven't really been around the past few days because we had some major problems at the lab I work at and have been spending overtime there on top of school but I'll post back when I have finished the backup if you think doing the repair install can fix it.
  23. mflynn

    mflynn Newcomer, in training Posts: 2,793

    I think it will fix Explorer and userinit and get us back on the internet.

    Put us back in control.

    Mike
  24. dahernandez

    dahernandez Newcomer, in training Topic Starter Posts: 68

    Well thanks for all your help flynn, however I tried the repair install and it crashed so I'm going to try a regular reinstall now that I have my data backed up and with my midterms looming this week, I hate quitting but it seems pretty useless at this point and seems like whatever did this has also infected every .exe file I have since as I'm backing up my data nod32 and avira is finding tons of infections. Thanks for trying though.

    -David
  25. mflynn

    mflynn Newcomer, in training Posts: 2,793

    Just recently in past couple of days a few that I advised DrWeb have cured almost everything.

    So use that to scan your backups when OS is back up!

    Mike
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.