Network connections and sound not working after malwarebytes

Status
Not open for further replies.
Yes from the cmd prompt of UBCD4win or use My Computer to browse to C:\WINDOWS\ServicePackFiles\i386\userinit.exe and then copy it to C:\WINDOWS\system32 (the bad one is here) and replace it. And to dllcache and replace it (tihis one is also bad).

OK because this bad userinit was in charge all may still not be fixed but it should now let us fix the issues more easily.

Just reboot and report back.


Or from the prompt
type
copy C:\WINDOWS\ServicePackFiles\i386\userinit.exe C:\WINDOWS\system32

answer yes to over write existing file

Then
type
copy C:\WINDOWS\ServicePackFiles\i386\userinit.exe C:\WINDOWS\system32\dllcache
answer yes to over write existing file

Good luck.

Mike
 
:( When in cmd prompt and I tried the commands it said the device is not ready I also tried the cd system32 and the cd windows and I forget what it said but something to the effect of it could not find it, went to my computer and hit C:\ it then asked me to insert a cd into C:\ :confused:

Should I try the recovery console with the UBCD4win? Because I just let it boot normally, or well the time ran out on me before I made a decision.

And not that I'm crying for any long lost relatives or anything but since the problem is isolated pretty much to the userinit I should be safe to back up my files such as my documents and some program files yea? Def not crying uncle yet though, unless your out of ideas.. I think i've come along so far at this point I really want to teach this thing a lesson instead of just reinstalling xp. Well I should be home tommorow evening (for me) night for you EST ppls.
 
No it sounds as if UBCD4Win is not seeing your windows. Or is seeing it as a different drive letter.

Open My Computer and look at all the drives UBCD4Win runs from the CD and a RAM drive.

With My Computer browse Program Files on any drive that has one, and look for your installed programs.

Not there then you are not seeing your drive? This is unusual as that UBCD has the Driver packs and SATA drivers installed and should boot the Sata drivers.

Did you not say you had an XP SP3 cd coming also with that UBCD4Win?

We may need it?

Mike
 
So I assume the UBCD does not see the HD for some reason.

Before you do the install of Recovery Console do the below,

Start-Run
type
devmgmt.msc
click OK

Here rt click and uninstall any devices with a yellow Exclamation point (!) and if there is a category for Unknown or Other devices open these and do the same.
--------------------------------------------------------------------------------------------------------

OK so we will use the SP3 CD to install the Recovery console.

Here is the instructions: http://support.microsoft.com/kb/307654

Once installed boot to it and it should end up at C:\WINDOWS>

If so do the copy operation as posted earlier.

Mike
 
Well there were only 2 things with the yellow exclamation point A magiciso driver and a WAN Miniport (IP) under network adapters the magiciso uninstalled fine but the wan miniport said it couldnt because it might be needed to startup.

...well installed recovery console ok rebooted and the option for it came up so I clicked it and it started loading then boom, BSOD no error message like before...:blackeye:
tried it 3 times each with the same result, the bottom progress bar shows up and asks to hit f6 to install third party scsi or raid drivers and after the progress bars hits the end bam.
 
All this points to a SATA driver problem.

Boot from the XP SP3 cd and chose R for recovery console and see it ends up at a C:\WINDOWS>

If so it has recognized the SATA drivers if it just say c:\> the it has not recognized the SATA.

If you get to the C:\WINDOWS> the do the copies as posted.

Mike

EDIT: Too tired gone to bed!
 
well can't seem to catch a break.. I booted the xp cd and then it loaded a ton of files/drivers then finally came to a screen that asked me to hit enter to enter windows installation and no recovery so I pressed up and then crash with a different error than any before. but so I rebooted and this time I saw (right after hit f6 to install 3rd party drivers) hit f2 to enter system recovery so I did and then it came to a screen saying enter the cd called system recovery and hit enter when ready I hit enter and it came back to the same screen... apparently my computer hates me, btw I got the reinstall cd from dell today in case I could try to do the recovery from there but it only says reinstall cd and not a normal windows cd so I'm not sure.
 
We need to go after the SATA drivers. Boot up go to device manager and click Disk controllers and get me all the info about the SATA controller.

Does this computer have a Floppy disk?

The DELL CD may recognize the SATA controller and offer Recovery console, and it may even have a Repair option to repair windows with out wiping the HD.

Get me the info from the CD and I can look it up at Dell and perhaps help more.
Here is our problem. We have a bad userinit.exe installed by Malware. It can not be replaced by live windows, only offline like from Recovery Console or Alternate OS like UBCD. But we are being stopped by the inability of these to recognize the SATA controller and therefore the HD
-------------------------------------------------------------------------------------------------------------------------

The below will make an attempt to fix the Internet (even with the bad userinit).

Download XP TCP/IP Repair (Netrepair.exe) http://www.xp-smoker.com/freeware.html
Install (check place shortcut on desktop).

Then shut down/power off.

While off, reset the Router and Modem for at least 30 seconds

Boot back up and run the XP TCPIP Repair icon and first click Reset TCP/IP it may or may not require a reboot here if it does not require a reboot then click the Repair Winsock and approve all to fix/repair and it will then require a reboot for sure. Reboot recheck for internet.

If the first Repair Reset TCP/IP does require a reboot the as soon as it comes back up the run the second Reset Winsock!

Mike.
 
The infected computer does have a floppy disk drive if thats what your asking the current computer I'm on does not though nor do I think I even have any floppy disks lying around, id have to check my storage unit to possibly find any.

So nothing that explicitly says Disk controllers in the device manager, there is a floppy disk controller which I dont believe is what you meant and a SCSI and RAID controller which im thinking might be what you want and if so what info do you want on it just the name of the driver or do you want me to go into its properties and get some more info from there.

The Dell Cd's I have are operating system reinstallation dvd microsoft xp media center edition ersion 2005 with update rollup 2 more specifically part number x13-77497 bottom of disk has P/N MW892 and Drivers and Utilities dell xps 600 resource cd (contents: device drivers, diagnostics and utilities, and computer documentation) no part nomber that i can find but at the bottom of the cd there is P/N TC054 rev. A09, also an application cd for reinstalling dell tools system software (contents: antivirus software, support software, multimedia software, internet software) P/N H8516 Rev. A00. There are also a bunch of other cd's but not really relavant just other software that came with the computer.

I'm going to try the internet repair right now and ill post back with any news.
 
I want name and model of raid controller.

Also carefully boot the Dell CD and see what options it has, if it has an option for Recovery Console try boot using that.

If not then see if it has an option to a non destructive WIndows (not disk/HD) repair.

Mike
 
Try this to do the job on the userinit!

COMBOFIX-Script
Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
Code:
KillAll::

FCopy::
C:\WINDOWS\ServicePackFiles\i386\userinit.exe | C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\ServicePackFiles\i386\explorer.exe | C:\WINDOWS\explorer.exe
Then drag this script and drop on top of ComboFix.

ComboFix will now run a scan on your system.

It may reboot your system when it finishes. This is normal.

When finished, it will create a log. Attach the log back.

Mike
 
There were two which struck me as weird but I have a dualcore so maybe thats why? It also struck me as weird that they both seem different in ways but very similar.
http://i186.photobucket.com/albums/x152/AsgClan/1-1.jpg
http://i186.photobucket.com/albums/x152/AsgClan/2-2.jpg
http://i186.photobucket.com/albums/x152/AsgClan/3-1.jpg

The internet thing didn't work the resetlog is attatched.

I haven't tried the dell cd's just yet because I saw your combofix script first I ran it and the log is attached, it seemed to do something when my computer restarted I didn't have to hit ctrl alt del and explorer.exe to bring up my desktop icons but initially my start menu wasn't shown then after combofix finished it came back up but still classic not normal xp still no internet or sound, but seemed like something happened which makes me at least a little excited.
 
OK boot to safe mode

First do post #6 Copy paste! (I have edited it).

Followed by post # 113 (jeeze) with the CFscript!

Have you booted with the Dell Disks to see what recovery options it gives? let me know on that!

Mike
 
Ok did the steps heres the log. As for the dell cd's I booted into the resource cd and there was a diagnostics menu and I'm having it do a scan of the devices on my computer to test for problems says it takes about an hour as for the reinstallation cd it says it is only for reinstallation so I'm a little scared of booting from it as I don't have my files backed up.
 
Still no go on the userinit!

No you are right about not reinstallation without backup.

Do that now!

Copy the entire Documents and settings folder to another partition or disk. This geys your documents and email favorites and address book.

Get anything else you need.

Copy the Program Files as a reference later on what to install.


After that boot up the Dell CD it will not begin automaticly without warning and one of its options may be "Reinstallation" of Windows only.

Mike
 
Don't have any other partitions or space really on my computer and I have about 150 gigs or more that need backing up, I was just going to backup onto dvd but at only a lil more than 4 gigs each this could take forever. I know there is software out there that compresses and backs up the folders you designate automatically can anyone recommend any? Or should I just try to .rar all my files into 4 gig files and just burn them one at a time?

Also my taskbar/startmenu isnt showing up anymore, at startup all the programs run that are supposed to and my desktop icons do show up now but now my taskbar isnt I tried explorer.exe and it only opens up a window with the folders explorer open and I tried the windows button to try to get to the start menu and nothing when I minimze a window it seems to minimize to the taskbar but I cant seem to get it back up without hitting alt tab.
 
Boot up the Dell CD it will not begin automatically without a dire warning and one of its options may be "Reinstallation" (repair install) of Windows only. Or even an option to open Recovery console.

The reason for your start menu problems is that Explorer is infected.

Mike
 
Ok so the cd I received can do a repair install from what I've read on dell's site so this might be able to fix the explorer and userinit problems? Everything I keep reading about repair installs always first warns to backup all files just to be safe and I'm paranoid so I'm trying to backup my files atm, Im having to revive an old computer I haven't used in a few years and use most of this computers HDD to backup my files. its taking me a while and I haven't really been around the past few days because we had some major problems at the lab I work at and have been spending overtime there on top of school but I'll post back when I have finished the backup if you think doing the repair install can fix it.
 
I think it will fix Explorer and userinit and get us back on the internet.

Put us back in control.

Mike
 
Well thanks for all your help flynn, however I tried the repair install and it crashed so I'm going to try a regular reinstall now that I have my data backed up and with my midterms looming this week, I hate quitting but it seems pretty useless at this point and seems like whatever did this has also infected every .exe file I have since as I'm backing up my data nod32 and avira is finding tons of infections. Thanks for trying though.

-David
 
Just recently in past couple of days a few that I advised DrWeb have cured almost everything.

So use that to scan your backups when OS is back up!

Mike
 
Status
Not open for further replies.
Back