This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Recovering from a trojan, can someone review my logs, please

72 min read

This thread's last reply is from December 13, 2008, 3:40 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Great :)

Please check next if this file exists:

C:\WINDOWS\system32\spoolsv.exe
That file is not in the system32 directory.
Then see here and post back a fresh HijackThis log afterwards, please.
Stuck!
I was going through the steps "to run SFC.EXE /SCANNOW without a Windows installation CD - only a restore CD from the manufacturer". I copied the directory "i386" from C:\WINDOWS\Driver Cache to C:\ and I redirected the regedit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\SetupSourcePath to C:\ so that it would read the i386 folder after rebooting. When I run SFC.EXE /SCANNOW, I am still getting the error message "please insert XP disk". Could the files in the i386 folder be incorrect or not up to date?
That is possible as that CD doesn't most likely have SP3.

Are you able to borrow CD from someone?
One step forward, two back...

I turned the computer off last night because I couldn't do anything more until I heard from you. This morning when I restarted it, because of the change I made to the SetupSourcePath, it went right into trying to restore the system. The only options were to begin reformatting the system, or going to the dos prompt. Obviously I didn't want to format the drive so I went to dos. It is sitting at the a:\ prompt, I don't remember how to get Windows to start up from there and searches online aren't helping me find the command.

I will try to find a copy of XP from someone to restore the files needed.
Typing c: (enter),
cd windows (enter) and
win (enter) might help here.
Well, the last step back was due to my stupidity... I was restarting with the system restore disk in the drive. :oops: I got it to restart and I placed a message on the BleepingComputer.com forum to see if they can tell me how to restore those files without an XP disk. I will post back here with a new hijack this log when I get advice how to continue.
Thank you for information, I will keep this thread open :)
flying92?
Hi...
I've been receiving help from the guys at BleepingComputer.com but I seem to have reached an impass where I need a Windows XP disk to restore system files and I don't have one. I am headed out of town on business as we speak and I will continue trying to fix this when I return later this week. It appears at though I may need to restore my system if I can't find a disk.

Thanks again for all of your help!
Thank you for update :)
lack of activity,