This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Recovering from a trojan, can someone review my logs, please

6 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from December 13, 2008, 3:40 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Shaba Admin/Teacher Emeritus
Great :)

Please check next if this file exists:

C:\WINDOWS\system32\spoolsv.exe
flying92
That file is not in the system32 directory.
Shaba Admin/Teacher Emeritus
Then see here and post back a fresh HijackThis log afterwards, please.
flying92
Stuck!
I was going through the steps "to run SFC.EXE /SCANNOW without a Windows installation CD - only a restore CD from the manufacturer". I copied the directory "i386" from C:\WINDOWS\Driver Cache to C:\ and I redirected the regedit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\SetupSourcePath to C:\ so that it would read the i386 folder after rebooting. When I run SFC.EXE /SCANNOW, I am still getting the error message "please insert XP disk". Could the files in the i386 folder be incorrect or not up to date?
Shaba Admin/Teacher Emeritus
That is possible as that CD doesn't most likely have SP3.

Are you able to borrow CD from someone?
flying92
One step forward, two back...

I turned the computer off last night because I couldn't do anything more until I heard from you. This morning when I restarted it, because of the change I made to the SetupSourcePath, it went right into trying to restore the system. The only options were to begin reformatting the system, or going to the dos prompt. Obviously I didn't want to format the drive so I went to dos. It is sitting at the a:\ prompt, I don't remember how to get Windows to start up from there and searches online aren't helping me find the command.

I will try to find a copy of XP from someone to restore the files needed.
Shaba Admin/Teacher Emeritus
Typing c: (enter),
cd windows (enter) and
win (enter) might help here.
flying92
Well, the last step back was due to my stupidity... I was restarting with the system restore disk in the drive. :oops: I got it to restart and I placed a message on the BleepingComputer.com forum to see if they can tell me how to restore those files without an XP disk. I will post back here with a new hijack this log when I get advice how to continue.
Shaba Admin/Teacher Emeritus
Thank you for information, I will keep this thread open :)
Shaba Admin/Teacher Emeritus
flying92?
flying92
Hi...
I've been receiving help from the guys at BleepingComputer.com but I seem to have reached an impass where I need a Windows XP disk to restore system files and I don't have one. I am headed out of town on business as we speak and I will continue trying to fix this when I return later this week. It appears at though I may need to restore my system if I can't find a disk.

Thanks again for all of your help!
Shaba Admin/Teacher Emeritus
Thank you for update :)
NonSuch Administrator
lack of activity,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.