Computer Hope

Microsoft => Microsoft Windows => Windows Vista and 7 => Topic started by: Frank on April 14, 2009, 02:32:48 AM

Title: Virus destroyed system files
Post by: Frank on April 14, 2009, 02:32:48 AM

I downloaded a file that was passed by the current Avast checker, both in the .rar and .exe states. The computer was fine up to this point. When I executed this file Avast came up with .sys files having  viruses and suspecting the .exe file doing some funny things I told Avast to place those files into the virus vault.

I managed to close the .exe but the pc was slow so switched it of and tried to reboot. Like BudaFire's post I am also unable to boot now, I get critical a error when I try to boot in, normal, last good known or without drivers (don't remember the name of this mode).

I am now unable to do system restore because I can't boot. What can do is boot my BartPE CD. This is how I am writing this post. I looked in the virus chest with windows explorer and can see the files that have been moved in there, but the filenames are changed to some alpha numeric. So, I can't move them back to windows\system32 folder.

What can I do to restore my computer?
Help would be appreciated.

Title: Re: Virus destroyed system files
Post by: patio on April 14, 2009, 06:29:51 AM

XP or Vista ? ?
If XP Repair Install of XP (http://www.michaelstevenstech.com/XPrepairinstall.htm)

Vista Instructions (http://www.vistax64.com/tutorials/88236-repair-install-vista.html)

In both cases read the material thru and print out a copy for reference...

If done properly all your data and programs will be intact.
If done improperly your data and some apps will be gone but you will have a new install of Windows.

Title: Re: Virus destroyed system files
Post by: Frank on April 14, 2009, 02:56:30 PM

Unfortunately, I don't think there is another solution.
I have a Windows XP Pro SP3. I have my CD slipstreamed to SP3. I hope that repair install works for SP3.

Title: Re: Virus destroyed system files
Post by: patio on April 14, 2009, 04:45:26 PM

If that's what you have installed then it will work...
Pay special attention to the Warning paragraphs in the guide...
Other than that you should do fine...

Post back with successful results !

Title: Re: Virus destroyed system files
Post by: Frank on April 14, 2009, 05:47:39 PM

No, I didn't install SP3, I installed Windows XP Pro SP2, then installed SP3 and then slipstreamed SP3 for a new CD. This is what I have. Should this work?

Title: Re: Virus destroyed system files
Post by: patio on April 14, 2009, 07:20:50 PM

Yes,
What did you use to create the slipstream CD ? ?
If nLite then you should be good to go...

Title: Re: Virus destroyed system files
Post by: Frank on April 15, 2009, 03:15:18 AM

Just realized I had an image backup of my C: drive. I restored this, it's a little old but works fine.
Thank you very much. Sorry I forgot about my backup (it's automated).

Title: Re: Virus destroyed system files
Post by: BC_Programmer on April 15, 2009, 03:28:57 AM

good to hear! No need to apologize!

backups are great  :)

Title: Re: Virus destroyed system files
Post by: patio on April 15, 2009, 07:27:11 AM

Yep !

 ;)