Your system is infected! (Please help if you can)

[evilfantasy]

I am baffled as to what happened here.

Try booting the computer into safe mode using the F8 method and see if it get's to the desktop.

[KayleyBug]

The box still keeps coming up -

Explorer.EXE - unable to locate component
This applications has failed to start because msls51.dll was not found. Re-installing the application may fix this problem.

There's a red circle with a white X on the left side of the box that resembles the one the virus put in my task bar at the very start, telling me to install anti-virus.

Now the screen is completely black with Safe Mode written in each corner and "Microsoft (R) Windows XP (R) (Build 2600.xpsp.051011-1528: Service Pack 2)" written at the top.

[evilfantasy]

msls51.dll is a malicious file.

Can you get explorer or rstrui.exe to run in Safe Mode using the Task Manager?

[KayleyBug]

Explorer and system restore won't work in Safe Mode either, it's the exact same results as when it was in Normal Mode, which is weird because I thought things were meant to just work when in Safe Mode.

[evilfantasy]

Can you burn a CD?

On a good computer, download Windows Recovery Console: http://www.thecomputerparamedic.com/files/rc.iso

Next, download, and install free Imgburn: http://www.imgburn.com/index.php?act=download

Using Imgburn, burn rc.iso to a CD.

Put the CD in the infected computer and boot to the CD...let it finish loading.

When the "Welcome to Setup" screen appears, press R to start the Recovery Console.

Follow steps 3 - 14 as described here - http://www.geekstogo.com/forum/Fake-Security-Centre-Alerts-virus-malware-t266741.html&st=15&p=1753604#entry1753604

[KayleyBug]

I've made the CD and put it in my infected laptop, however I'm having trouble with the 'boot to the CD step'.
Do you mean that I should restart and instead of pressing f8 for Safe Mode I should press f9 for Boot service menu? Or the other option is f10 which is ROM based setup.

In Safe Mode and Normal Mode the CD doesn't do anything so I guess I need to do either the f9 or f10 option.

If it's any help my laptop is a HP compaq nx6325.

[evilfantasy]

Do you mean that I should restart and instead of pressing f8 for Safe Mode I should press f9 for Boot service menu? Or the other option is f10 which is ROM based setup.

It will be the F9 or F10 option. You should see the CD that you have in the drive to boot to. If it isn't listed, when the computer first starts to boot, in the lower left screen you should see which key to press to get to the boot menu.

[KayleyBug]

I've reached step 9 where I am supposed to enter the promt 'cd system~1\_resto~1' but when I try and type the ~ symbol on my UK keyboard a | comes up so I suppose it's set to US style.

The key next to the 1 key, which consists of `and ¬ will make a ~ that is higher up than the one in the prompt/the one I've just demonstrated, would that still work? I've tried every other button and this is the closest it'll get.

[evilfantasy]

Try this.

cd system32\_restore

[KayleyBug]

I tried it with the weird high up ~ and it said access is denied so I followed the steps on the site, however after re-booting access was still denied.
I tried cd system32\_restore but it says the system cannot find the file or directory specified.

[KayleyBug]

Hate to bump myself, but I finally got it to work (just kept doing it over and over, it decided to work eventually) and according to the site, once you type dir
'When you hit enter it will list all the restore points folders like "rp1", "rp2"
well I don't see anything like that, I have a huge huge list (pages and pages) that starts out saying things like

07/11/06  07:29a  d--h-c--    0 $NtUnistallKB873333$

it goes on like this for a while, and nearer the end there are a couple of pages that are more vaired, like:

02/19/10  12:58a -a------     216 wiadebug.log
08/07/04  01:01p -arh----    749  WindowsShell.manifest

[evilfantasy]

I'm not sure that's what you need.

When you were booting up with the CD was there an option to boot to the D drive which should be your recovery partition?

[KayleyBug]

Ok, well it was worth a try

Yes, I can enter D:\MiniNT if I press 2 instead of 1, I just assumed I needed the C drive because that's what the link you gave was explaining about. The prompt now say says D:\MiniNT>

Let me know what I need to type in after the prompt, as the link you gave is for C drive prompts. Thanks for being so patient with me 

[evilfantasy]

You are going to loose all of your documents and stuff by doing this so be sure there is nothing you need to recover before trying this.

Instructions here. http://www.laptops-drivers.com/miscellaneous/step-by-step-how-to-recover-hp-or-compaq-laptop.html

[KayleyBug]

Should I do destructive or non-destructive recovery? The link gives instructions for both options.