Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Your system is infected! (Please help if you can)  (Read 38523 times)

0 Members and 1 Guest are viewing this topic.

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 489
  • Experience: Familiar
  • OS: Windows 10
Re: Your system is infected! (Please help if you can)
« Reply #30 on: February 18, 2010, 02:58:34 PM »
I am baffled as to what happened here.

Try booting the computer into safe mode using the F8 method and see if it get's to the desktop.

KayleyBug

    Topic Starter


    Beginner

    Re: Your system is infected! (Please help if you can)
    « Reply #31 on: February 18, 2010, 03:07:45 PM »
    The box still keeps coming up -

    Explorer.EXE - unable to locate component
    This applications has failed to start because msls51.dll was not found. Re-installing the application may fix this problem.


    There's a red circle with a white X on the left side of the box that resembles the one the virus put in my task bar at the very start, telling me to install anti-virus.

    Now the screen is completely black with Safe Mode written in each corner and "Microsoft (R) Windows XP (R) (Build 2600.xpsp.051011-1528: Service Pack 2)" written at the top.

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 489
    • Experience: Familiar
    • OS: Windows 10
    Re: Your system is infected! (Please help if you can)
    « Reply #32 on: February 18, 2010, 03:32:07 PM »
    msls51.dll is a malicious file.

    Can you get explorer or rstrui.exe to run in Safe Mode using the Task Manager?

    KayleyBug

      Topic Starter


      Beginner

      Re: Your system is infected! (Please help if you can)
      « Reply #33 on: February 18, 2010, 03:34:52 PM »
      Explorer and system restore won't work in Safe Mode either, it's the exact same results as when it was in Normal Mode, which is weird because I thought things were meant to just work when in Safe Mode.

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 489
      • Experience: Familiar
      • OS: Windows 10
      Re: Your system is infected! (Please help if you can)
      « Reply #34 on: February 18, 2010, 03:39:25 PM »
      Can you burn a CD?

      On a good computer, download Windows Recovery Console: http://www.thecomputerparamedic.com/files/rc.iso

      Next, download, and install free Imgburn: http://www.imgburn.com/index.php?act=download

      Using Imgburn, burn rc.iso to a CD.

      Put the CD in the infected computer and boot to the CD...let it finish loading.

      When the "Welcome to Setup" screen appears, press R to start the Recovery Console.

      Follow steps 3 - 14 as described here - http://www.geekstogo.com/forum/Fake-Security-Centre-Alerts-virus-malware-t266741.html&st=15&p=1753604#entry1753604

      KayleyBug

        Topic Starter


        Beginner

        Re: Your system is infected! (Please help if you can)
        « Reply #35 on: February 18, 2010, 04:18:06 PM »
        I've made the CD and put it in my infected laptop, however I'm having trouble with the 'boot to the CD step'.
        Do you mean that I should restart and instead of pressing f8 for Safe Mode I should press f9 for Boot service menu? Or the other option is f10 which is ROM based setup.

        In Safe Mode and Normal Mode the CD doesn't do anything so I guess I need to do either the f9 or f10 option.

        If it's any help my laptop is a HP compaq nx6325.

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 489
        • Experience: Familiar
        • OS: Windows 10
        Re: Your system is infected! (Please help if you can)
        « Reply #36 on: February 18, 2010, 04:21:12 PM »
        Quote
        Do you mean that I should restart and instead of pressing f8 for Safe Mode I should press f9 for Boot service menu? Or the other option is f10 which is ROM based setup.

        It will be the F9 or F10 option. You should see the CD that you have in the drive to boot to. If it isn't listed, when the computer first starts to boot, in the lower left screen you should see which key to press to get to the boot menu.

        KayleyBug

          Topic Starter


          Beginner

          Re: Your system is infected! (Please help if you can)
          « Reply #37 on: February 18, 2010, 04:42:33 PM »
          I've reached step 9 where I am supposed to enter the promt 'cd system~1\_resto~1' but when I try and type the ~ symbol on my UK keyboard a | comes up so I suppose it's set to US style.

          The key next to the 1 key, which consists of `and will make a ~ that is higher up than the one in the prompt/the one I've just demonstrated, would that still work? I've tried every other button and this is the closest it'll get.

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 489
          • Experience: Familiar
          • OS: Windows 10
          Re: Your system is infected! (Please help if you can)
          « Reply #38 on: February 18, 2010, 05:00:55 PM »
          Try this.

          cd system32\_restore

          KayleyBug

            Topic Starter


            Beginner

            Re: Your system is infected! (Please help if you can)
            « Reply #39 on: February 18, 2010, 05:03:57 PM »
            I tried it with the weird high up ~ and it said access is denied so I followed the steps on the site, however after re-booting access was still denied.
            I tried cd system32\_restore but it says the system cannot find the file or directory specified.

            « Last Edit: February 18, 2010, 05:42:00 PM by KayleyBug »

            KayleyBug

              Topic Starter


              Beginner

              Re: Your system is infected! (Please help if you can)
              « Reply #40 on: February 18, 2010, 05:42:15 PM »
              Hate to bump myself, but I finally got it to work (just kept doing it over and over, it decided to work eventually) and according to the site, once you type dir
              'When you hit enter it will list all the restore points folders like "rp1", "rp2"
              well I don't see anything like that, I have a huge huge list (pages and pages) that starts out saying things like

              07/11/06  07:29a  d--h-c--    0 $NtUnistallKB873333$

              it goes on like this for a while, and nearer the end there are a couple of pages that are more vaired, like:

              02/19/10  12:58a -a------     216 wiadebug.log
              08/07/04  01:01p -arh----    749  WindowsShell.manifest

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 489
              • Experience: Familiar
              • OS: Windows 10
              Re: Your system is infected! (Please help if you can)
              « Reply #41 on: February 18, 2010, 07:27:18 PM »
              I'm not sure that's what you need.

              When you were booting up with the CD was there an option to boot to the D drive which should be your recovery partition?

              KayleyBug

                Topic Starter


                Beginner

                Re: Your system is infected! (Please help if you can)
                « Reply #42 on: February 19, 2010, 04:13:48 AM »
                Ok, well it was worth a try :)

                Yes, I can enter D:\MiniNT if I press 2 instead of 1, I just assumed I needed the C drive because that's what the link you gave was explaining about. The prompt now say says D:\MiniNT>

                Let me know what I need to type in after the prompt, as the link you gave is for C drive prompts. Thanks for being so patient with me  :)

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 489
                • Experience: Familiar
                • OS: Windows 10
                Re: Your system is infected! (Please help if you can)
                « Reply #43 on: February 19, 2010, 08:18:32 AM »
                You are going to loose all of your documents and stuff by doing this so be sure there is nothing you need to recover before trying this.

                Instructions here. http://www.laptops-drivers.com/miscellaneous/step-by-step-how-to-recover-hp-or-compaq-laptop.html

                KayleyBug

                  Topic Starter


                  Beginner

                  Re: Your system is infected! (Please help if you can)
                  « Reply #44 on: February 19, 2010, 08:22:07 AM »
                  Should I do destructive or non-destructive recovery? The link gives instructions for both options.