Atlas spyware & Packed.Monder trojan

View previous topic View next topic Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 8th February 2010, 3:24 am

Oh, ooops.

Please go to the following page, and download the tool, which is the linked Microsoft Fix it picture in the middle of the page. Run the tool, and follow prompts.
[You must be registered and logged in to see this link.]
Then, let me know if updates are ok, yet.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 8th February 2010, 9:00 pm

OK, I've finally (it's taken most of the day - it's now 21:00 here in UK!) got XP-SP3 by downloading WindowsXP-KB936929-SP3-x86-ENU.exe.
Windows Updater now says I have no outstanding Critical updates.
I noticed that whilst processing the download it created a new Restore Point - does that matter.
I've got so fixed on SP3 I'm not sure what now needs doing or what needs re-doing as I've gone 'native'. Regards, Peter

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 8th February 2010, 9:45 pm

Ok good. Any more questions?


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 9th February 2010, 4:54 pm

Unbelievably, I read your response above (thank you) and a few seconds later my PC froze up - I'm not suggesting the two are related just pointing out the wicked co-incidence. Anyway I had to close down by holding the 'On' button and now I can't boot up.

On boot I get message:
" Windows could not start because the following file is missing or corrupt:
\WINDOWS\SYSTEM32\CONFIG\SYSTEM

You can attempt to repair this file by starting Windows Setup using the original Setup CD-ROM.
Select 'r' at the first screen to start repair. "

This seems to get me into the Recovery Console but I'm not clear how to proceed from there.

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 9th February 2010, 5:16 pm

So, you can see the Recovery Console?

Does not surprise me. A failed Service Pack can cause this problem.

Can you get in to Safe Mode or see any other options?


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 9th February 2010, 5:22 pm

Yes I can get Safe Mode or choose where I boot from. I do have the Setup CD too

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 9th February 2010, 5:24 pm

Try to boot to Safe Mode with Networking. And we will go from there. Is that possible?


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 9th February 2010, 5:40 pm

Yes, I now have a choice of "Recovery Console" or "XP Home Edition"

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 9th February 2010, 9:11 pm

Boot into Recovery Console and log on to the current installation.

When you get to the Recovery Console prompt, type cd \ and press "Enter".

Type cd system~1\_resto~1 and press "Enter".

Type dir and press "Enter".

After
you press enter you will see a list of folders (like rp1, rp2) If the
list of restore points has more than one page then press the "Enter" key until you reach the end of the list


Type cd rp {number of the second to last folder in the list} and press "Enter".
Note: Example: cd rp9 if the last restore point is rp10

Type cd snapshot and press "Enter".

Type copy _registry_machine_system c:\windows\system32\config\system and press "Enter".

Type copy _registry_machine_software c:\windows\system32\config\software and press "Enter".

Type exit and press "Enter".

Your PC will reboot.

=======================

If you get an access denied error when doing the above, then do the following at the recovery console:

Type cd \ and press "Enter".

Type cd windows\system32\config and press "Enter".

Type ren system system.bak and press "Enter".

Type exit and press "Enter".

Your PC will reboot, go back into the Recovery Console and start from the beginning.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 9th February 2010, 9:48 pm

I'm struggling here....

if I type "dir" at the C prompt I get
" Directory of C:\

An error has occured during directory enumeration"

cd \ a the C prompt generates
" The path or file specified is not valid."

I can't get anything you have proposed to work :-(

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Tuba-Smarty on 10th February 2010, 2:39 pm

Hello Jay, I am now (hopefully) having my hard disk re-built.

Thank you for your help over the last few days.

I'm not sure how to close this topic. Best wishes, Peter

Tuba-Smarty
Novice
Novice

Posts Posts : 32
Joined Joined : 2010-02-03
OS OS : W7
Points Points : 25469
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Atlas spyware & Packed.Monder trojan

Post by Dr Jay on 10th February 2010, 2:59 pm

You're welcome.

=>CLOSED


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14317
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 303008
# Likes # Likes : 10

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum