Malware

[Solokan 0]

Possible to fix without reformatting?

[blade81 3]

Hi,

 

I don't want to say that it was completely impossible but more sensible solution would be reformat. We may spend much time with this and still end up to reformat solution.

[Solokan 0]

Alright. Well I have a bunch of stuff I don't want to lose but I think I'll be able to get over it.

[blade81 3]

Hi,

 

There's a good tutorial about reformatting made by wng_z3r0 here.

[Solokan 0]

And if I wanted to try and go the other way and just fix it?

[blade81 3]

Hi,

 

If you insist to take cleaning route then we can continue. Before that however I want to know if this folder really exists or if the name has been sensored?

c:\documents and settings\Lee ##notallowed

 

This will affect to fix later and that's why it's better to sort it out.

 

 

Before we can do any further fixing you have to copy clean ndis.sys to your c: drive. We'll put it in correct location then.

 

You'll need your XP Home Edition media for this.

 

Click start->run->write cmd and press enter. Command prompt with black background should open up.

 

Write (x is the cd drive with XP Home Edition media in it, replace with actual drive letter):

x: [ENTER][/b]

cd i386 [ENTER]

expand ndis.sy_ c:\ [ENTER]

 

When done, check that ndis.sys file has appeared to your c: root (c:\).

[Solokan 0]

The name has been censored.

Edited September 9, 2009 by Solokan

[Solokan 0]

cd i386 isn't working for some reason.

[blade81 3]

Hi,

 

I have estimated this thing once more and I don't want to leave cleaning as an option. System is too badly infected. You do right thing by backing up important data to your external drive or cd/dvd medias and then reformat the system.

[Solokan 0]

Alright well thank you for all your time and effort although I still ended up having to reformat.

[blade81 3]

You're welcome. Sometimes reformat is more sensible thing to do than cleaning attempt. Here we had to use that way cos the system was so badly infected.