Helper

Discussion in 'Malware Help (A Specialist Will Reply)' started by femmestarrr, Dec 4, 2008.

  1. femmestarrr

    femmestarrr Private E-2

    i did disable the startup. then i enabled it when ti thought it was fixed. Right now posting from cell phone. Pc says unable 2 begin windows due 2 missing or corrupt file. Have 2 get win xp and install.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Read step 1 again! You should not be using MSconfig. That is the point being made in step 1.


    What we were fixing are not required Windows files. What is the exact word for word message you are receiving and how far into the boot and login process do you get? I need to know exactly when you are getting this message. Like is it before or after you even log into Windows?

    How much of my last procedure did you run? Did you run SUPERAntiSpyware? The new version??? Did it say anything about removing user32.dll?

    Does your PC boot okay in safe boot mode?
     
  3. femmestarrr

    femmestarrr Private E-2

    It does not start in safe mode.
    I get a black screen with a message that windows cannot start because or missing file or corrupt file.
    To get a xp cd and press R for repair. My friend loaned me a copy of one but will not read it. So waiting from someone else to get an original. I have to try to get it back because a lot of things are not backed up.


    fingers crossed,
    Noelia
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you have the nohow or a friend can help you. You can always put your hard disk into another PC as a slave drive and then backup your data. Also if the OS is the same, you could copy the missing file from the other PC to your hard disk. Does it tell you the name of the missing file?

    I was just guessing that it could be the C:\windows\system32\user32.dll You could look for this file on your hard disk while it is slaved in another PC. Note that while slaved, the drive letter would not be C There is a backup on your hard disk which is in the below folder:
    C:\WINDOWS\ServicePackFiles\i386\user32.dll

    You could just copy the above file to the system32 folder to get it back...... Again assuming this is the missing file.

    It is possible that your user32.dll and other system files were infected. There are many many cases of infections like this lately.
     
  5. femmestarrr

    femmestarrr Private E-2

    I thank you very much for these instructions. it is the right file.


    thanks
    Noelia
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Does this mean everything is okay now.
     
  7. femmestarrr

    femmestarrr Private E-2

    No things are not okay, HOurs reduced at work, In the process of moving and looking for someone to salvage my computer.

    but I have positive thoughts and will let you know when it is back up.

    thanks again,
    Noelia
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then what did you mean by
    ? Did you mean that I was correct about it being the user32.dll file that was missing?

    What steps have you tried to fix it? With a Windows XP CD you can boot to the Recovery Console and attempt to replace the missing file. Your previous logs show there were backups that could be used in the below folders
    Code:
    C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll" 577024 03/02/2005 10:19 AM 
    "C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll" 578048 03/08/2007 07:48 AM 
    "C:\WINDOWS\$NtServicePackUninstall$\user32.dll" 577536 03/08/2007 07:36 AM 
    "C:\WINDOWS\$NtServicePackUninstall$\user32.dll.000" 577024 08/03/2004 08:56 PM 
    "C:\WINDOWS\$NtUninstallKB824141$\user32.dll" 528896 11/01/2002 12:26 PM 
    "C:\WINDOWS\$NtUninstallKB890859$\user32.dll" 577024 08/03/2004 08:56 PM 
    "C:\WINDOWS\$NtUninstallKB925902$\user32.dll" 577024 03/02/2005 10:09 AM 
    "C:\WINDOWS\$NtUninstallQ328310$\user32.dll" 560128 08/29/2002 02:41 AM 
    "C:\WINDOWS\$NtUninstallQ328310_RTM$\user32.dll" 561152 08/17/2001 09:36 PM 
    "C:\WINDOWS\$xpsp1hfm$\Q328310\user32.dll" 528896 11/01/2002 12:26 PM 
    "C:\WINDOWS\ServicePackFiles\i386\user32.dll" 578560 04/13/2008 04:12 PM 
    This one C:\WINDOWS\ServicePackFiles\i386\user32.dll would be the copy to use since it is the one for SP3. You have to copy it back into the C:\Windows\system32 folder.
     
    Last edited: Mar 6, 2009
  9. femmestarrr

    femmestarrr Private E-2

    okay this is what happened.
    I put the pc on and hit f10 in error and all of a sudden it went into recovery system.
    It restored .
    Now the problem is that it wont connect to anything because it says the
    c:\\Documents and Settings\owner\access \favorites not accessble access denied.

    then I get the same thing except it will say access to desktop denied. But at least we are to this point and I am on the pc now.
    I also get error in wzcdlg.dll missing entry:flash conf

    oy only the begining, but do have my files.

    thank you,
    Noelia
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I suggest that you post in the Software Forum as this is not a malware problem. It is due to what you did using a system recovery.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds