Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security Cleanup » [Spyware] ntdll64
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
« Cant run SYSTEM RESTORE, NO SOUND, no ADMIN PRIVILEGES, etc.  
AuthorAll Replies

flighty
Premium
join:2009-05-14
Portland, OR
reply to flighty
Re: [Spyware] ntdll64

Joker

No, even safe mode is flipping to log off right after logging on. I have even tried boot form disc and reinstalling from my windows disc. I am starting to think i need to wipe my hard drive...

flighty


TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA


1 edit
Lets try something. Do you have a flopy drive?
If not, you will need to burn a file to CD instead.
On the Desktop, right-click, select New > Text Document.
This will create the file New Text Document.txt on the Desktop.
Rename it to vedilune.dll.
Copy the file to a floppy, or if you don't have a floppy drive, burn it to CD.

Insert your Windows XP CD (Windows XP with Service Pack 3 is preferred, but not required) and reboot the computer.
- You may need to configure your computer BIOS to boot from the CD-ROM drive.
- When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
- Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
- Type the Administrator password and press ENTER.
- Type the following command:

COPY A:\vedilune.dll C:\WINDOWS\SYSTEM32 [ENTER]

NOTE: If you don't have a floppy and use a CD-ROM drive which has a different drive letter assigned to it, enter the appropriate drive letter instead of A.
After entering "COPY A:\vedilune.dll C:\ WINDOWS\SYSTEM32" you should see the text "1 file(s) copied", in which case all went well.

- Remove the floppy or Windows XP CD, type "EXIT" and press ENTER to restart your computer.

Can you now log on normally?
--
Proud ASAP member since 2005

flighty
Premium
join:2009-05-14
Portland, OR

Joker,

I burned the blank file into a cd and then arrived at the recovery console without problems. I have a second CD slot but in neither could the file be found to copy. loaded into either and querying with DIR, nothing found on the disc. used a text doc as requested. Man this one is malicious!

some error I made perhaps?

flighty


TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA

One option is to create a bootable CD with Bart's PE Builder (BartPE). You could then boot from the BartPE disc and copy the file to your System32 folder.

To build a BartPE disc, go to »www.nu2.nu/pebuilder/

There are complete instructions there on downloading the latest PE Builder version (self-installing package) and installing it, building the disc, and burning it to CD. You will need to do this from a working system.

After burning the disc, you would simply boot from the BartPE disc (you may need to change the boot order in your system BIOS setup), and copy the empty file vedilune.dll that you created to the System32 folder, reboot the system, and see if you can login.
--
Proud ASAP member since 2005
-
Forums » Up and Running » Security » Security Cleanup« Cant run SYSTEM RESTORE, NO SOUND, no ADMIN PRIVILEGES, etc.  


Saturday, 05-Dec 02:55:06 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [163] Comcast Releasing Promised Usage Meter
· [145] Avast Antivirus Has Gone Mad
· [126] Comcast Makes NBC Universal Acquisition Official
· [104] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [101] Google Invades ISP, OpenDNS Turf With Google Public DNS
· [88] The Bandwidth Hog Does Not Exist
· [83] FCC Ponders Moving From PSTN To IP Voice
· [81] Latest Consumer Reports Survey Not Kind To AT&T
· [74] Sprint Defuses GPS Privacy Media Bomb
· [70] Baltimore To Ban Lazy Cable Installs
Most people now reading
· False positive in Avast! or is it real? [Security]
· Evading throttling with uTP / uTorrent 1.9a [TekSavvy]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Google takes aim at browser redirection [Security]
· Farewell [Bell Canada]
· DNS options, what are YOU using? [TekSavvy]
· Windows 7 boot manager editing questions [Microsoft Help]
· What to use while demonoid is down? [Filesharing Software]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· [ PVP] 3.2 DK PvP D/W Spec... [World of Warcraft]