how-to block ads
|
TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA
1 edit | reply to flighty
Re: [Spyware] ntdll64
Lets try something. Do you have a flopy drive?
If not, you will need to burn a file to CD instead.
On the Desktop, right-click, select New > Text Document.
This will create the file New Text Document.txt on the Desktop.
Rename it to vedilune.dll.
Copy the file to a floppy, or if you don't have a floppy drive, burn it to CD.
Insert your Windows XP CD (Windows XP with Service Pack 3 is preferred, but not required) and reboot the computer.
- You may need to configure your computer BIOS to boot from the CD-ROM drive.
- When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
- Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
- Type the Administrator password and press ENTER.
- Type the following command:
COPY A:\vedilune.dll C:\WINDOWS\SYSTEM32 [ENTER]
NOTE: If you don't have a floppy and use a CD-ROM drive which has a different drive letter assigned to it, enter the appropriate drive letter instead of A.
After entering "COPY A:\vedilune.dll C:\ WINDOWS\SYSTEM32" you should see the text "1 file(s) copied", in which case all went well.
- Remove the floppy or Windows XP CD, type "EXIT" and press ENTER to restart your computer.
Can you now log on normally?
--
Proud ASAP member since 2005 | |
flighty
Premium
join:2009-05-14
Portland, OR
| Joker,
I burned the blank file into a cd and then arrived at the recovery console without problems. I have a second CD slot but in neither could the file be found to copy. loaded into either and querying with DIR, nothing found on the disc. used a text doc as requested. Man this one is malicious!
some error I made perhaps?
flighty | |
TheJoker
Premium,VIP,MVM
join:2001-04-26
Alexandria, VA
| One option is to create a bootable CD with Bart's PE Builder (BartPE). You could then boot from the BartPE disc and copy the file to your System32 folder.
To build a BartPE disc, go to »www.nu2.nu/pebuilder/
There are complete instructions there on downloading the latest PE Builder version (self-installing package) and installing it, building the disc, and burning it to CD. You will need to do this from a working system.
After burning the disc, you would simply boot from the BartPE disc (you may need to change the boot order in your system BIOS setup), and copy the empty file vedilune.dll that you created to the System32 folder, reboot the system, and see if you can login.
--
Proud ASAP member since 2005 | |
-
|
