Author Topic: Avast stopped working, virus?  (Read 93108 times)

0 Members and 1 Guest are viewing this topic.

BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #60 on: August 16, 2007, 06:07:06 AM »
This is what was on my screen

[DR-DOS] c:\windows>cd (space) driver cache

access denied


BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #61 on: August 16, 2007, 06:13:53 AM »
Here is the word document from the files I copied


www.bootdisk.com


NTFS4DOS Private is a free utility from http://www.datapol.de/dpe/freeware/

It's basically a driver which allows both reading and writing to NTFS
partitions/drives after booting from a dos 7.X bootdisk. To make better
use of the utility I've created both a bootdisk and bootable CDrom .iso
and included additional utils like Edit and Deltree.

This zippack contains 4 files. ntfsboot.txt, ntfsboot.exe, ntfsboot.iso,
and ntfswcdd.iso

ntfswcdd.iso is a another version of the bootable cd. It includes cdrom
drivers so before you burn it one can add files to the .iso that you
may want to copy to your ntfs drive. The files you add will be seen in
Drive R:

The 1.44 bootdisk in this pack is an Image of the bootdisk I created. To
construct the disk, put a brand new disk in your A: drive and click on
ntfsboot.exe If you are creating the 1.44 in XP, I'd format the floppy
first then click on ntfsboot.exe

To create a bootable CDrom disk, use UltraISO or other application that
can properly handle .isos. Note that converting an .iso to a bootable cd
is NOT as simple as copying the .iso to the cd. Your burning program HAS
to support the proper burning/creating of .iso images.

For example in Nero it's File | Burn Image. In UltraISO it's File | Open
| Tools | Burn CD Check the docs of your burning program for details.

The .iso you want to point to is called ntfsboot.iso

To add files to the ntfswcdd.iso file one can also use UltraISO.

How to:

File | Open | Select ntfswcdd.iso | Open | Image windows shows bootable |
Select your files in the lower window | Drag to the top window | File |
Save

Note that oddly, the file size of ntfswcdd.iso may not change.

To burn:

File | Open | Click on ntfswcdd.iso | Open | You'll see the files you added
on the right | Tools | Burn



Notes:

1. When using ntfs4dos or my disks, you'll be prompted as the driver runs,
type Y to agree, do NOT type YES.

2. The standard DIR and DEL commands will NOT work 100%. That's why I've
included deltree to use when you want to delete a single file. The command
would be:

deltree yourfile.txt

Deltree can also be used to delete entire folders, so be careful.

If you created the ntfswcdd CD and added files to the iso, you'll find
it's best to use xcopy to copy files instead of the plain copy command.

3. I've also included Edit so you can modify files if you wish, like the
boot.ini or win.ini file for example. Remember, if you open a file with
Edit that is NOT a text file, [yes, .inis are text files] and then SAVE
it you will DESTROY the file. However, one can safely view all types of
files with Edit.

4. A special version of chkdsk is included to fix any problems.

5. If you simply wish to copy standard 8+3 files to and fro from any
drive to the NTFS drive there's no problem.

6. ntfs4dos Private will NOT display long filenames.

7. attrib is also included. Remember some files on your ntfs drive may
be hidden. To see them use dir /ah


If you want to print this use Wordpad, not Notepad

________________________________

Kindest regards,
Ed Jablonowski








mauserme

  • Guest
Re: Avast stopped working, virus?
« Reply #62 on: August 16, 2007, 06:21:56 AM »
Oldman, what if you put the file directly in c:\windows\system32  ?

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #63 on: August 16, 2007, 06:23:22 AM »
You read my mind. I was just about to get him to seeif he can acess the system32 folder.

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #64 on: August 16, 2007, 06:30:44 AM »
At the c:windows>

type cd(space)system32(enter)


What I came up with so far is

http://support.microsoft.com/kb/810881

unfourtunatley, you have to beable to get windows to do the fix descibed there. Or a virus\trojan has locked the folder is another possibility by adding an attribute.

If he can access the system32 folder then we can try adding a copy to the folder. Maybe from his machine. If not, then we"ll have to find away around it.  ;D

mauserme

  • Guest
Re: Avast stopped working, virus?
« Reply #65 on: August 16, 2007, 06:42:37 AM »
If he can access the system32 folder then we can try adding a copy to the folder. Maybe from his machine.
I think this may be the appropriate next step. 

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #66 on: August 16, 2007, 06:52:51 AM »
Yes. But reading the instructions for making the bootable cd, he may have to make aother on with the file included. Is that how you read it?

mauserme

  • Guest
Re: Avast stopped working, virus?
« Reply #67 on: August 16, 2007, 06:59:38 AM »
Yes, unless the file can be added to the cd he already has.  I would try that first.

BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #68 on: August 16, 2007, 07:10:25 AM »
 ;D Success!

This is what my screen shows now

[DR-DOS] c:\windows\system32>

is this good?


Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #69 on: August 16, 2007, 07:16:37 AM »
You bet!!!

Ok, try to add a file from your computer to the bootable cd. If you can't, then you may have to make another with the file on it.

The file you need is c:\windows\driver cache\i386\ntoskrnl.exe

Follow the instruction for the cd.

Toy may be able to add the file. Try putting it in your computer and opening it.

BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #70 on: August 16, 2007, 07:44:56 AM »
Ok, I do need to burn the CD again to add that file. On my computer the ntoskrnl.exe file is located in folder C:\WINDOWS\system32

I will burn the cd again and add the file.  Once that is done can I just put the CD back in the tray of the other computer or do I need to reboot?

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #71 on: August 16, 2007, 07:49:51 AM »
That's one copy. It will do.

Make your disc and I will post the coping instructions. Is the cd recognized as d:\ or a different letter and is the sick computer still turned on?

BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #72 on: August 16, 2007, 07:56:11 AM »
OK, I burned a new Cd with the new file.  The sick computer is still on and it shows the last prompt as:

[DR-DOS] c:\windows\system32>

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: Avast stopped working, virus?
« Reply #73 on: August 16, 2007, 08:01:41 AM »
Ok that was quick. i need to know the path of the file we are going to add.

type
x:(enter)      Where x is the letter that the cd was recognized as when you first bootted the lap top.

dir(space)\p(enter)

post back if the file ntoskrnl is shown or not

BJS

  • Guest
Re: Avast stopped working, virus?
« Reply #74 on: August 16, 2007, 08:32:44 AM »
this is odd.

Intially the drive that was being read was A:\>
 but when I went to drive A and typed dir \p  it said there were 0 KB
I went back to my PC and the CD still all the files??  Why would it say it had 0 KB when there is data on the CD?