Hey people, i'm hoping to draw on the vast bank of knowledge that lurks on the forum.

i think i may have fubar'd my pc. on friday my virus software popped up saying it had blocked a trojan. after doin this a few times i decided to run a virus scan and get rid of it. it was found, then put in quarantine by the software, so i then deleted the file to completely get rid of the problem.

at the end of the day i shut down the pc as normal. Now it will not reboot atall!! i'm operating windows XP, and when it gets to the black screen that says "windows XP" with a little blue "nightrider" style bar going accross, after a few sweeps accross it stops, then the whole thing shuts off, and it starts up again.

i've tried booting in safe mode, and also in "last known working configuration", both with exactly the same result. The only thing i remember about the trojan is it had something to do with winexplore in the title if that helps.

please can someone tell me what to do??

i guess i'm gonna need ot find my XP disk and reload the lot somehow. i'm just so worried we may have lost all our photo's, but more importantly our files.

cheers oh wise and wonderful beings!

Martin

The files are probably OK - it sounds like the trojan was in a Windows file, and deleting it is going to stop it from booting....

If you go into the boot menu (the same one you choose safe mode from), there's an option to show you everything that happens - it shows the files it's trying to load as it does them - it will prob, fail to find the one that was infected - you can then copy that off the install CD....

HTH


Vince

Stay calm.
You almost certainly have not lost any pictures or documents -YET
So be very carful with the following advice before you start re-loading, formatting, rescuing etc
Priority i to get your docs back and this should be fairly easy, you just need another PC to hook the HD up to

Hiya mate, not sure about the Trojan or how to get around the xp screen, but I've used a great little program called getbackdata by a company called runtime. It has always recovered everything when I've lost it in the past. After deleting partitions and even formatting, it has always recovered all my music, photos and DVDs sure someone will be along shortly with a work around, but if you struggle to sort it out and need recovery as a last resort, give me a shout

[Edited on 15/2/09 by paul the 6th]

It sounds like the file you cleaned was a windows file.
Try choosing LOGGED from the start-up menu where you chose safe mode and watch the list of files fly by.
You may find that it stops at a particular file, because it cannot find it. Hope fully this will be the same as the one you "cleaned".
The fiddly bit is then to replace that file with one from you windows disk, or another PC.

There are on-line instructions how to do this better than I can type.
Stay calm

the other problems is it won't give the safe mode screen when i boot it up. only if i leave it for a few hours do i get the screen. otherwise it looks like its botting as normal, until i get the problem.

what would happen if i was to re-run the windows install disk?

cheers for all the help, you're all very alert on a sunday morning, especially after a late night on valentine's day! (you did remember it was valentines day yesterday didn't you!)

Martin

If I remember correctly when you start in safe mode there is an option to use System Restore. Using that you can revert back to a usable system before the virus struck.

Geoff

just gone down the route of safe mode with the file path info.

it stopped on windowssystem32driversmup.sys


this is all very exciting!!

Fairly sure WINEXPLORE is/was the virus

99% yes.

i can only think when i deleted the file from quaratine i kinda buggered my pc, by deltleing an important bit of windows!

Try a reboot with all your external devices keyboard/mouse unplugged. Theres varios info about mup.sys that is hardware related

can try that, but i'm pretty confident its something i did with that virus. cos after i deleted it, i tried to switch users to my wife's login and it wouldn't let it do it. it only worked if i logged out of my profile then back on with hers. then when i tried to switch backa little later i couldn't get on either profile. so i tried restarting the pc to clear the problem, and here i am now.

seriously, am i able to rerun the windows install disk somehow?

i'm so annoyed that it won't even restart i safe mode, that was my get out plan.

cheers for the oodles of help people!

Martin

Put your windows disk in the CD/DVD drive and set your bios to boot from it then reinstall or repair. It should replace the missing file.

Yes, you can use the Recovery console.
You access this by booting from the XP disk and choosing Repair exixting installation

Ive used the "Microsoft Diagnostics and Recovery Toolset" on several machines over the last couple of years, which can be downloaded from microsoft website. this creates a startup disk that will allow you to pick a system restore point. it will also attempt to repatch damaged system files when it first loads.

It used to be called ERD commander.

Also if you are really stuffed, Barts PE will allow you to boot a pseudo xp which can network and allow you to copy your valuable data somewhere safe before rebuilding.

use all of these with caution...

I encountered the same problem on clients PC a couple of weeks back --- it ended up a fresh install

Quite a good article here...
http://www.michaelstevenstech.com/XPrepairinstall.htm

Hence why I suggested you get your data back first, rather than jump into a reload/repair

use erd commander i have a copy if you get stuck trying to download it.

Unbelievably I've had this problem with one of my pcs tonight
But I can't access the repAir as I set up a 2 disk raid array and even thogh it loads BIOS drivers it can't see the disks

what a coincidence!!

my mission today is to finally get it working!

Where i'm at now.

i have successfully reinstalled windows XP in paralell with the origonal install.

so now i can infact start the pc, albeit with HUGE fonts, and absolutely no drivers etc for anything useful. however the good news i that i can see absolutely everything that was on there when i left it, its just that my PC is running from a folder called windowsXP now, whereas everything god is in the origonal WINDOWS file.

i have also set up the recovery console thingy, but that won't boot up either, stating that m5289.sys is not present.

if you type m5289.sys into google, you get a few pages about the problem with MESH computers, and guess what? mines a MESH pc too!!

anywho, as i can get it to run, and all my files and stuff is still accessible, what i was thinking was to either copy something from my new install to the old one to make it work, or copy all the useful stuff from my old windows folder to my new one.

any suggestions as to which one will work, and what i might need to copy?

cheers,

Martin

If you'd repaired the existing installation rather than installing another one, you'd be done now!

Transfering everything to the new install will take ages (i.e. reinstall all your software etc etc). I'd try and fix the old install - try finding your new mup.sys and replacing the old, plus maybe that other file you mentioned. That might work. Otherwise go back in with the CD but choose to repair existing installation.

You'll never get rid of the dual boot you've got now either!

Liam

i had intended to do all that you said,

but i could not enter recovery, that was one of my main probs.

will try the mup.sys file too, though not convinced it will work.

cheers,

Martin

Got mine working again by removing all the USB devices the DVD drive and one of the raid disks
It booted on one disk (mirrored raid) and then got the other back on then the keyboard and mouse, DVD and once all working got my scanner back on-which I think was the cause of the problem? Possibly due to current draw on the USB? Anyway no disks used and no data lost

quote:

---

Originally posted by b16mts
Hey people, i'm hoping to draw on the vast bank of knowledge that lurks on the forum.

i think i may have fubar'd my pc. on friday my virus software popped up saying it had blocked a trojan. after doin this a few times i decided to run a virus scan and get rid of it. it was found, then put in quarantine by the software, so i then deleted the file to completely get rid of the problem.

at the end of the day i shut down the pc as normal. Now it will not reboot atall!! i'm operating windows XP, and when it gets to the black screen that says "windows XP" with a little blue "nightrider" style bar going accross, after a few sweeps accross it stops, then the whole thing shuts off, and it starts up again.

i've tried booting in safe mode, and also in "last known working configuration", both with exactly the same result. The only thing i remember about the trojan is it had something to do with winexplore in the title if that helps.

please can someone tell me what to do??

i guess i'm gonna need ot find my XP disk and reload the lot somehow. i'm just so worried we may have lost all our photo's, but more importantly our files.

cheers oh wise and wonderful beings!

Martin

---

quote:

---

Originally posted by Meeerrrk

quote:

---

Originally posted by b16mts
Hey people, i'm hoping to draw on the vast bank of knowledge that lurks on the forum.

i think i may have fubar'd my pc. on friday my virus software popped up saying it had blocked a trojan. after doin this a few times i decided to run a virus scan and get rid of it. it was found, then put in quarantine by the software, so i then deleted the file to completely get rid of the problem.

at the end of the day i shut down the pc as normal. Now it will not reboot atall!! i'm operating windows XP, and when it gets to the black screen that says "windows XP" with a little blue "nightrider" style bar going accross, after a few sweeps accross it stops, then the whole thing shuts off, and it starts up again.

i've tried booting in safe mode, and also in "last known working configuration", both with exactly the same result. The only thing i remember about the trojan is it had something to do with winexplore in the title if that helps.

please can someone tell me what to do??

i guess i'm gonna need ot find my XP disk and reload the lot somehow. i'm just so worried we may have lost all our photo's, but more importantly our files.

cheers oh wise and wonderful beings!

Martin

---

you've done well to make this post with a PC that wont even boot up

---