Antivirus GT problem

country32 · October 16, 2010, 01:59:21 AM

Yes, I did type it wrong.. It is "isapnp.sys"

I went to the instructions for recovery but I'm having a problem with the prompts. When I get to the c:\windows prompt. I type

ren c:\windows\system32\drivers\isapnp.sys isapnp.old and nothing happens. Am I typing it wrong.. I've tried all variations I can think of.?

I cannot get to step 6 but I will be confused there too. It gives the first prompt to type, then says for example type a (second) one?

Anyway, Just curious about the Ren prompt and how I might be able to do it..

Thanks

SpyDie · October 16, 2010, 11:36:54 AM

The "ren" command (short for rename) will just rename the files, but it will only tell you if it hasn't worked.

As long as you can then enter in the next command on a new line, it has worked.

Does that make sense?

country32 · October 16, 2010, 11:28:33 PM

Sorry for confusion. when I said it doesn't do anything, I should have said It tells me it doesn't work.

After typing the command exactly how I feel it should be, I get

*System cannot find the file or directory specified*

If I play around with it I get..

*The parameter is not valid try \? for help*

or

* The command is not recognized type HELP for list of supported commands*

-not sure if this makes any difference. I don't know how I can boot up with the CDRom, so I tap F8 and go to safe-mode, then select recovery console.

once that starts I click the number 1 (which takes me to C:\windows prompt) After I do this I put the CDROM in before I type the prompt. **If I put the CDROM in before** I cannot type (1) and get to the C:\Windows prompt.

I cannot get to step 6. Once I try typing the REN prompt, it gives me those messages and just gives a new line of C:\Windows prompt.

any suggestions would be greatly appreciated.

country32 · October 17, 2010, 08:41:07 PM

I was searching around and found something that said in the safe-mode boot-up, that the last item listed isn't exactly the problem, it's the next application. would pciide.sys be my problem since it isn't shown in the boot-up, and isapnp.sys is the last thing shown?

online they talk about using Hiren's Boot CD and deleting files with (0) size..

should I try this?

Corrine · October 17, 2010, 10:15:02 PM

Can you post a link to the topic you are referring to?

At this point, since you were getting BSOD's prior to the infection, you may be better off rescuing any documents/file that are important and either doing a complete wipe and install or, as you mentioned previously, replacing the computer. (See Clark76's instructions to Saving files on a corrupt OS.)

country32 · October 18, 2010, 12:28:42 AM

Well... now I'm actually getting the error message every time I try to boot. "Windows could not start because the following file is missing or corrupt: system32\DRIVERS\isapnp.sys"

I cannot load from CDROM..

I go to Recovery Console through safe-mode. once I get there I type (1) to get the C:\Windows>

However the command on step 5. does not work.

I think it could be related to some "Hard shut downs" or could be virus related.

below is the forum I mentioned. before

http://www.bleepingcomputer.com/forums/topic288949-15.html

Corrine · October 18, 2010, 01:45:22 AM

Hi, contry32.

Thank you for the link. That was one drive-by post by an unknown person suggesting something that violates the Microsoft copyright. For that reason, I cannot recommend it.

As I posted previously, at this point, since you were getting BSOD's prior to the infection, you may be better off rescuing any documents/files that are important and either doing a complete wipe and install or, as you mentioned previously, replacing the computer.

See Clark76's instructions to Saving files on a corrupt OS.

You may also find these additional tutorials helpful:

Use Ubuntu Live CD to Backup Files from Your Dead Windows Computer
Geek to Live: Rescue files with a boot CD

country32 · October 18, 2010, 02:18:55 AM

Ok, Thanks.

I never mentioned replacing the computer. I guess I'll try a few other things and as last resort reformat.

Thanks.

Corrine · October 18, 2010, 03:46:57 PM

Quote from: country32 on October 15, 2010, 01:31:46 AM
I'm just wondering if it's worth taking to a shop or should I just dump and start over?

Hi, country32.

I misunderstood the reference to "dump" as meaning a new computer. Regardless, before the computer is to the point where you cannot recover your files, if you have important documents/files, I suggest you attempt to back them up first, as shown in the above-referenced links.

country32 · October 25, 2010, 07:28:00 PM

just wanted to ask, for sake you've experienced same issue before.

for the "Windows could not start" steps..

I had problems with step 5, but I skipped it and tried 6.

for the first time the XP CD, began to spin and work, but I got a message of "Could not create file isapnp.sys" "0 files expanded"

Didn't know if there is any hope?

Otherwise I guess I'll back up my files and try a repair/format.

Thanks,

Rick

country32 · October 25, 2010, 09:25:55 PM

I removed a ram memory. and I was able to expand the file from windows XP cd.

however, I'm back to the blue screen problem.

I googled the stop 0x000000be and it says something that a drive is attempting to safe read only file? It also said it's probably virus-related.

There were some instructions but they all involved booting up , which I cannot do. I boot in safe-mode and I get a bunch of prompts again, but this time it stops at mup.sys then goes to blue screen..

Just curious..

-Rick

Corrine · October 30, 2010, 01:13:55 AM

Was the RAM memory you removed recently added? Was it bad or not seated correctly?

As to the mup.sys, I found this: Recovering from a mup.sys boot hang on windows 2000 or XP. What is mup.sys anyway!

country32 · November 18, 2010, 05:09:15 PM

Hello,

I've been playing around with the computer and at least it will boot up again. I cannot boot in safe-mode it stops at the Mup.sys. however, it will boot up normally.

The only problem (which is my question) None of my desktop icons show, there is not tool bar.. just my wallpaper image.

Is there any option that a virus might have switched to "hide desktop" or "invisible"??

I can ctrl-alt-delete and open task manager.. where I can then start new task and browse. Which gives me full access to all my programs-files, etc.

just didn't know if there is a way to get back my desktop icons.. etc.

Thanks,

Rick

Corrine · November 18, 2010, 09:55:28 PM

Hi, Rick.

The first thing is really getting past the Mup.sys. Did you try any of the solutions in Recovering from a mup.sys boot hang on windows 2000 or XP. What is mup.sys anyway!? It does seem that the majority of the people who posted found it was a hardware problem, particularly a bad power supply. However, others found that running chkdsk /p /r solved the mup.sys problem. (Instructions here: http://www.aitechsolutions.net/winxpnoboot.html )

country32 · December 15, 2010, 05:50:37 AM

Hi,

Still messing around with my computer.

The point I'm at now is;

My computer boots up fine, but there are no desktop Icons/menu. However, I can ctl-alt-delete and access all my files/programs. Basically my full computer, just with no way to access, fully.

when I type explorer.exe it says it cannot find it.

I've tried renaming. I've tried going into regedit and finding it in other locations, but there were none except in shell.

I've tried the (Svf/scannow) i think it's called... but keeps telling me to insert disk.. (I have used disk long ago for expanding ispnp.sys and mup.sys)

Is there anything I"m missing. It just seems like my full computer is there in tact, working fine.. just explorer.exe problems ??

Thanks,

Rick