Virus overran computer ... then we tried to fix it!

Leenda · Jun 17, 2009

SOLVED: Virus overran computer ... then we tried to fix it!

I have a fairly simple question here; unfortunately, it takes a bit of a story to explain it clearly. Even more unfortunately, it's the kind of tech-help story that is a bit embarrassing - like, duh! So I hope anyone who reads this bit gets at least a snigger out of it... I kinda did...

So literally, a virus of some kind overran our computer Sunday. The friendly kind of virus that helpfully "scans" all your files, tells you how many are "infected," and locks EVERYTHING up until you give your credit card number for the $49.95 repair. Um, yeah. I asked a tech friend of mine (via text! lol) for help and was advised to reinstall windows. We did. But we have three hard drives and of course, we installed Windows on the wrong one. My hubby, who is not normally so computer-bad, thought, "oh, oops, my bad, let me just delete this windows folder off this now empty drive." I wouldn't have thought it would be a problem, but...
We attempted to reinstall Windows again, using the correct drive. But as we boot from CD, we get this error message (pardon me if the format ain't 100 percent correct; I texted it to my tech-friend without punctuation!): [windows root] system32.hal.dll is missing, please reinstall. I've discovered it does not help to simply state to the computer, "But it's on the Windows system disk that's in your CD drive, isn't it?"
My tech friend says this can be (probably) fixed with a new system install disk, which he will be able to provide. My hubby questions this, so my question to you-all is, Does it seem likely that the error is with the CD? We have restarted the computer, allowed Windows to boot up (as much as it does with the virus crap) and then tried the disk again, with the same error. I'm hopeful my tech friend will be able to help us in person, but you know how it is to get free help. (I don't want to push, cuz it's free, but working around our schedules has been hell!)
Any thoughts or suggestions would be appreciated. My hubby is threatening that if we have to buy a new computer, we won't because we (he thinks) can't afford to. I don't look forword to attempting to finish my WIP longhand. Sure, I'm more than halfway there, I think, but that would be 110+typed pages... longhand??!!? Eek!
I'm also submitting this stupidity to this board because you-all had the best anti-virus advice, I thought. Not that I could convince us to start using it in time.... lol
Thanks!

alleycat · Jun 17, 2009

Well, you're kind of in the middle of something with this restallation of windows. There might have been other and better options. Might is the key word.

If you still have the virus after doing whatever it is you're planning to do, consider contacting this forum: http://www.malwareremoval.com/ Read all the instructions fully before doing anything.

It might take a while, but these guys are good, they're absolutely free, and they will work hard to help you clean your computer of a virus. At one time I was in training with them.

Leenda · Jun 17, 2009

Thank you, alleycat! At a glance, that forum looks promising. "New members or old, all are welcome, and we do not give up, till your computer is yours and only yours again." I could go for that!
We have a pretty good custom-built computer with three drives, and I'm paranoid enough to worry that reinstalling Windows (with a dual-boot of ubuntu, maybe) won't be enough to clean it all up. So I'll keep that forum around. I'm just glad I can still access the Internet at work. My hubby is a cook. No computers. :-( His fantasy baseball team is suffering! lol
We did try a few other options before the reinstall - but it doesn't seem that the other options worked. Oh well, it'll clean up some crap anyway, right? (I'm always looking for the bright side!)
Thanks again!

ChristineR · Jun 17, 2009

It sounds like it's trying to boot off the hard drive. The reason it might do this is that Windows told it to do so as part of the installation process.

Now you can force it to boot from CD, but there are several possible ways to do this, depending on your flavor of Windows and your computer. Try looking in whatever manual came with your machine for info about the system BIOS. If there's nothing helpful, try booting in safe mode--one usually does this by hitting F8 repeatedly while the computer starts up. If you're lucky, you get a message that gives you the option of booting from the CD.

Leenda · Jun 17, 2009

ChristineR said:
It sounds like it's trying to boot off the hard drive. The reason it might do this is that Windows told it to do so as part of the installation process.

Oh... We're trying to boot from the CD with the install disc. (obviously. stupid 'puter. :Shrug:

)

ChristineR said:
Now you can force it to boot from CD, but there are several possible ways to do this, depending on your flavor of Windows and your computer. Try looking in whatever manual came with your machine for info about the system BIOS. If there's nothing helpful, try booting in safe mode--one usually does this by hitting F8 repeatedly while the computer starts up. If you're lucky, you get a message that gives you the option of booting from the CD.

Apologies to anyone who's offering help - I can't believe I overlooked the technicalities.
Windows XP home edition is our main operating system.

We had been trying to boot from CD using the F8 button. I think it gave us a couple of options, like Drive D, Drive C, CD-ROM. We pick CD-rom and then get the error message.
Hmm, I may have to try again just to scribble stuff down! lol
Also very frustrated that tech is a second language to me. I love words, and not quite having the correct words is well, frustrating. At least I'm mostly coherent and not totally cryptic. Maybe. :tongue

Thank you!

teapot · Jun 17, 2009

If you are seeing the message: - [windows root] system32.hal.dll is missing, please reinstall - then you are not booting from the CD. The CD boots into a small DOS program which is entirely independent of Windows, and it doesn't need any Windows files. The computer may be set to boot from the CD drive, but if the CD is damaged or corrupt it will default back to booting from the hard drive, so, yes, I would try a different CD. It may also be that your CD drive is faulty.

If you are reinstalling to get rid of a virus, remember to use the reformat option when you reinstall. Don't just install over the top of the old Windows. If you want to be really sure, get a disc-wiping program such as KillDisk or Dban. These are utilities which you burn as a bootable CD and boot from externally, just like the installation CD. They overwrite the entire drive, even the boot sector. I'd be very surprised indeed if a virus could survive that and a good reformatting. Remember to back up any files you want to save, as everything on the drive will be completely wiped.

Matera the Mad · Jun 17, 2009

F8 gives you the Windows boot menu. That isn't any help in this case.

In order to boot automatically from a CD, you have to go into the BIOS setup. There will be a moment when there are no menus or anything and down on the bottom of the screen it will say "Press (key name) to enter Setup", more or less. Different BIOS's want different keys. The Delete key is the commonest one. Some like F10. Hover over Delete and start hitting it as soon as the computer manufacturer's stupid logo vanishes. It might do. If not, Ctrl-Alt-Delete and start over, and watch for the hint.

You navigate the BIOS menu with the arrow and Enter keys, backing out from anywhere with Esc.. There will be hints given as to what keys to use to save changes, etc.

Godnose I been there so many times I don't have to say anything to order a drink

Nivarion · Jun 17, 2009

before you get a new windows disk, try to repair the one you have. Another nice (and free) way to fix the problem if it persists is to boot using a linux (such as knoppix) drop OS and place the missing dll into place manually from the disc.

(Try to run a Virus scan from the Linux if you go that way)

It sounds like Maleware alarm which is a spy ware. (And a nasty one too) If you get your computer up and it is still there, you can normally halt it with the task manager to get your comp back while you send the antivirus and anti spy out hunting.

Matera the Mad · Jun 17, 2009

Have to be able to boot from a CD to run a Linux live CD. Have to go into BIOS to change disk boot order to do that -- unless the problem with the Windows install CD is that it isn't bootable....

But a malware scan from a CD would be (would have been) the best place to start.

Leenda · Jun 18, 2009

Wow, thanks guys!

We got up our nerve this morning and successfully reinstalled windows. Ran into the NTLDR file is missing glitch, but I had to go to work anyway, so I googled it and told hubby to try taking the CD out and restarting. Whatdya know, that worked! so maybe, maybe, we successfully reinstalled.

***Wow, hubby just managed to message me via facebook. Must have done something right! I'll be doing some research and also forcing hubby to update security.

I'll probably rename this solved once I'm half-sure that we're mostly good. sounds like it's still touchy, but lemme research the malware and see what we got.

Thanks for listening! I do appreciate the advice!

lh

Leenda · Jun 18, 2009

Nivarion said:
It sounds like Maleware alarm which is a spy ware. (And a nasty one too) If you get your computer up and it is still there, you can normally halt it with the task manager to get your comp back while you send the antivirus and anti spy out hunting.

Looked this one up; yes, I think that's the lucky winner! Joy oh joy - well, at least it's mostly identified.

*sigh*

Thanks!

ashgray2 · Jun 19, 2009

AVG Internet Security
Antivirus, Anti-Spyware, Anti-Spam,
Safe Searching and Safe Surfing on the Web, Identity Theft Protection & Firewall

Prevention is better than cure! Comprehensive cyberthreat prevention for Windows-based home users from one of the World's most trusted security companies.
Enjoy your online life free from worry with AVG Internet Security.
AVG Internet Security

* Easy to download, install and use
* Protects against viruses, spyware and online threats
* NEW Prevents identity theft
* Real-time security makes your online surfing, searching and chatting safe
* Top-quality protection that does not slow your system down
* Free support and service around the clock and across the globe
* Compatible with Windows XP, Windows Vista and Windows 7
Try to use this!

_____________________
Developer Softwares, Electronic Gadgets Deals

Leenda · Jun 19, 2009

Wow, so we managed to fix the damn computer! Windows reinstall finally worked like it's supposed to. The processing speed is now AMAZING ... which also amuses me. Wonder how much crap was in there? ick!

Thanks for the advice everyone - it has been a learning experience. Lesson One: Yes, ashgray2, prevention is much better. We're gonna scan for problems much more often. (It helps to start with a fresh drive, for sure!)

Lesson Two: It's really not that hard to reinstall Windows. But it's easier if you only have one drive to boot from.

Have a great weekend, folks! I shall be happily computing away... right after I reinstall openoffice....

Virus overran computer ... then we tried to fix it!

Leenda

alleycat

Still around

Leenda

ChristineR

What happened?

Leenda

teapot

Matera the Mad

Bartender, gimme a Linux Mint

Nivarion

Brony level >9000

Matera the Mad

Bartender, gimme a Linux Mint

Leenda

Leenda

ashgray2

Leenda