Infected Winlogon.exe and explorer.exe accidentally deleted on XP Pro PC - need help from recovery console

Hello

Windows XP Pro SP3 Dell Optiplex and been infected by Trojan in winlogon exe files and Explorer. AVG asked me if I wanted to force deletion and I foolishly agreed. Now, I get the BSOD and the message 'Windows logon done unexpectedly '.   It is a work PC and the CD only we have is the Dell CD to re - install and I know that I need as the first step recovery console. I don't know if the recovery console is on it, and then I need help for the uncomprressed explorer.ex_ and winlogon.ex_ and in their right place.

I'm not a total newbie, but it's been some time that I used the recovery console.

Help?  Thanks in advance and greetings to all

Morey

Try to be more specific with the error messages you see, so it does not guess or try things.

Here is an example of a popular error message that sounds like yours (maybe):

STOP: c000021a {fatal system error}
The Windows logon process ended unexpectedly with the status of 0xc0000034 (0 x 0000000 0000000 x 0).
The system has been shut down.

What exactly tell your message?

There should be copies of XP system files backup all critical already on your hard drive in the windows\system32\dllcache folder (it is this case), you may not need any expansion.

I would like to see the exact error message, make a CD bootable Recovery Console, run chkdsk/r even if he doesn't find anything to do and then see the replacement of missing persons or suspicious files, either by copying it in the backup copies of replacement of the recovery, or from another CD Console, you can do if the Recovery Console gives you a hard time (first do the CD Recovery Console).

First of all, you need to start on something...

You can do a restore bootable XP CD as follows:

If you have no XP bootable media (or aren't sure you have) create a bootable XP Recovery CD of Console and do not forget.

This is not the same as recovery disks that may have come to a store to purchase the system.

You can make a bootable Recovery Console CD by downloading an ISO file and burn it to a CD.

The ISO bootable image file you need to download is called:

xp_rec_con. ISO

Download the ISO from here:

http://www.mediafire.com/?ueyyzfymmig

Use a new CD and this simple and free program to burn your ISO file and create your bootable CD:

http://www.ImgBurn.com/

Here are some instructions for ImgBurn:

http://Forum.ImgBurn.com/index.php?showtopic=61

It would be a good idea to test your bootable CD on a computer running.

You may need to adjust the computer BIOS settings to use the CD-ROM drive as the first device to boot instead of the hard drive.  These adjustments are made before Windows tries to load.  If you miss it, you will need to restart the system again.

When you start on the CD, follow the instructions:

Press any key to boot from CD...

Installing Windows... going to pronounce.

Press 'R' to enter the Recovery Console.

Select the installation that you want to access (usually 1: C:\WINDOWS)

You may be asked to enter the password (usually empty).

You should be in the folder C:\WINDOWS.  It's the same as the

C:\Windows folder that you see in Solution Explorer.

The Recovery Console allows base as file commands: copy, rename, replace, delete, chkdsk, fixboot, fixmbr, cd, etc.

For a list of the commands in the Recovery Console, type help at the command prompt.

Start by checking the integrity of your file system by using the chkdsk command.

In the command prompt window, run the chkdsk command on the drive where Windows is installed to try to fix any problems on the afflicted player.

Running chkdsk is fine, even if he finds no problem.  It won't hurt anything to run it.

Assuming your boot drive is C, run the following command:

CHKDSK C: /r

Let chkdsk finish to correct the problems, he could find.  It may take a long time for chkdsk complete or they seem to be "stuck".  Be patient.  If the HARD drive led blinks always, chkdsk is something.  Keep an eye on the amount of the percentage to be sure that it is still making progress.  It may even seem to go back sometime.

You must run chkdsk/r again until it finds no error to correct.

Do, or do not. There is no test.

I decided to implement the points for a new puppy instead of a pony!

Tags: Windows

Similar Questions

  • accidentally deleted my macbook pro to my authorized devices

    I accidentally deleted my Macbook pro as a device authorized by using iTunes. How can I recover the Macbook to reauthorize it as an authorized device? I would like your answer. Thank you very much

    Gsmooth,

    Open iTunes on your MacBook and select iTunes > Store > authorize computer this...

  • I accidentally deleted Adobe Acrobat Pro form my CS6 Master Collection. How can I reinstall it?

    I accidentally deleted Adobe Acrobat Pro form my CS6 Master Collection. How can I reinstall it?

    You install exactly in the same way you did the 1st time... Put your disc in the drive, and enter your serial number when asked

    .

    Download & install instructions https://forums.adobe.com/thread/2003339 can help

    -includes a way to go to a page to download the Adobe programs if you do not have a disk or drive

    -Cloud desktop http://helpx.adobe.com/creative-cloud/help/creative-cloud-desktop.html

    -Cloud Getting Started https://helpx.adobe.com/creative-cloud.html

    -you will need to enter your original serial number during the installation for non-Cloud programs

    - or kglad links in response to #1 here can help https://forums.adobe.com/thread/2081216

    Also go to https://forums.adobe.com/community/creative_cloud/creative_cloud_faq

  • I have problems in trying to get through my music files to W M P burn, I have them on my hard drive of diving, pro, cool edt and I can't bring them to burn, I need help :)

    I have problems in trying to get through my music files to W M P burn, I have them on my hard drive of diving, pro, cool edt and I can't bring them to burn, I need help :)

    • You have problems with programs
    • Error messages
    • Recent changes to your computer
    • What you have already tried to solve the problem

    I have problems in trying to get through my music files to W M P burn, I have them on my hard drive of diving, pro, cool edt and I can't bring them to burn, I need help :)

    ========================================
    Can you navigate to the actual file stored music files
    in and add it to the WMP library?

    File / add to library... or enter... F3

    Then, create a Playlist...

    File / create a Playlist... or type... CTRL + N

    Maybe the following will help:

    Windows Vista-
    Add items to the windows
    Media Player library
    http://windowshelp.Microsoft.com/Windows/en-us/help/60fc17d8-7924-4600-93e8-39873ee2d5e91033.mspx

    Windows Vista-
    Create or change a regular playlist in Windows Media Player
    http://Windows.Microsoft.com/en-us/Windows-Vista/create-or-change-a-regular-playlist-in-Windows-Media-Player

    Windows Media Player 11 for Windows Vista
    Burn a CD or DVD in Windows Media Player
    http://Windows.Microsoft.com/en-us/Windows-Vista/burn-a-CD-or-DVD-in-Windows-Media-Player
    (Expand the section: "Burn audio CD")

    Volunteer - MS - MVP - Digital Media Experience J - Notice_This is not tech support_I'm volunteer - Solutions that work for me may not work for you - * proceed at your own risk *.

  • Infect winlogon.exe, explorer.exe virus and virus Hosts-DNS

    Hi guys,.

    A laptop computer, that I'm not using has recently been infected with a virus from winlogon.exe and explorer.exe and one DNS host virus.
    I tried to use avast: edition free, malwarebytes and spybot search and destroy.
    And as a last resort, I used Norton Power Eraser...

    The problem is not cleaner Antivirus or antispyware can eliminate this type of virus.
    And not boot into safe mode and try to remove it from there do not remove viruses at all.
    I took this laptop a laptop technician where he took out the hard drive and scanned for viruses, but when I came back the virus or on it.

    What can I do to remove these viruses, since it has severely reduced performance on my pc and the virus's keep redirect my Web pages, I will be using internet explore?
    I think that the virus has embedded themselves inside the windows operating system.

    Thank you
    Brent

    Hi mate

    Usually the explorer.exe, winlogon.exe are running Microsoft files and these files belongs to the Windows operating system and must be placed in the folder C:\Windows\System32.
    If it a case then these are not viruses.

    However, you can try the Antivirus application free Avira Antivirus software.
    Google for it you can download it for free.
    Scan the system and check again.

    As a last option, I recommend reinstalling the system using the Toshiba recovery disc!
    That would erase everything from the HARD drive.

  • the contacts accidentally deleted in the collected addresses - need to restore

    accidentally deleted addresses in the address book collected. need to restore

    I hope that you have a backup, or a text with the address list? Something here can help:

  • I have 2 problems-how can I activate my Add ons and how to uninstall Windows Anti Virus. I need help, please.

    I have Windows XP 32-bit with IE8 Add ons.  I mainly use Firefox Mozilla for my browser and Yahoo as my home page.  Anyway, I have tried all the support and help guide and technicians told me to do to get add ons to open and activate but in vain.  This computer was given to me as a profession, and it was used in a Bank, so I think that the system administrator has disabled the add ons.  I myself as an administrator and use the tips and tricks given windows and Microsoft, but I always run up a wall.  I need help, please.
    I also need to know how to uninstall Windows antivirus software.  I can't find anywhere on my computer.  I feel really stupid and he is probably right in front of my face, but I can't find it to uninstall.  I have McAfee that I paid dearly for if I want to use it until it expires.

    This "Microsoft antivirus' witness (AKA Trojan W32/FakeAlert) hijackware infection!

    If you manage to somehow move to Win7, you will always have an infected computer.

    The ONLY way to solve the problem is by formatting the current hard drive and do a clean installation of Windows, whether it is WinXP or Win7.

    The ONLY way you can do a clean install of Windows XP if you have disks that came with the computer or if by chance, there is a hidden partition restore (not to be confused with the system restore).

    If your kids er - well & their spouses are going to spend money on a new HARD drive, they'be be better spend on a low-end Windows 7 computer and brand-new (for example, a netbook or a mini).

    NB: Any data on your Windows XP computer must be considered 100% reliable! (This includes all of your usernames and passwords, for example, those used for online banking, etc.) You do NOT want to put ALL the data from Windows XP to a new computer or HARD disk.

    Good luck, Grandma. Hope that your grandchildren will treat you better than their parents.

    PS: Time wounds all heels.

    ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • Need help from Picture Manager! My pictures keep replicating & have 100 to 150 copies. When I try to delete, they are continuing to replicate.

    Have tried and tried to remove duplicates. Nothing works!

    Have tried and tried to remove duplicates. Nothing works!

    =============================
    Unwanted copies have file names with
    copy "prefix of"?

    Example: Copy of IMG_1455.JPG

    If_yes_maybe the following tutorial, I wrote
    for XP offers a few ideas:

    Here's how to reproduce the unwanted
    copy of...

    Hold down your CTRL key and select multiple files...

    Place your pointer over the selected group
    (holding the key ctrl) and left click / drag
    the group even just the slightest bit... now
    release the mouse button.

    Maybe the following will help:

    Sometimes most of the person who
    trying to select multiple by holding the CTRL
    or the SHIFT key down while clicking on the left to select the
    image files.

    Copies are created when you are unable to
    completely release the mouse button before
    you move the pointer to another file. When a group
    the selected file is dragged... even the slightest
    release the mouse button will produce a bit...
    copies of all the files previously highlighted.

    It's a little easier if you have your folder
    Options set at single click... that way you can
    select/deselect a file with just a mouse more
    and you don't have to click. For multiples you
    I have to keep... CTRL or Shift.

    Do not click on... no slip... no copy... maybe that of
    your solution. To adjust the click...
    Open a folder and go... Tools / folder
    Options / General tab... Check... 'single click '.
    To open an item"/ apply / OK.

    If you want to delete all the files in a folder
    You can try the following:

    Reach... Edition / select all... or type... CTRL / has...

    With all of the files selected... go... Drop / delete...
    or press your delete key... or... click on the
    Group and choose 'delete '.

    How do I find and remove unwanted 'copies '.
    of your image files.

    Open the folder that the images are saved in and
    on the left, click on the button 'Search' in your toolbar.

    (If you view the files from a montage
    program and do not know where the record is... right
    Click on one of the image files and the menu...
    choose... Properties. The path to the folder will be
    in the tab 'General' to 'Place').

    In the research pane select... "All files and folders".

    In the "All or part of the file name" field. Come in...

    a copy of

    Now... on the left, click on the search"" button.

    When the search is complete... go to... Edition / select all...

    Then go to... Remove / delete.

    You will see a dialog box asking if you are sure
    you want to delete the files, click Yes.

    Now... on the left, click on the 'Back' button in your toolbar.

    Now the remaining files should be your originals.

    If you delete the wrong files... recover from
    your basket now.

    Volunteer - MS - MVP - Digital Media Experience J - Notice_This is not tech support_I'm volunteer - Solutions that work for me may not work for you - * proceed at your own risk *.

  • I have a mess of error. about microsoft Isatap adapter... plug and play id root\ * Isatap\0002 error tv-configmgrerr31 need help with drivers

    need help with this.is there a link for the drivers. The only changes to my system is a new modom.netgear wireless g54.thank you

    Hello

    (1) what is the complete error message you receive?

    (2) when exactly you get this error message?

    (3) how long have you been faced with this problem?

    You can ignore this error message. This error message does not indicate a problem with the adapter. The adapter will continue to function correctly.

    See the article below

    On a Windows Vista-based computer or on a Windows Server 2008-based computer, the Microsoft ISATAP map appears with a yellow exclamation mark next to it in Device Manager, and you also receive an error message
    http://support.Microsoft.com/kb/932520

  • Applesyncnotifier.exe accidentally deleted. How can I get that back?

    Original title: Help me please

    I deleted the applesyncnotifier.exe by mistake and I want to install it again. How?

    Hello

    You asked the question correctly

    AppleSyncNotifier.exe sound an application that installs with Itunes that keeps your mp3 files and applications that you put on a mobile device organized and saved

    reinstall iTunes

    Follow the information from apple to the links below

    Remove and reinstall iTunes, QuickTime, and other software components for Windows Vista or Windows 7

    http://support.Apple.com/kb/HT1923

    ____________________________________________________

    Problem installing iTunes or QuickTime for Windows

    http://support.Apple.com/kb/HT1926

    ____________________________________________________

    and or ask for their support of itunes

    http://www.Apple.com/support/iTunes/

    ____________________________________________________

    Also try the discussions of apple itunes

    http://discussions.Apple.com/category.jspa?categoryID=149

  • Windows pop up and redirects-cant seem to make them stop. Need help.

    I started to see popups and redirects a few weeks ago. Since then, I've run many programs of malware and adware resolves, unsuccessfully. (ADWCleaner, Malwarebytes, Spybot, YAC, etc.) All cleaners are now back with a report of any problems. But I still have problems.
    I have reset Firefox... Same questions. I uninstalled and reinstalled Firefox. Same questions.
    I came across a forum post that describes a similar problem and the solution included opening of the user profile on Foxfire by topic: config and deleting suspicious files. I did and none appear suspicious. I'm reluctant to delete something I might need.
    A person can develop this solution and is there a way to compare what files I have that I should have, so anything suspicious can be identified?
    Other recommendations to eliminate this persistent problem?
    Thanks in advance.

    The extent of the "Comparing the files' in your profile against some kinds of standard profile goes, many extensions add files in the profile folder and files make up the profile can change that new versions of Firefox come out. How old is your current profile, you could have a dozen or more old, unused files. Which coupled with the wide variety of extensions available, makes it very difficult to make a comparison of files with accuracy in all.

    It could be useful that you can tell us exactly what URLs are loaded into popups and redirects. Someone here could recognize the 'source' or maybe see a pattern.

    Have you read this knowledge base article?
    https://support.Mozilla.org/en-us/KB/troubleshoot-Firefox-issues-caused-malware
    Specifically, the mention of this Utility Anti-Rootkit - TDSSKiller

  • Need help from the iphone screen colors 4 change and sometimes the screen turns black

    Hello guys I need your help when I turn on my camera, my phone screen colors change, and sometimes it goes to black screen when I lock / unlock my colors sometimes phone repairs to normal, but when I turn on my camera once again it still happens

    The phone has been maintained in the past?

    To exclude a software problem, set it back to factory settings without using the backup data.

    If the screen works after that, restore your backup to new form.

    Use iTunes to restore your device to factory settings - Support Apple iOS

  • I am very sorry for my experience of care and I need help from someone, because Apple does not seem to do anything.

    Whenever I try to buy anything from iTunes, he told me that my card was declined and I need to update my billing information, but the information is up-to-date and accurate. I tried to access Apple support by all means. I tried the chat system, but was immediately struck with a code error and rerouted. Then I tried to send, but it refused to let me email without an order number, but I can't HAVE a purchase order number if iTunes won't let me make an order! Then I tried to send my number so they could call me, but I got the same error as the chat system code and has been diverted again. Finally I went to the contact section to find a direct number and I called the Apple Media Helpline. Replied to automated email and when I asked to be put through a representative, the message says he understands and was changing me but as soon as he transferred it was yet ANOTHER automated message that just told me to go to the online support page, and then he hung up!

    This is outrageous. How the world am I supposed to get help with anything that either if no support really offer any type of support? The Apple store nearest is 2 hours and I won't make this drive on something that I know can be fixed with a simple phone call.

    I really, really need some help here. Please and thank you.

    What are you trying to use your payment method, credit or debit card? If it is a debit card, not all still seem to be accepted and could not be accepted at all in some countries.

    A card having a chance to be accepted it must be registered with the same name and address (including the format and spacing etc) that you have on your iTunes account and have been issued by a bank in the country where you are (and therefore the country on your iTunes account). If your card is then you have checked with the card issuer to see if they are down for use with iTunes? If they are not then you have another card you could try? Or though iTunes gift cards available in your country so that you can use them as payment?

  • My email account is blocked and I sent all my data to the support team and I can't it again? pls I need help to take again my e.mail account

    I need someone help me get my account e-mail again.

    Thank you very much.

    Rehab M.Abd El Rasoule

    View all Windows Live and Hotmail questions in the appropriate forum found here:
    http://windowslivehelp.com/

  • Need help for recovery from msn and Xbox Live, think have been hacked

    I'm having a terrible time trying to recover my password, my game with Xbox Live, the period of my account, I asked for help on the phone several times Urgghhh! . I have a gold Xbox Live subscription and have not been able to PLAY!. 3 week or two, I created a new account so that I could try to change the information, so far failed to get anywhere, I think that my account has been hacked and my information stolen, please help!  Here are the two
    1 tries to recover - * address email is removed from the privacy... * A new created * address email is removed from private life * thanks for your help...

    You can try to consult the following link:

    http://windowslivehelp.com/solution.aspx?SolutionID=6ea0c7b3-1473-4176-b03f-145b951dcb41

    And he steps.

Maybe you are looking for