virus recovery

I have a rootkit virus. After going into a reboot loop, I used the recovery console to run fixmbr and bootfix. I am now in installation mode and the product key on the label is marked as invalid. I need a new key or a way out of the installation mode.

Hi Harry,.

If you use a Windows XP disk to access the recovery console, remove drive restart the computer and check if the computer boots to the desktop.

Thank you, and in what concerns:

Ajay K

Microsoft Answers Support Engineer

Visit our Microsoft answers feedback Forum and let us know what you think.

Tags: Windows

Similar Questions

  • win xp virus recovery - system tools and other system files are missing or hidden

    picked up a win xp pc against virus recovery win xp.  All files, folders, and programs have been hidden.  I can now see most of them but Windows - System Tools, etc. system files are still missing.  How can I get back them?

    Download and run Unhide.exe. Be advised that it takes some time for the course ends.

  • Virus recovery disable MEMU cascaded to all my programs in all programs.

    Virus recovery disable MEMU cascaded to all my programs. I'm thinking how to turn all the program, so I can see them again but I need to find the place where to turn all the links of programs, starting the programs, some can tell me where the key registetion to do.

    I disassembled the virus the one I had seems to be a version upgrade because I the steps I found to remove it would not work. same virus programs could not remove a lot of it and fix it.

    Apparently, the hard drive is wipe out but it's not. The virus turn most of the off visual interface on the desktop, so you can see. but it still everything you need to know which regester key values to change and they need to change too!

    The entire program antivirus don't happen that their return on what I found. They clean it up but your left with trying to fix the rest of the problem. Biggest problem for me, is that the top of the Tower has not yet saved.

    Thanks for your help, but I found the answer to my problem here.

    It shows you the registry keys, you need to delete and copy the file had to be back in the right places.

  • Virus recovery Windows

    I removed the virus from windows recovery, but now all my programs office are hidden and I can't open my personal folders. Any help out there?

    May be that your user profile and/or your user account is corrupted.

    Open a new account and see if that makes a difference. You can depending on your configuration, you will need to take ownership of your personal files.

    I notice that you have not tos tate what Windows operating system you are using?

  • Help virus recovery

    Alright. So about two days ago, I followed a link on a website looking for information on a topic, I was doing research for school. After that I followed the link I had messages to appear on my computer saying: I've been infected by a Trojan Virus and I turned off my computer. I turned this back in safe mode and restore my computer to a set of files 3 days before the incident. Once I restarted my computer and the recovery, I found the virus had disappeared, I downloaded anti malware software and made several different analyses with several products to ensure that the virus had disappeared, all mounted with no problems. However, I found some files corrupted, some things need to re-setup and it seems even that my computer can get a bit slower... My question is, recovery to a date earlier than actually rid my computer of viruses? If this is not the case, how I uninstall completely? And should I do / did something different? Any help is greatly appreciated.

    Thank you


    Only way to be sure is to a very deep, enough to kill too much control.

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool

    Microsoft Malicious removal tool - 64 bit

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.   <-->  <-->

    Choice of PCmag editor - Prevx-, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).


    If necessary here are some free online scanners to help the

    Other tests free online


    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista


    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    I hope this helps.

    Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

  • cure virus recovery Windows required

    This virus was picked up may 6, 2011.  A lot of blogging about it.  Can someone give me the remedy to remove Windows XP please?

    Follow this

  • No DHCP - DNS VIRUS recovery

    I have recently got rid of a nice healthy virus on one of my Clients PC, I don't remember the name of it. But a control of Trojan horse that wouldn't let me run programs and constantly beating me at every turn... so... I ran Kaspersky Rescue disk. got rid of him and then ran AVG just after it. MISSING virus!

    now... problem. I can not receive an IP address from the DHCP server and when I have static IP, I can't have a resolution of any DNS server. no problem to ping ANY IP address even the public Ip addresses as ip of yahoo -

    I restarted the TCP/IP with the command "netsh int ip reset resetlog.txt".

    I also rebooted Winsock with the command "netsh winsock reset."

    I also rebooted windows Firewall by following the steps on this link "" because I noticed that the firewall services are not started, and I can't start

    so I was going to use the repair on the windows XP pro CD nice feature... but... when it tries to start windows I get the blue screen of death with the error "STOP: 0x0000007B" struck me bad drivers of HD said... I install the drivers on the CD and I can not find the DVD ROM USB that I put them outside the internal DVD ROM... as well as all my support I call usually do not respond to it phone... so I'm between a rock and a hard spot...

    If anyone has an idea please feel free to help...



    Assuming that the computer is now clean.

    With XP, you can do a refresh install without really touching the current applications and data.

    Refresh the Installation of XP.

    Boot from the original XP CD. Ignore the first screen offers repair of the Console and continue as if you install a new XP.

    After accepting etc., the new Setup screen lights up and would detect the current XP installation.

    Choose repair by pressing R for repair.

    Use it, would take about 45 min. and you will have an all updated XP Installation by keeping all of your data and configuration of XP.

    P.S. If you have changed the WinXP security definition (special permission as Firewall), to look on them after the update, because they could go back to the default value.

    Jack-MVP Windows Networking. WWW.EZLAN.NET

  • What should I do after getting the virus "XP Recovery"?

    Original title: looks like that I managed to catch a virus.

    It seems as if I've managed to catch virus recovery XP (or so my friends tell me.)

    What should I do now?


    Follow this link and see how you go let me know...



  • Firewall Windows has been disabled by a virus or Malware. System is now cleaned and Salvation took up the Task Manager, but the Windows Firewall service does not start. How to run again.

    Firewall Windows has been disabled by a virus or Malware. System is now cleaned and Salvation took up the Task Manager, but the Windows Firewall service does not start. How to run again.

    Suggest you read the following:

    I hope this helps...

  • problem loading windows xp

    good it will be long and stretched out, but I want to make sure that all the information is there so that people can give the best help and suggestions.

    Part 1: a week ago I had a series of really bad viral infections on my computer.  My virus programs has taken care of the virus but also removed some start-up of the software that is used to start my computer properly.  as a last ditch effort, I used system restore on my computer to it reboot back to a previous configeration.  The computer started to its original configuration of the box and I lost all my files on the computer (but on the other side of my computer worked perfectly, now that this has been done)

    Part 2: I take the computer to the repair shop so they do a deep memory scan to recover my files.  They find some files and put them in a folder located on my desktop.  they say technology works on my computer, there is a series of mistakes at the beginning of windows .dll and that they are the result of a viral infection (of course I did the system restore did not work to get rid of the virus.)  I didn't notice the .dll errors when I did it at the beginning of the restoration of the system, but this does not mean that they were not there)

    Part 3: I begin to sort my files on the desktop, placing in the files they belong (i.e. put pictures in my folder of images and documents in the my documents folder, etc.) when I noticed that I need to do a windows update.  Around the same time that windows is up-to-date, I decided to launch a virus scan to kill all the other infections.  The virus scan (I used spybot) picks up a handful of infections and corrects all.  Complete the update of windows and recommend that I restart the computer.  I restart.

    Part 4: the computer restarts but does not completely load.  The desktop icons are not displayed and does not display the start menu.  Some programs I can review the taskbar through the enforcement function, but things such as internet explore simply do not work.  Rather than several .dll errors appears at startup, as if I had until I get an error of the coil which may or may not be the reason why my computer is not working correctly.

    Part 5: so to give you a breakdown
    -my computer is not loading correctly and I don't know why.  I theorized that it could be several different things:
    1. the virus program deleted a file necessary for a good start
    2. the error of the coil is originally the computer does not start
    3. the something caused windows update happens in the computer to not allow for the good start
    (On that note, I must say that I had avoided before to install the latest service pack, because this would cause the same problem in my pre-anti-virus/recovery of computer problems.)  I don't know why it happened or if the same thing is happening now.)
    4. something else I forgot.

    I don't know how to diagnose or solve all these problems.  I don't have a copy of windows xp to reinstall/repair startup.  However, I have a laptop which has windows xp and I can transfer individual files, if people think that those I can be damaged.  My computer works well in safe mode, making it clearly a software problem.

    any help would be appreciated.
    email deleted


    Thanks for posting in the Windows Update forum. I read your post from start to finish. To the nature of your question, your post is considered to be off-topic, as well as outside our area of expertise for this Vista forum. That being said, I will add the following:

    Your message goes here - The Windows XP Expertzone:

    Keep in mind that OOB or out of box means the hard drive has been wiped completely clean. So you would not be able to retrieve files from the previously installed disturbed BONES.

    In addition, your problem is related to PCSafety, which means you had a malware infection. The short answer is that we simply do not know the extent of the damage caused to your old operating system. Once the malware (exhaustive) occurs, it is not possible to know perfectly all THE damage. Just be up front with you, if it is never good news to hear Jason.

    At this point, the shortest path to victory is a format and reinstallation of the OS, all wiping data. You can always consult the Expert area.

    Best wishes


    PS - I would be in your best interest to remove your e-mail address for this site. We consider that personally identifiable information (PII). Reason: To avoid potential Spam.

  • HP Envy all in one PC: Recovery Manager, the system restore is disabled by a virus

    Had a virus on my all in one PC envy after a free update to windows 10. Computer has been closing down could not get antivirus to work fast enough. After reboot system had disappeared. There is now no operating system. HP Envy Recovery manager, System Recovery is not highlighted, do not not the possibility to do a restore? Virus stronger than I've ever met. Thank you in advance.



    Let me welcome you on the HP forums!

    It would NOT in fact the virus which prevents HP Recovery Manager to work.

    While Microsoft says there is no risk in the upgrade of Win10, because they allow you to believe that you can always return to your BONES and the original installation program within 30 days, the ugly fact of the matter is that the Win10 GoBack feature turned out to be unreliable - and when she fails, she can let machines in a State corrupted - that does not always happen , but it happens often enough to be a problem and you will get no warning beforehand that he goes to the trash your PC!

    If this is not enough, the Win10 upgrade is known, in some cases, corrupt partition recovery stored by the OEM that built the original machine. It's pretty much guarantee that no HP recovery will work:

    What you would really need to do, is to erase the entire disk and restore your PC using something known as HP recovery media.

    HP recovery media is a set of DVD and a CD or a USB key, which will erase the hard drive (removing all data, applications and settings, reinstall the original OS, drivers and utilities for HP. In some cases, you will be able to order a USB instead of discs. You must order at HP; they cannot be downloaded.

    You can look online for recovery from the paged media related:

    Once there, enter your product name or number. On your software page and download the drivers, select your operating system and version. Click on "Update". If the HP recovery support is available for your computer, down near the bottom of the page, you will see an entry for the command Recovery Media-CD/DVD/USB. Click on the symbol '+' to expand this entry and click on order to press for more details.

    Or, if you prefer, you can do the same by contacting HP Customer Service:

    If you live in the United States or the Canada, details are on this page:

    If you live elsewhere, contact details are on this page:

    NOTE: once you get through, stay on the line until you are finally able to talk to someone ' one - it can take a while!

    If you have difficulties to find a phone number, then try: 1 (800) 474-6836

    If HP no longer provides a recovery media for your model, a few other sites, you can check are: and

    Good luck

  • Satellite L310D - Viruses and the issue of recovery

    My partner has a Satellite L310D, which recently is victim to the virus of windows security.
    We initially tried to restore to a previous restore point but he resurfaced after a few days.

    We then reinstalled windows from the recovery partition of the HARD disk which seems at first sight have been around but after opening explorere and surfing the net, it keeps us bombing with a windows error.

    Also, when you are in the google search, then clicking on a link, it will open additional search pages and refuses to open the link.

    Finally, he did not finish we updated windows and lifted up a windows error which we can not get rid of despite their support pages.
    I learn the virus can have dug in the registry but I thought the restoration of HARD drive would address this issue.

    If he touched the entire hard drive and how do I sort?
    We do not have an available recovery disk.

    Any help would be greatly appreciated that we cannot use it as it is. Apart from this, the machine was great for our needs.

    > If it has affected the entire hard drive and how do I sort?
    Well, a virus could affect the functionality of the system.
    Usually the antivirus software should be able to remove this but some viruses are really good and new OS install might be a better solution.

    If you don t have recovery disks (generally you must create it in the first day of the purchase of the laptop), then you could order it here:

    Welcome them

  • Pavilion P6-2100: a virus erased files recovery D: drive and disabled windows update

    When I realized that my Windows 7 was not updated as usual on my Pavilion P6-2100, I found that at least one of the files associated with the software update was missing in the area of abuse.  I was going to do a refresh of the system and then found that the recovery files in drive d: had been erased.  Googling the problem indicated that the problem was caused by a virus.  It seems to have other problems, except that Windows 7 is not updated.  (I hope that's the only problem).  Any suggestion would be appreciated.


    You can order materials from HP recovery below, or call HP on the phone to order 1-800-474-6836

    If HP has more recovery media for your model, order them here


  • Range of HP Pavilion 500 computers: recovery readers are ammuned to infections of virus and malware

    HI I was just curious since I was a disc on this witch Office recovery is a Recovery Image (D).  I was wondering if by chance, I had an infection on this desktop can a virus or malware infecting the recovery Image reader and destroy the files inside the car by also infect them as well.

    I was also wondering as a user by accident, I've had systems infected previous operating I was wondering is it a good idea to use a program that can do your disc images and allows also to clone the hard disk as well.  Having one of these free programs like macruim think would be a good idea for a user like me?

    I was wondering also is the recovery Image reader is ammuned to virus infections or malware?

    Thank you very much for your help, it is always appreciated

    funny35 wrote:

    I was wondering if by chance, I had an infection on this desktop can a virus or malware infecting the recovery Image reader and destroy the files inside the car by also infect them as well.


    Besides what TheOldMan seconded and advised, I would like to add that if it is possible, it is very unlikely because of the way the virus and malware work today and because of theway the function of recovery partitions.

    I mean, you can't rely 100% on the recovery partitions, they are good, but not 100% subject to attacks or loss. However, if your PC ever be infected, this does not mean that the recovery of the partitions will become infected and unuable.

  • Problem with recovery Partition(After i got a Virus)

    Hi all

    I use HP Envy 15 laptop with windows 7 Home premium x 64 bit installed. I don't create the recovery discs since I've had this laptop and what happened is that I had a virus on the internet but I have fixed almost all the defects of the system caused by the latter, but the main problem for me, is that it changes all the Player main file name in Virus1232 for example (d:\recovery converted d:\virus1234) and I spent hours on the internet for the names of folders and files right and I got them all but only a single file, not sure. My problem is when I enter the Recovery Manager it detects none my recovery partition (but the virus is not responsible for any deletion of file it just caused some change system) and just to talk I've also corrected the names of folders and files in the c: drive, since they are necessary also.

    What are the names of files I got in the D: drive: bootmgr - BT_HP.flg - CSP. DAT - DeployRp.log - HPSF_Rep.txt - language.ini. and let him file name is the one im not sure of: "HP_WSD.dat" (it's a file of size zero).

    The recoverymgrdump.txt just works & "leaving CSBRMgr::GetRPTOOLPartIndex!
    then he said to me:

    "Win32 System Info Code = 3, Message Info = the system does not have the specified path."

    and he also said:

    "CSBRMgr::HpcdFlgIsExistInUP : \WINDOWS\hpdrcu.prc does not exist."

    I don't know if this is normal, but also the deployrp.log gives me this error:

    "The package does not exist: c:\RM\Tools\DeployRp\WinPE_LangPacks\64\

    of course there are errors more in both files, but I guess that those who are the most important.

    So my question is: the attributes of file in the d: drive would be responsible for this error (I changed all the attributes to be hidden and read-only system)


    If anyone has a solution please tell me what to do.

    Thank you.

    You are the best to order that a set of recovery disks from HP, doi a full restore using those.

    You can order here recovery media


    Or call HP on the phone to order a set.


    Everywhere else

Maybe you are looking for