PDA

View Full Version : S&D destroyed 2 needed files. Help!



LuvinRetirement
2007-12-11, 06:34
I ran spybot for the first time. Then I rebooted and the screen came up black with a message:
"WININIT.EXE: Missing/unable to load.
Press any key to continue ..."

When I pressed a key, my Windows ME started to load but then a message came up:
"Windows cannot find 'P/'. You may have typed the name incorrectly in the Run dialog, or another open program cannot find a system file. To search for a file, click the Start button, and then click Search. OK"

So I clicked "OK" and the computer was ready to go, or so I thought. Some of the icons are missing that used to be on the lower right of the screen and when I tried to increase the volume, I got a message that rundll32.exe is missing. Every time I bring the computer up I have to go through the same process.

Please help. I am not great on computers so I need step-by-step instructions to fix my software. Thanks. -LuvinRtirement

LuvinRetirement
2007-12-25, 05:55
My computer (Windows ME) was running fine but then I ran spybot for the first time. Then I rebooted and the screen came up black with a message:
"WININIT.EXE: Missing/unable to load.
Press any key to continue ..."

When I pressed a key, my Windows ME started to load but then a message came up:
"Windows cannot find 'P/'. You may have typed the name incorrectly in the Run dialog, or another open program cannot find a system file. To search for a file, click the Start button, and then click Search. OK"

So I clicked "OK" and the computer was ready to go, or so I thought. Some of the icons are missing that used to be on the lower right of the screen and when I tried to increase the volume, I got a message that rundll32.exe is missing. Every time I bring the computer up I have to go through the same process now.

Please help. I am not great on computers so I need step-by-step instructions to get my computer to run correctly the way it did before I ran S&D. Thanks. -LuvinRtirement

129260
2007-12-27, 09:19
before this prob. occurred by going into start and find system restore. choose a date before this happened.

LuvinRetirement
2007-12-29, 06:44
Thanks for coming back. I have tried to do a System Restore several times but I keep getting a window that tells me to shut down the computer, then try System Restore again. So System Rstore must not be working either. I don't know where to go from here since my computer was working just fine before I ran S&D. -LuvinRetirement

Zenobia
2007-12-29, 22:58
Maybe if you posted the logfile of what Spybot removed,it might give some ideas of what happened.
You'd do that by opening Spybot,clicking Mode,then Advanced Mode,then clicking Tools,and then View Report,then click View Previous report.Look for the fixes log with the proper date from when you first ran Spybot(the fixes logfile should have the date after it,for example a fixes log from 2007/November/06 should be named like this-Fixes.071106-0205.txt).Doubleclick it,it will open in the Spybot window,rightclick,choose Select all.Then you could rightclick,select copy and then paste it here.

LuvinRetirement
2008-01-04, 00:04
Thanks for the help. I didn't try to "fix" any problems when I ran SpyBot so all I have is the following log. I hope it can tell you what I need to do to get my computer back to running correctly. Or is there other info that I could provide you?

25.11.2007 21:59:19 - ##### check started #####
25.11.2007 21:59:19 - ### Version: 1.4
25.11.2007 21:59:19 - ### Date: 11/25/2007 9:59:19 PM
25.11.2007 21:59:19 - ##### checking bots #####
25.11.2007 22:01:15 - found: EngergyFactor0190 Executable
25.11.2007 22:01:17 - found: EngergyFactor0190 Executable
25.11.2007 22:01:17 - found: EngergyFactor0190 Executable
25.11.2007 22:01:17 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:18 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:01:19 - found: EngergyFactor0190 Executable
25.11.2007 22:03:31 - found: GJeans30 Autorun settings (TaskMonitor)
25.11.2007 22:03:31 - found: GJeans30 Program file
25.11.2007 22:03:31 - found: GJeans30 Autorun settings (hpsysdrv)
25.11.2007 22:03:31 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (Delay)
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (Gene USB Monitor)
25.11.2007 22:03:32 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (SSDPSRV)
25.11.2007 22:03:32 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (*StateMgr)
25.11.2007 22:03:32 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (KB918547)
25.11.2007 22:03:32 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (KB891711)
25.11.2007 22:03:32 - found: GJeans30 Program file
25.11.2007 22:03:32 - found: GJeans30 Autorun settings (ScanRegistry)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (PCHealth)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (SystemTray)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (LoadPowerProfile)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (MMTray)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (MotiveMonitor)
25.11.2007 22:03:33 - found: GJeans30 Program file
25.11.2007 22:03:33 - found: GJeans30 Autorun settings (WorksFUD)
25.11.2007 22:03:34 - found: GJeans30 Program file
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (Microsoft Works Update Detection)
25.11.2007 22:03:34 - found: GJeans30 Program file
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (HPLogiFinder)
25.11.2007 22:03:34 - found: GJeans30 Program file
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (Adaptec DirectCD)
25.11.2007 22:03:34 - found: GJeans30 Program file
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (USBMonit.exe)
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (LoadPowerProfile)
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (SchedulingAgent)
25.11.2007 22:03:34 - found: GJeans30 Program file
25.11.2007 22:03:34 - found: GJeans30 Autorun settings (Keyboard Manager)
25.11.2007 22:03:35 - found: GJeans30 Program file
25.11.2007 22:03:35 - found: GJeans30 Autorun settings (MoneyAgent)
25.11.2007 22:03:35 - found: GJeans30 Program file

Zenobia
2008-01-04, 00:51
Hi. :)
You're running an outdated version of Spybot.

Looks like you might want to ask for help in the malware removal forum.

The instructions to follow are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

You could include a link back to here if you like,so any helpers looking at your log will know about the troubles you've been having when you boot up your computer.Good luck in malware. :bigthumb:

Zenobia
2008-01-11, 03:09
If you're still looking for help in the malware forum,there's a waiting room for people who haven't had help after four days to post in,to say you still need help.

The waiting room:
http://forums.spybot.info/forumdisplay.php?f=37

tashi
2008-01-18, 07:53
Hi.

LuvinRetirement, how is it going?

As far as the malware removal forum goes, a HJT log would have to be produced, as per the forum sticky topic, before posting in the Waiting Room. Helpers need something to work with. ;)

"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

You could skip the Kaspersky scan for the moment.

By any chance did you run a program called CCleaner in the same time frame the problem occurred?

Best wishes.

LuvinRetirement
2008-01-19, 02:56
Hi Tashi - Thanks for helping me. I am getting a little confused. Should I be posting on the S&D or the Malware Removal forum?

Here is my current understanding of what I should do next.
1. Update from S&D 1.4 to 1.5.1,
2. Run HJT and post results on my S&D thread,
3. Not run Kaspersky yet,
4 Wait until a helper comes back to me.

Does that sound ok?

In answer to your question about CCleaner, I am not familiar with that program so I am assuming that I have never run it (?).

I sure hope you can help me get my computer back to normal by restoring WININIT.EXE and rundll32.exe (if that is what the computer needs). Thanks. LuvinRetirement

tashi
2008-01-28, 07:24
Hi LuvinRetirement.

To produce a HJT log you'd follow the instructions here:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper would advise you when available.

Do you have an anti virus program installed on that computer?

Best wishes.