netRAT
2008-06-05, 05:44
Hi all,
I'm trying to help out a mate with his laptop. The machine is (was) heavily infected with malware and cannot access Windows now (XP Pro SP2).
What had happened was I ran a scan using SuperAntispyware and it found heaps of stuff including many Vundo variants. Once completed I restarted the computer and now I'm getting the dreaded 0xc0000005 userinit error on startup.
I researched this issue and although it seems to be quite common I cannot get it fixed because:
1. Cannot access safe mode
2. Cannot run task manager
3. Registry info under:
Local_machine/software/mircosoft/windowsNt/currentversion/winlogon/
seems to be correct:
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
I'm using ERD boot disk to mount the OS registry.
Is there something else I can do?
Cheers,
netRAT
I'm trying to help out a mate with his laptop. The machine is (was) heavily infected with malware and cannot access Windows now (XP Pro SP2).
What had happened was I ran a scan using SuperAntispyware and it found heaps of stuff including many Vundo variants. Once completed I restarted the computer and now I'm getting the dreaded 0xc0000005 userinit error on startup.
I researched this issue and although it seems to be quite common I cannot get it fixed because:
1. Cannot access safe mode
2. Cannot run task manager
3. Registry info under:
Local_machine/software/mircosoft/windowsNt/currentversion/winlogon/
seems to be correct:
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
I'm using ERD boot disk to mount the OS registry.
Is there something else I can do?
Cheers,
netRAT