Overclock.net › Forums › Software, Programming and Coding › Networking & Security › ScareWare/Cannot load XP past splash screen
New Posts  All Forums:Forum Nav:

ScareWare/Cannot load XP past splash screen

post #1 of 12
Thread Starter 
Okay,
I am trying to recover a XP system that the owner opened a Scareware, he got a BSOD, and brought it to me.
I can not get past the XP splash screen, and cannot get into safe mode.
I ran BitDefender,Secured2K,And KasPerSky, each found a couple virus or trogens.

I still cannot get past the splash screen?
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
post #2 of 12
Sounds like the Windows files were corrupted.
    
CPUMotherboardGraphicsRAM
Xeon w3680 Gigabyte X58A-UD3R GTX 295 Engineering Samples 2X Corsair XMS3 
Hard DriveHard DriveCoolingOS
Sandisk SSD Seagate Corsair H50 W7 Ult 
MonitorMonitorKeyboardCase
Viewsonic VA1912wb Viewsonic VA912b K350 CM HAF 
Mouse
Logitech M570 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Xeon w3680 Gigabyte X58A-UD3R GTX 295 Engineering Samples 2X Corsair XMS3 
Hard DriveHard DriveCoolingOS
Sandisk SSD Seagate Corsair H50 W7 Ult 
MonitorMonitorKeyboardCase
Viewsonic VA1912wb Viewsonic VA912b K350 CM HAF 
Mouse
Logitech M570 
  hide details  
Reply
post #3 of 12
Thread Starter 
Quote:
Originally Posted by MR KROGOTH View Post
Sounds like the Windows files were corrupted.
Yes it does, any ideas to fix?
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
post #4 of 12
Windows XP install disk and mfc /scannow or chkdsk /f?
    
CPUMotherboardGraphicsGraphics
FX-8350 Asus Crosshair V MSI GTX460 Hawk 1gb MSI GTX460 Hawk 1gb 
RAMHard DriveHard DriveHard Drive
Kingston HyperX 8gb (2x4gb) Crucial M4 64GB Samsung F3 1TB Western Digital 320GB 
CoolingOSMonitorMonitor
Custom WC Windows 7 Ultimate X64 Dell E2311H Dell E2311H 
MonitorKeyboardPowerCase
LH 23EN43 Ducky Year of the Dragon 2012 SilverStone Strider 1000W-P Corsair 800D 
Audio
Asus Xonar Essence STX 
  hide details  
Reply
    
CPUMotherboardGraphicsGraphics
FX-8350 Asus Crosshair V MSI GTX460 Hawk 1gb MSI GTX460 Hawk 1gb 
RAMHard DriveHard DriveHard Drive
Kingston HyperX 8gb (2x4gb) Crucial M4 64GB Samsung F3 1TB Western Digital 320GB 
CoolingOSMonitorMonitor
Custom WC Windows 7 Ultimate X64 Dell E2311H Dell E2311H 
MonitorKeyboardPowerCase
LH 23EN43 Ducky Year of the Dragon 2012 SilverStone Strider 1000W-P Corsair 800D 
Audio
Asus Xonar Essence STX 
  hide details  
Reply
post #5 of 12
Thread Starter 
TurboTurtle's Thread has this.....
Cannot Get Into Safe Mode Either

This is a rare step to be taken, however it's cause is simple. Often, infections will tie themselves in with a specific system file so that if they are removed, they take the host with it.

This system file is atapi.sys. If you have access to ANY other machine running the same major version of Windows (meaning XP, Vista or 7 - you do not have to match Home, Home Premium, Pro, etc. You do have to match x86 vs. x64 where applicable) you can simply copy the atapi.sys file from that computer, and place it in the appropriate directory on the infected machine. I recommend using a Linux Live CD and a USB flash drive to facilitate the transfer. In the very few times I have had to do this, it has not failed me once.

The atapi.sys file can be found under:
C:\\Windows\\System32\\Drivers

Does this mean that the Linux Live cd will act as the operating system?
If it does I still do not understand how I could load the atapi.sys file if I cannot log-in?
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
post #6 of 12
Thread Starter 
Quote:
Originally Posted by FiX View Post
Windows XP install disk and mfc /scannow or chkdsk /f?
What is mfc, please?
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
post #7 of 12
I had a problem like that with Win7 on beta, it was the video drivers. Also, give the Operating Systems section a try.
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
Cisco Cisco Cisco Cisco 
  hide details  
Reply
My System
(13 items)
 
  
CPUMotherboardGraphicsRAM
Cisco Cisco Cisco Cisco 
  hide details  
Reply
post #8 of 12
Sorry, spelling mistake. sfc /scannow
    
CPUMotherboardGraphicsGraphics
FX-8350 Asus Crosshair V MSI GTX460 Hawk 1gb MSI GTX460 Hawk 1gb 
RAMHard DriveHard DriveHard Drive
Kingston HyperX 8gb (2x4gb) Crucial M4 64GB Samsung F3 1TB Western Digital 320GB 
CoolingOSMonitorMonitor
Custom WC Windows 7 Ultimate X64 Dell E2311H Dell E2311H 
MonitorKeyboardPowerCase
LH 23EN43 Ducky Year of the Dragon 2012 SilverStone Strider 1000W-P Corsair 800D 
Audio
Asus Xonar Essence STX 
  hide details  
Reply
    
CPUMotherboardGraphicsGraphics
FX-8350 Asus Crosshair V MSI GTX460 Hawk 1gb MSI GTX460 Hawk 1gb 
RAMHard DriveHard DriveHard Drive
Kingston HyperX 8gb (2x4gb) Crucial M4 64GB Samsung F3 1TB Western Digital 320GB 
CoolingOSMonitorMonitor
Custom WC Windows 7 Ultimate X64 Dell E2311H Dell E2311H 
MonitorKeyboardPowerCase
LH 23EN43 Ducky Year of the Dragon 2012 SilverStone Strider 1000W-P Corsair 800D 
Audio
Asus Xonar Essence STX 
  hide details  
Reply
post #9 of 12
Thread Starter 
Quote:
Originally Posted by FiX View Post
Sorry, spelling mistake. sfc /scannow
I don't know what sfc/scannow is, is it a bootloader?
I try google it, thx
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
post #10 of 12
Thread Starter 
Quote:
Originally Posted by scottsee View Post
I had a problem like that with Win7 on beta, it was the video drivers. Also, give the Operating Systems section a try.
Oh okay,
yes operating systems section, good idea! err would that be considered double posting?
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
H.O.G
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 DO 4.4GHz HT ASUS P6T 3x Nvidia 6GB OCZ,Gold DDR3 8-8-8-24 
Hard DriveOptical DriveCoolingOS
Intel-x25V, X25M,WD Caviar Black 500 Asus DVD NH- D14 7 pro 
MonitorKeyboardPowerCase
6x Wireless CM Silent Pro M 600-Modular CM Storm Scout 
MouseMouse PadAudio
MX 1000 Wireless It's black Creative Fatal1ty Headset 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › ScareWare/Cannot load XP past splash screen