Vista not loading Startup repair can't repair automatically..HELP!

tonyf33

Having had the trojan patched c.lyt which actually wasn't doing anything in particular) I ran an AV prog and quarantined a couple of files. Now Vista won't start up and just goes to startup repair (and fails to repair), even trying safe mode is having the same effect. It specifically details 2 corrupt files in the details. I have also tried system restore which says is successful but doesn't effect the outcome on restart
Was able to run a HDD diagnostic didn't find any sector errors.

System is a Dell XPS USFF with Vista Business, came with a ready partitioned drive so have a copy of the drivers etc so I can reduce the C drive back to its original state, however I haven't backed up for a while(don't ask and yes I know :embarasse:embarasse!)
So the problem is I don't wont to lose the files I haven't backed up, can I retrieve them myself and is it just a case of creating a Vista boot CD/DVD to get Windows going, back up the stuff I need then just reformat from the Dell partition?
Not helping with the fact that my internet is dropping like a lead balloon at the moment and my mums old PC (Which I'm using) is a slow old dog had a test speed down to 7kb/s on BT speedtest, it's like been back in the early 80s..lol

Any help/advice/pointers would be muchly appreciated.

rmg1

If Windows won't boot and can't repair, you try a Linux boot CD just to get at the files on the HDD. You should be able to copy these off before wiping and starting again.

Does it say which files are corrupt/missing?

waddler_8

tonyf33 wrote: »

Having had the trojan patched c.lyt which actually wasn't doing anything in particular)

It's a rootkit & an open backdoor to your computer. It will have been doing plenty.

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2FSirefef

So the problem is I don't wont to lose the files I haven't backed up, can I retrieve them myself

http://help.artaro.eu/index.php/data-recovery/recover-files-from-hard-disk.html

Any help/advice/pointers would be muchly appreciated.

Had you have followed the previous advice you probabaly wouldn't be in this mess.

tonyf33

I know, I know. I've been majorly sloppy of late and been meaning to reformat/back up for ages:embarasse. I got back after some time away and all of a sudden my comp had this file and AVG AV wouldn't work. Maybe coincidental number one son had moved back home and started his perennial downloading spree....grrrrr
thanks for the slap (i deserve it!) and the links

waddler_8 wrote: »

It's a rootkit & an open backdoor to your computer. It will have been doing plenty.

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2FSirefef

http://help.artaro.eu/index.php/data-recovery/recover-files-from-hard-disk.html

Had you have followed the previous advice you probabaly wouldn't be in this mess.

closed

backup

http://www.paragon-software.com/home/rk-express/download_old.html

then factory restore it, probably F8 at boot.

Then on your mums pc https://forums.moneysavingexpert.com/discussion/2436849

waddler_8

tonyf33 wrote: »

Maybe coincidental number one son had moved back home and started his perennial downloading spree

Not that I want to get him into trouble - But..., more than likely.

Distribution > Social Engineering: http://nakedsecurity.sophos.com/zeroaccess2/#Distribution

You had the latest variant by the sounds of it. It really is a nasty piece of work despite your thought it wasn't "doing anything".

It downloads other malware and bots your PC to make money for the botmasters - click fraud & spamming. As it's a rootkit, all this happens without you knowing much about it.

http://nakedsecurity.sophos.com/2012/06/06/zeroaccess-rootkit-usermode/

ZeroAccess is a sophisticated kernel-mode rootkit that enslaves victim PCs, adding them to a peer-to-peer botnet from which they receive commands to download other malware....

....The goal of ZeroAccess remains the same: to download further malware onto the infected machine. The types of malware we are seeing downloaded are broadly the same: click fraud and spam bots, although a BitCoin miner has now been added to the mix.

waddler_8

tonyf33 wrote: »

I ran an AV prog and quarantined a couple of files. Now Vista won't start up

Just out of interest Tony, what was that AV program?

tonyf33

waddler_8 wrote: »

Just out of interest Tony, what was that AV program?

It was SuperAntispyware,
When I first switched the PC on I noticed that the AVG antivirus was inactive, tried to rectify that without success so at that point I ran the AVG full scan which picked up the trojan but couldn't do anything so I tried the superantispyware which had been recommedned to me ages ago and I had it on the comp still.
I hadn't accessed any sites of note (my cycling/rugby forums) so nothing linked to any financial or places where access to a password would impact financially (AFAIK)

Anyway I've secured all the files I'll need so thanks very much for the puppy link , my broadband has been up the proverbial which hasn't helped (BT ally cables rotting away as always:() so even downloading the OS to disc was a major task in itself!
Muchos gracias

closed wrote: »

backup

Then on your mums pc https://forums.moneysavingexpert.com/discussion/2436849

mums old dell is XP home, 256mb (celeron 2600) and my younger brother and mums partner downloaded everything and anything on it for a fair few years so was full of unused rubbish anyways so I'll certainly be following all the stuff in the link..cheers

If either of you are passing near Letchworth bring your bikes and I'll give them a free tune up service