XP won't start anymore

I don't know what all the "leading scanners" are, but yes, I've tried
malwarebytes. It finds the registry key, removes it, but then on the
reboot, the key is back again, so I don't consider that as removing the
malware.

I've used AVG, SDFix, spybot, malwarebytes, windows defender, and combofix.
Even had a special script written just for me to use with combofix, and the
problem came back.

The good news is that the reg key tries to load that .dll, but the .dll is
not on the system and so far has not reappeared, so the worse seems to be to
dismiss the warning about windows not being able to find it, and just going
on. Of course, I wonder what would happen if that dll every did reappear.


"Hank J." wrote in message
...
On Mon, 8 Dec 2008 23:29:29 -0800, "Bill H."
wrote:


So how to fix? All the tools I've downloaded so far don't seem to do
anything with it, including sdfix. :-(

Maybe something here will help... it's worth a look:

www.geocities.com/windowsfixes/tools.html

If that doesn't help, then it's time to wipe everything clean and
reinstall.

What is a "rootkit infection?"

Very persistent malware. Have you tried ALL the leading malware
scanners... including Malwarebytes?

Sounds good. Remind me where I find the prefetch folder?

Thx.


" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message
...
perhaps, you might want
to search the disk and
also delete any files and
folders for those filenames.

also, you might want to
delete your prefetch folder.



"Bill H." wrote in message
...
Oh, yeah, I searched through the entire registry. Just that one key.

It is under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill

Update for this part of the thread.

Have been able to run in normal mode now for a couple of days, no problems,
except for the persistent appearance of the regkey that results in windows
file not found error when it first boots (can't find Kroduk.dll). I just
dismiss the box and windows takes off from there.

Have installed all the windows and office updates, except have not gone to
SP3 (the win cd I used for recovery console stuff is SP2, so since I've been
using that for help, such as installing any missing files in the dll cache,
I've not wanted to move to SP3).

The thing that seemed to help the most was running ComboFix, but I've been
doing other things as well, and maybe it's been the combination that's
helped the most.

Have also updated many programs, and found that Acrobat Reader had an "old"
auto downloader that they said could be a cause for concern. Have Windows
Defender, AVG (free version) and SpyBot now running on the system. Since I
have windows auto update turned off, I do get the warning about the system
not being "protected."

--Bill



" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message
...
I'm leaning more on a incompatible or
corrupted driver, side since safe mode
functions and not normal mode.

it's reminiscent of having enable
battery backup in the power control
panel, whereas after a short while,
if not immediately the system shuts
down due to seeing zero battery charge.

however, there is no battery backup
connected.



"Anna" wrote in message
...

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which one
and get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I
can get is safe mode. System restore has been turned off. Last known
good config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not
for very long before it reboots.")


"Anna" wrote in message
...
Bill:
Assuming your problem isn't hardware-related (which it might very well
be based on your latest statement about the system auto rebooting after
the system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware
(what makes you think "it's probably a virus or trojan"?...)

So that it's *not* a problem due to malware and the various
anti-malware recommendations suggested by other responders to your
query won't correct the problem...

It might be a good idea to undertake a Repair install of the XP OS on
the basis that the problem involves a not-too-terribly corrupted OS
that is not malware-caused so that (hopefully) the Repair install will
return the system to a bootable functional state without the loss of
any present data.

I don't know if you're familiar with the process of undertaking a
Repair install of the OS or even whether you wish to pursue this course
of action. So if you want or need more info on the subject so indicate.
Anna


"Anna" wrote in message Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the OS as
has been previously suggested to you? Or have you done so and that too
didn't "work"?
Anna


"Bill H." wrote in message
...
Thanks, Anna.
Latest:
I believe all traces of malware are now gone.
(SNIP)
I did a thorough hardware diag (Dell) and it found nothing wrong.
Tell me more about a repair install.
--Bill


Bill:
Assuming you have a non-OEM-branded XP OS installation CD at your
disposal and not merely an OEM recovery CD or recovery partition
situation, you might consider running a Repair install of the XP OS at
this point in time in view of your other futile attempts to get the
system up & running. Unfortunately, since you mentioned "Dell" in your
last post it's conceivable that you do *not* have such an XP OP
installation CD that will allow you to undertake a Repair install since
all you might have is the so-called "Recovery" or "Restore" disk that
Dell generally provides with their machines. And that media will
ordinarily not provide for a Repair install of the OS. But assuming you
*do* have an XP OS installation CD that allows you to undertake a Repair
install, here's some info about it...

Undertaking a Repair install of the OS is a relatively straightforward
process. It would be roughly akin to making a fresh install of the OS,
but in nearly every case your existing programs & user-created data would
be retained. Notice I said "nearly". While it would be a rather rare
situation where data would be lost or corrupted as a result of a failed
Repair install, and as unlikely as it may be, it *could* happen.

So if there are any programs and/or other data on your present drive that
are absolutely crucial to you and you could not tolerate their loss, then
I would strongly suggest that before undertaking this Repair install
operation that you first either make a "clone" of your existing HDD
(using a disk-imaging or disk-cloning program) or, if that's not
practical, install the HDD in another machine as a secondary HDD so that
you can pull off whatever data you want onto some removable media, e.g.,
flash drive, CD, etc.

Again, it's a relatively rare event that a loss or corruption of data
will occur even when the Repair install is unsuccessful, but it *can*
happen. So I want you to be aware of this.

There are a number of websites that contain step-by-step instructions for
undertaking a Repair install. As I've indicated it's not a difficult nor
terribly time-consuming process. Again, it's roughly similar to making a
fresh install of the XP OS. If you do a Google search on "XP repair
install", you'll be pointed to many of these sites. Here are a few...
http://www.michaelstevenstech.com/XP...install.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winx...exfullpage.htm
http://support.microsoft.com/default...b;en-us;315341

Assuming the Repair install is successful, you should use your A-V
program to immediately check out your PC for any virus infestation.
Hopefully you'll undertake the Repair install with an XP OS installation
CD that contains (a slipstreamed) SP3 so that it won't be an onerous task
to download/install *all* the MS critical updates since SP3 was released.
On the other hand if you undertake the Repair install with a XP-SP2
installation CD you will have to download/install *all* the MS critical
updates since SP2 was released, which *will* be an onerous task.
Alternatively you could install SP3 after the Repair install assuming the
Repair install has been successful. Anyway, give this some thought if you
can't get your system back to a functional state any other way and, of
course you have the requisite XP OS installation CD that allows you to
undertake a Repair install of the OS.

Just one other thing...
It's conceivable (although it doesn't sound like it) that you're dealing
with some hardware-type problem here and not just a corruption of the OS.
Where a hardware-type problem is the culprit in cases like the one you
describe, it's usually the HDD that's defective although it's entirely
possible some other major component of your system may be at the root of
the problem you're experiencing. In any event, it's possible (although
again from your description of the problem, unlikely) that you may be
dealing with a defective HDD so it probably would be wise at this point
to check out the HDD with a HDD diagnostic utility you can (usually)
download from the website of the disk's manufacturer. It's very easy to
use - the downloaded program allows you to create either as a bootable
floppy disk or bootable CD containing the HDD diagnostic program. So give
that some consideration as well. On the other hand if the Dell hardware
diagnostic program found no problem with the HDD I suppose it's safe to
assume there is no problem there.
Anna

Bill

To see hidden files etc. Go to Start, Control Panel, Folder Options,
View, Advanced Settings and verify that the box before "Show hidden
files and folders" is
checked and "Hide protected operating system files " is unchecked. You
may need to scroll down to see the second item. You should also make
certain that the box before "Hide extensions for known file types" is
not checked. Next in Windows Explorer make sure View, Details is
selected and then select View, Choose Details and check before Name,
Type, Total Size, and Free Space.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Bill H. wrote:
Update for this part of the thread.

Have been able to run in normal mode now for a couple of days, no
problems, except for the persistent appearance of the regkey that
results in windows file not found error when it first boots (can't
find Kroduk.dll). I just dismiss the box and windows takes off from
there.
Have installed all the windows and office updates, except have not
gone to SP3 (the win cd I used for recovery console stuff is SP2, so
since I've been using that for help, such as installing any missing
files in the dll cache, I've not wanted to move to SP3).

The thing that seemed to help the most was running ComboFix, but I've
been doing other things as well, and maybe it's been the combination
that's helped the most.

Have also updated many programs, and found that Acrobat Reader had an
"old" auto downloader that they said could be a cause for concern.
Have Windows Defender, AVG (free version) and SpyBot now running on
the system. Since I have windows auto update turned off, I do get
the warning about the system not being "protected."

--Bill



" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message
...
I'm leaning more on a incompatible or
corrupted driver, side since safe mode
functions and not normal mode.

it's reminiscent of having enable
battery backup in the power control
panel, whereas after a short while,
if not immediately the system shuts
down due to seeing zero battery charge.

however, there is no battery backup
connected.



"Anna" wrote in message
...

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which
one and get rid of it?

Windows xp pro starts to load, gets to the splash screen, and
the the computer reboots.

I've tried dianostic and selective startup, and neither work. All
I can get is safe mode. System restore has been turned off.
Last known good config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode,
but not for very long before it reboots.")


"Anna" wrote in message
...
Bill:
Assuming your problem isn't hardware-related (which it might very
well be based on your latest statement about the system auto
rebooting after the system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of
malware (what makes you think "it's probably a virus or
trojan"?...) So that it's *not* a problem due to malware and the
various
anti-malware recommendations suggested by other responders to your
query won't correct the problem...

It might be a good idea to undertake a Repair install of the XP
OS on the basis that the problem involves a not-too-terribly
corrupted OS that is not malware-caused so that (hopefully) the
Repair install will return the system to a bootable functional
state without the loss of any present data.

I don't know if you're familiar with the process of undertaking a
Repair install of the OS or even whether you wish to pursue this
course of action. So if you want or need more info on the subject
so indicate. Anna


"Anna" wrote in message Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the
OS as has been previously suggested to you? Or have you done so
and that too didn't "work"?
Anna


"Bill H." wrote in message
...
Thanks, Anna.
Latest:
I believe all traces of malware are now gone.
(SNIP)
I did a thorough hardware diag (Dell) and it found nothing wrong.
Tell me more about a repair install.
--Bill


Bill:
Assuming you have a non-OEM-branded XP OS installation CD at your
disposal and not merely an OEM recovery CD or recovery partition
situation, you might consider running a Repair install of the XP OS
at this point in time in view of your other futile attempts to get
the system up & running. Unfortunately, since you mentioned "Dell"
in your last post it's conceivable that you do *not* have such an
XP OP installation CD that will allow you to undertake a Repair
install since all you might have is the so-called "Recovery" or
"Restore" disk that Dell generally provides with their machines.
And that media will ordinarily not provide for a Repair install of
the OS. But assuming you *do* have an XP OS installation CD that
allows you to undertake a Repair install, here's some info about
it... Undertaking a Repair install of the OS is a relatively
straightforward process. It would be roughly akin to making a fresh
install of the OS, but in nearly every case your existing programs
& user-created data would be retained. Notice I said "nearly".
While it would be a rather rare situation where data would be lost
or corrupted as a result of a failed Repair install, and as
unlikely as it may be, it *could* happen. So if there are any
programs and/or other data on your present
drive that are absolutely crucial to you and you could not tolerate
their loss, then I would strongly suggest that before undertaking
this Repair install operation that you first either make a "clone"
of your existing HDD (using a disk-imaging or disk-cloning program)
or, if that's not practical, install the HDD in another machine as
a secondary HDD so that you can pull off whatever data you want
onto some removable media, e.g., flash drive, CD, etc.

Again, it's a relatively rare event that a loss or corruption of
data will occur even when the Repair install is unsuccessful, but
it *can* happen. So I want you to be aware of this.

There are a number of websites that contain step-by-step
instructions for undertaking a Repair install. As I've indicated
it's not a difficult nor terribly time-consuming process. Again,
it's roughly similar to making a fresh install of the XP OS. If you
do a Google search on "XP repair install", you'll be pointed to
many of these sites. Here are a few...
http://www.michaelstevenstech.com/XP...install.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winx...exfullpage.htm
http://support.microsoft.com/default...b;en-us;315341
Assuming the Repair install is successful, you should use your A-V
program to immediately check out your PC for any virus infestation.
Hopefully you'll undertake the Repair install with an XP OS
installation CD that contains (a slipstreamed) SP3 so that it won't
be an onerous task to download/install *all* the MS critical
updates since SP3 was released. On the other hand if you undertake
the Repair install with a XP-SP2 installation CD you will have to
download/install *all* the MS critical updates since SP2 was
released, which *will* be an onerous task. Alternatively you could
install SP3 after the Repair install assuming the Repair install
has been successful. Anyway, give this some thought if you can't
get your system back to a functional state any other way and, of
course you have the requisite XP OS installation CD that allows you
to undertake a Repair install of the OS. Just one other thing...
It's conceivable (although it doesn't sound like it) that you're
dealing with some hardware-type problem here and not just a
corruption of the OS. Where a hardware-type problem is the culprit
in cases like the one you describe, it's usually the HDD that's
defective although it's entirely possible some other major
component of your system may be at the root of the problem you're
experiencing. In any event, it's possible (although again from your
description of the problem, unlikely) that you may be dealing with
a defective HDD so it probably would be wise at this point to check
out the HDD with a HDD diagnostic utility you can (usually)
download from the website of the disk's manufacturer. It's very
easy to use - the downloaded program allows you to create either as
a bootable floppy disk or bootable CD containing the HDD diagnostic
program. So give that some consideration as well. On the other hand
if the Dell hardware diagnostic program found no problem with the
HDD I suppose it's safe to assume there is no problem there. Anna

its in the windows
system folder and
you would simply
want to delete the
files inside it.

windows will rebuild
each file as time goes on.

its easier to simply delete
everything in it, instead of
trying to find which particular
prefetch may be targeting
the malware.
--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Sounds good. Remind me where I find the prefetch folder?

Thx.


" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message ...
perhaps, you might want
to search the disk and
also delete any files and
folders for those filenames.

also, you might want to
delete your prefetch folder.



"Bill H." wrote in message ...
Oh, yeah, I searched through the entire registry. Just that one key.

It is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill

ok, at this time create
a system restore point
to record this semi functional
state.

afterwards you may have to use
the find menu option in the registry
to locate all the keys with that file
name so you can delete
them.

it is likely that the file the
key is referencing, no longer
exists on the harddrive, hence
the registry nagging you about
that file.

in addition you might also want
to run:

http://onecare.live.com/site/en-US/a...leaner_why.htm

though the page above is
referring to the registry, the
button for full scan will also
sweep your disk for virus's.

so go ahead and run the
above after disabling your
installed a.v.'s first.

you only need one antiviral
running at any one time.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Update for this part of the thread.

Have been able to run in normal mode now for a couple of days, no problems, except for the persistent appearance of the regkey
that results in windows file not found error when it first boots (can't find Kroduk.dll). I just dismiss the box and windows
takes off from there.

Have installed all the windows and office updates, except have not gone to SP3 (the win cd I used for recovery console stuff is
SP2, so since I've been using that for help, such as installing any missing files in the dll cache, I've not wanted to move to
SP3).

The thing that seemed to help the most was running ComboFix, but I've been doing other things as well, and maybe it's been the
combination that's helped the most.

Have also updated many programs, and found that Acrobat Reader had an "old" auto downloader that they said could be a cause for
concern. Have Windows Defender, AVG (free version) and SpyBot now running on the system. Since I have windows auto update turned
off, I do get the warning about the system not being "protected."

--Bill



" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message ...
I'm leaning more on a incompatible or
corrupted driver, side since safe mode
functions and not normal mode.

it's reminiscent of having enable
battery backup in the power control
panel, whereas after a short while,
if not immediately the system shuts
down due to seeing zero battery charge.

however, there is no battery backup
connected.



"Anna" wrote in message ...

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which one and get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the computer reboots.

I've tried dianostic and selective startup, and neither work. All I can get is safe mode. System restore has been turned
off. Last known good config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not for very long before it reboots.")


"Anna" wrote in message ...
Bill:
Assuming your problem isn't hardware-related (which it might very well be based on your latest statement about the system auto
rebooting after the system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware (what makes you think "it's probably a virus or
trojan"?...)

So that it's *not* a problem due to malware and the various anti-malware recommendations suggested by other responders to your
query won't correct the problem...

It might be a good idea to undertake a Repair install of the XP OS on the basis that the problem involves a not-too-terribly
corrupted OS that is not malware-caused so that (hopefully) the Repair install will return the system to a bootable functional
state without the loss of any present data.

I don't know if you're familiar with the process of undertaking a Repair install of the OS or even whether you wish to pursue
this course of action. So if you want or need more info on the subject so indicate.
Anna


"Anna" wrote in message Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the OS as has been previously suggested to you? Or have you done
so and that too didn't "work"?
Anna


"Bill H." wrote in message ...
Thanks, Anna.
Latest:
I believe all traces of malware are now gone.
(SNIP)
I did a thorough hardware diag (Dell) and it found nothing wrong.
Tell me more about a repair install.
--Bill


Bill:
Assuming you have a non-OEM-branded XP OS installation CD at your disposal and not merely an OEM recovery CD or recovery
partition situation, you might consider running a Repair install of the XP OS at this point in time in view of your other futile
attempts to get the system up & running. Unfortunately, since you mentioned "Dell" in your last post it's conceivable that you
do *not* have such an XP OP installation CD that will allow you to undertake a Repair install since all you might have is the
so-called "Recovery" or "Restore" disk that Dell generally provides with their machines. And that media will ordinarily not
provide for a Repair install of the OS. But assuming you *do* have an XP OS installation CD that allows you to undertake a
Repair install, here's some info about it...

Undertaking a Repair install of the OS is a relatively straightforward process. It would be roughly akin to making a fresh
install of the OS, but in nearly every case your existing programs & user-created data would be retained. Notice I said
"nearly". While it would be a rather rare situation where data would be lost or corrupted as a result of a failed Repair
install, and as unlikely as it may be, it *could* happen.

So if there are any programs and/or other data on your present drive that are absolutely crucial to you and you could not
tolerate their loss, then I would strongly suggest that before undertaking this Repair install operation that you first either
make a "clone" of your existing HDD (using a disk-imaging or disk-cloning program) or, if that's not practical, install the HDD
in another machine as a secondary HDD so that you can pull off whatever data you want onto some removable media, e.g., flash
drive, CD, etc.

Again, it's a relatively rare event that a loss or corruption of data will occur even when the Repair install is unsuccessful,
but it *can* happen. So I want you to be aware of this.

There are a number of websites that contain step-by-step instructions for undertaking a Repair install. As I've indicated it's
not a difficult nor terribly time-consuming process. Again, it's roughly similar to making a fresh install of the XP OS. If you
do a Google search on "XP repair install", you'll be pointed to many of these sites. Here are a few...
http://www.michaelstevenstech.com/XP...install.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winx...exfullpage.htm
http://support.microsoft.com/default...b;en-us;315341

Assuming the Repair install is successful, you should use your A-V program to immediately check out your PC for any virus
infestation. Hopefully you'll undertake the Repair install with an XP OS installation CD that contains (a slipstreamed) SP3 so
that it won't be an onerous task to download/install *all* the MS critical updates since SP3 was released. On the other hand if
you undertake the Repair install with a XP-SP2 installation CD you will have to download/install *all* the MS critical updates
since SP2 was released, which *will* be an onerous task. Alternatively you could install SP3 after the Repair install assuming
the Repair install has been successful. Anyway, give this some thought if you can't get your system back to a functional state
any other way and, of course you have the requisite XP OS installation CD that allows you to undertake a Repair install of the
OS.

Just one other thing...
It's conceivable (although it doesn't sound like it) that you're dealing with some hardware-type problem here and not just a
corruption of the OS. Where a hardware-type problem is the culprit in cases like the one you describe, it's usually the HDD
that's defective although it's entirely possible some other major component of your system may be at the root of the problem
you're experiencing. In any event, it's possible (although again from your description of the problem, unlikely) that you may be
dealing with a defective HDD so it probably would be wise at this point to check out the HDD with a HDD diagnostic utility you
can (usually) download from the website of the disk's manufacturer. It's very easy to use - the downloaded program allows you to
create either as a bootable floppy disk or bootable CD containing the HDD diagnostic program. So give that some consideration as
well. On the other hand if the Dell hardware diagnostic program found no problem with the HDD I suppose it's safe to assume
there is no problem there.
Anna

cleaned out prefetch, and removed the registry entry before rebooting.

Didn't help the Kroduk.dll wanting to start...

--Bill


" db.·.. ))) ·` .. ." databaseben at hotmail wrote in message
...
its in the windows
system folder and
you would simply
want to delete the
files inside it.

windows will rebuild
each file as time goes on.

its easier to simply delete
everything in it, instead of
trying to find which particular
prefetch may be targeting
the malware.
--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message
...
Sounds good. Remind me where I find the prefetch folder?

Thx.


" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message
...
perhaps, you might want
to search the disk and
also delete any files and
folders for those filenames.

also, you might want to
delete your prefetch folder.



"Bill H." wrote in message
...
Oh, yeah, I searched through the entire registry. Just that one key.

It is under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill

ok, so now click on
startrunmsconfig

and disable all your
startups and then go
to the services tab,
hide all microsoft and
disable what remains.

perhaps, you have done
the above already.

unfortunately, i haven't been
following the thread.

in any case reboot and see
what occurs.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
cleaned out prefetch, and removed the registry entry before rebooting.

Didn't help the Kroduk.dll wanting to start...

--Bill


" db.·.. ))) ·` .. ." databaseben at hotmail wrote in message ...
its in the windows
system folder and
you would simply
want to delete the
files inside it.

windows will rebuild
each file as time goes on.

its easier to simply delete
everything in it, instead of
trying to find which particular
prefetch may be targeting
the malware.
--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Sounds good. Remind me where I find the prefetch folder?

Thx.


" db ·´¯`·.¸. .)))º." databaseben via hotmail wrote in message ...
perhaps, you might want
to search the disk and
also delete any files and
folders for those filenames.

also, you might want to
delete your prefetch folder.



"Bill H." wrote in message ...
Oh, yeah, I searched through the entire registry. Just that one key.

It is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill

Yes, I've done that a few times, generally using the Diagnostic startup
option, which turns of even more.

But I've not tried recently (since getting rid of the other malware and
installing updates, spybot, AVG, etc.), so here goes (after removing the
entry from the registry)...

Hm. It's not coming back. OK, let's start adding back in stuff to run.

Still not coming back, and msconfig is set to normal startup now. Several
reboots and power cycles later, it's still gone.

Now that's a mystery!

Hope I'm not celebrating too early (like, will it come back after nn number
of reboots/power cycles??)

--Bill

well, it's not always
that the help we provide
is in real time.

the statement that sends
shivers down our timbers
is:

"OK, let's start adding back in stuff to run"

what needs to occur is
know exactly what the
stuff is.

what if one of the "stuffs"
is the culprit that is needing
that obscure file.

what if you discover one of
the stuffs which you think
is safe is no longer working
and you reinstall the problem?

perhaps, all your stuffs need
to be uninstalled totally.

maybe you can provide us
with a listing of these stuffs
so that we can help determine
their importance.

ps: make a restore point at
this time.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Yes, I've done that a few times, generally using the Diagnostic startup option, which turns of even more.

But I've not tried recently (since getting rid of the other malware and installing updates, spybot, AVG, etc.), so here goes
(after removing the entry from the registry)...

Hm. It's not coming back. OK, let's start adding back in stuff to run.

Still not coming back, and msconfig is set to normal startup now. Several reboots and power cycles later, it's still gone.

Now that's a mystery!

Hope I'm not celebrating too early (like, will it come back after nn number of reboots/power cycles??)

--Bill

Yes...

I have made a few restore points, and at this point, I have returned the
computer to its owner, and we'll see how long it keeps working.

The last hurdle was that "something" was putting an entry back into the
registry that wanted to run Kruduk.dll on win logon.

The Kroduk.dll file is not there, and nothing put it back into the registry
after many reboots, power cycles, etc.

So, for now, we'll see...


" db.·.. ))) ·` .. ." databaseben at hotmail wrote in message
...
well, it's not always
that the help we provide
is in real time.

the statement that sends
shivers down our timbers
is:

"OK, let's start adding back in stuff to run"

what needs to occur is
know exactly what the
stuff is.

what if one of the "stuffs"
is the culprit that is needing
that obscure file.

what if you discover one of
the stuffs which you think
is safe is no longer working
and you reinstall the problem?

perhaps, all your stuffs need
to be uninstalled totally.

maybe you can provide us
with a listing of these stuffs
so that we can help determine
their importance.

ps: make a restore point at
this time.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message
...
Yes, I've done that a few times, generally using the Diagnostic startup
option, which turns of even more.

But I've not tried recently (since getting rid of the other malware and
installing updates, spybot, AVG, etc.), so here goes (after removing the
entry from the registry)...

Hm. It's not coming back. OK, let's start adding back in stuff to run.

Still not coming back, and msconfig is set to normal startup now.
Several reboots and power cycles later, it's still gone.

Now that's a mystery!

Hope I'm not celebrating too early (like, will it come back after nn
number of reboots/power cycles??)

--Bill

Yes...

I have made a few restore points, and at this point, I have returned the
computer to its owner, and we'll see how long it keeps working.

The last hurdle was that "something" was putting an entry back into the
registry that wanted to run Kruduk.dll on win logon.

The Kroduk.dll file is not there, and nothing put it back into the registry
after many reboots, power cycles, etc.

So, for now, we'll see...


" db.·.. ))) ·` .. ." databaseben at hotmail wrote in message
...
well, it's not always
that the help we provide
is in real time.

the statement that sends
shivers down our timbers
is:

"OK, let's start adding back in stuff to run"

what needs to occur is
know exactly what the
stuff is.

what if one of the "stuffs"
is the culprit that is needing
that obscure file.

what if you discover one of
the stuffs which you think
is safe is no longer working
and you reinstall the problem?

perhaps, all your stuffs need
to be uninstalled totally.

maybe you can provide us
with a listing of these stuffs
so that we can help determine
their importance.

ps: make a restore point at
this time.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message
...
Yes, I've done that a few times, generally using the Diagnostic startup
option, which turns of even more.

But I've not tried recently (since getting rid of the other malware and
installing updates, spybot, AVG, etc.), so here goes (after removing the
entry from the registry)...

Hm. It's not coming back. OK, let's start adding back in stuff to run.

Still not coming back, and msconfig is set to normal startup now.
Several reboots and power cycles later, it's still gone.

Now that's a mystery!

Hope I'm not celebrating too early (like, will it come back after nn
number of reboots/power cycles??)

--Bill

ok,

case of the
XP won't start anymore
is closed...

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Yes...

I have made a few restore points, and at this point, I have returned the computer to its owner, and we'll see how long it keeps
working.

The last hurdle was that "something" was putting an entry back into the registry that wanted to run Kruduk.dll on win logon.

The Kroduk.dll file is not there, and nothing put it back into the registry after many reboots, power cycles, etc.

So, for now, we'll see...


" db.·.. ))) ·` .. ." databaseben at hotmail wrote in message ...
well, it's not always
that the help we provide
is in real time.

the statement that sends
shivers down our timbers
is:

"OK, let's start adding back in stuff to run"

what needs to occur is
know exactly what the
stuff is.

what if one of the "stuffs"
is the culprit that is needing
that obscure file.

what if you discover one of
the stuffs which you think
is safe is no longer working
and you reinstall the problem?

perhaps, all your stuffs need
to be uninstalled totally.

maybe you can provide us
with a listing of these stuffs
so that we can help determine
their importance.

ps: make a restore point at
this time.

--

db·´¯`·...¸)))º
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

"Bill H." wrote in message ...
Yes, I've done that a few times, generally using the Diagnostic startup option, which turns of even more.

But I've not tried recently (since getting rid of the other malware and installing updates, spybot, AVG, etc.), so here goes
(after removing the entry from the registry)...

Hm. It's not coming back. OK, let's start adding back in stuff to run.

Still not coming back, and msconfig is set to normal startup now. Several reboots and power cycles later, it's still gone.

Now that's a mystery!

Hope I'm not celebrating too early (like, will it come back after nn number of reboots/power cycles??)

--Bill

Hey, my stupid cousin went and got a virus on her pc and I had to clean it,
again. This time when I tried to re-install WIndows XP home all I got was
this black screen that says, "NTLDR is missing". What can I do to get
anywhere near the BIOS screen to start in another mode? Oh, I forgot to
mention that the pc was already cleaned prior to being given to her and the
original O/S was Windows Pro. I used Drive Erase Pro to get rid of everything
including the creepy virus.

"Bill H." wrote:

When I restart in safe mode, programs won't install. They say that the MS
installer is missing/corrupt.

AVG likewise won't run in safe mode.

I've been able to get the computer to run in full normal mode, but not for
very long before it reboots.

I get msgs about WinWeb Security (and if I wait long enough, msg that are
misspelled and reference WInWeb Securite). I found info about WinWeb
Security 2008, but the manual removal instructions don't work in that what
it tells me to look for, is not there.

The computer is very slow, and I can't keep it running in normal mode long
enough to install Windows Defender. I did get Ad-Aware installed and can
run it in normal mode, but the computer will reboot before Ad-Aware can
finish even the quick (smart) scan.




"Mick Murphy" wrote in message
...
Do this in Safe Mode with Networking. All info below.
If you have not managed to install AVG, and have no other AV on your
computer, install AVAST.
And also download, install, update and scan your system with Malwarebytes
and Spybot Search & destroy.

Avast Anti-Virus is XP and Vista compatible (32bit and 64bit Versions),
FREE, auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at
any
one time..
Conflicts may occur if you have more than 1(one).

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important Safe Mode
If you happen to find a problem that you can't uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP
arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or
updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install,
update
and scan from there.

--
Mad Mike


"Bill H." wrote:

Yes, it's probably a virus or trojan, but how to find out which one and
get
rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can
get
is safe mode. System restore has been turned off. Last known good
config
doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender,
Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.


--
Bill

I see it has been months since you addressed this issue. Here's my problem I
cannot start in Safe Mode, I cannot start in Last know Configuration. My
computer just keeps looping to the boot sequence. I had just gone to Restore
because my wife's icons had all disappeared (mine were still visible). Once
the computer went to re-bot with restore that's when windows quit starting.
The system goes to the first "Windows starting" screen the black one then the
screen flashes and goes back to tbooting sequence. Youhave no idea the
trouble I am in over this. Any help will be appreciated. Thank you
--
coolcreek not smart enough to be a geek, too old and broken to be a jock yet
still I do not run my life with a clock


"Mick Murphy" wrote:

Do this in Safe Mode with Networking. All info below.
If you have not managed to install AVG, and have no other AV on your
computer, install AVAST.
And also download, install, update and scan your system with Malwarebytes
and Spybot Search & destroy.

Avast Anti-Virus is XP and Vista compatible (32bit and 64bit Versions),
FREE, auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at any
one time..
Conflicts may occur if you have more than 1(one).

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.

--
Mad Mike


"Bill H." wrote:

Yes, it's probably a virus or trojan, but how to find out which one and get
rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can get
is safe mode. System restore has been turned off. Last known good config
doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows Defender,
Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.


--
Bill