Windows XP virus help please
All this done over the phone!
Friend appeared to have one of those 'fraud' infections - this one Antimalware 2010 which showed 32 'infections'.
We ran mbam which collected 3.
I sent over Avast install, he ran a boot scan. It was deleting quite a few files he said. He didn't see the end (!).
Left with a bootup which had a rapid sequence of screens flashing up. OK, said I - repair install. First go (its a Dell) wanted iastor.sys and nicinstE.dll. Could not find them so by-passed. No boot. Next time, through CMOS changed the RAID setting, ran repair/install again. (It transpires he has no floppy drive so we cannot use F6). This time only nicinstE.dll called for (and bypassed). Now we can boot, but no exe files run - 'open with' etc. Got them to run by changing file security settings.
Try sfc via 'run' - 'cannot find rundll32.exe'. Try to expand same from CD using 'run' box 'cmd'. Cannot find rundll32.exe. As a far as I can see 'run' looks for the first cmd it can find, starting in the profile folder?? Next task willl be to see if there is a zero-byte cmd there. Since I assume he still is infected I left him to run a mbam scan in safe mode and then a 'normal' Avast scan. Waiting for news.
Any help on how to get rundll32.exe replaced appreciated. I have him 'off-line' at the moment and have tried all Google fixes, but am stuck with no access to the run box, so cannot look at reg etc. Can we do it via recovery/expand and will this fix the problem?