neilm

Guys

This one needs a real nerd, so if you are that nerd, speak up.

Got a machine that had a Trojan on it, AVG removed it, but its screwed the OS, probably because it was tied into winlogon or something like that.

It wont boot in safe mode and it wont do a last known good.


Its an OEM Copy of XP Home so the CD that came with the machine has a recovery option on it, but I fear it will blitz the machine and all my friends data will be lost.


What I need to know is, is there a way of finding out what drivers are loaded and in what order, when you boot Safe Mode it runs through loads, as usual, loads MUP.SYS and then another driver JGOGO.sys and then it re-boots.

So whatever it loads after the JGOGO.sys is the potential problem.

I currently have the drive in an external caddy so can look at it and it all looks fine, it virus scans clean.

I've even done a manual system restore by moving the files from the Config folder and replacing them with copys from the restore point directories, no joy.

Any help greatly appreciated, I dont think I can take much more googlin

BM08

Normally if i stumble upon a problem that cant be sorted in an evening then ill back up my files and reinstall the OS, i understand sometimes you cant but if at all possible its sometimes quicker/easier to do that.

I know that didnt help but hope you get it sorted

collierm

Why not just take an image backup of the drive now you have it in a caddy. Flatten the drive, rebuild it. Then you can selectively copy info you need out of the image backup rather than blanket copy everything and risk putting a virus back on it.

S1

Have you tried a second stage repair using the XP disc? Stick the disc in and boot from it, it will ask if you want to run a repair, say no and take the option to install the OS again. next step checks the disks for previous installs and will find the XP OS, it will then give you the option to repair current OS.

neilm

I know what you are saying guys but there is 15gb of user data I can see in the obvious places but if he has stuff stored elsewhere there is a risk of loosing it if the drive is flattened and the OS rebuilt.

The solution will be to replace the file(s) that AVG removed with clean copies from the installation CD or another live machine.

neilm

Yep, this is an OEM Recovery CD, it doesnt give you the repair option or the recovery console option either.

What it appears to do is install a second copy in windows.0 directory, but I didnt want to go too far with it incase it blitzed the My Documents folders.

Ginge

http://www.mytechguide.com/188/syste...s-and-sptdsys/

This of any help to you ?

Ginge

neilm

No mate, thanks anyway.

Ian Griffiths

I would be getting the data off and reinstalling it. Easier and faster.

Ginge

Wow you did all of that really quick

Ginge

Eagle

iTrader: (2)

http://www.techsupportforum.com/micr...jgogo-sys.html
any use ?

neilm

15gb off a USB2 caddy ?

Quicker than copying a few files.

Hmmmmmmm

Really ?

And it requires 15gb of free space somewhere else to put it all.


Hence me asking for a proper nerd who knows the ins and outs of the boot procedure of XP so I can find out what its failing on and tackle the actual problem, rather than just give up and format. If I wanted that kind of thing I'd take it to a local computer shop or the Tech Guys at PCWorld.

neilm

I'd already done something very similar earlier in the day and it didnt work

neilm

Tried that one Eagle, thanks anyway, been googlin like a 13 year old boy looking for porn pics.

Roscco

Any idea on the motherboard ?

This problem is inherent on The Asus P5B series.

Freezes on
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS\System 32\DRIVERS\JGOGO.sys

As for a fix (if this is the problem)
Simple fix for this is to ENABLE ACPI in the Bios,

1. Press Del at startup
2. BIOS Menu Loads up
3. POWER Tab
4. Set 'ACPI APIC Support' = ENABLED
5. Save and Exit

Failing this, if it's an SATA equiped PC, try re-routing the SATA cables,and disconnect the CD/DVD.

Out of ideas.

tarry500

If its the virus that changes the winlogon bit in XP that does not let you in past the password bit therefore not letting you get any further then i had this, took a long search but found the long winded solution. If this is the one you have then i will try and help but am at my girlfriends and my pc which it happened to is 80 miles away with the solution.

Adrian

I tend to use ERD 2005 (ISO is downloadable from Micro$haft). Then run fixes in that.

DanRSturbo

If you've tried the steps to repair it from computer discussion, and that don't work put the drive in another pc as a slave, copy the data off and then format the drive. You still have a chance that the virus is still there and could effectively be copied over. Best to take it on the chin and have 2 drives in the PC, one for OS and one for data.

tarry500

or just do what i did

cjwood555

Have you tried disabling LBA32 in the bios? Can sometimes cause problems though unlikely if the system worked fine before I suppose....

Otherwise, buy him a new HDD, install the system clean on that, stick the old disk in as a 2nd drive and copy the data across. Simples.

tarry500

Please try this as if its the same thing i had you wont fix it unless you do a clean install and no-one wants that.

http://www.aitechsolutions.net/winxpnoboot.html

neilm

Any more for any more ?

Does anyone really know the ins and outs of the XP boot process and what files it loads after the splash screen but before the acutal windows desk top appears.

JohnnyB

Just use ERD comander mate.

Ash170990

+1

Or if that dont work make a XP live CD (follow these instructions http://www.instantfundas.com/2007/11...p-live-cd.html) but you will need another PC to do that. but you can do quite alot with it.... its just live running XP from a CD so you can scan for anymore virues or run a check disk ect.

Or do a repair install with your XP home Cd.
http://www.microsoft.com/windowsxp/u...ps/doug92.mspx

ballin

iTrader: (1)

Originally Posted by Ian Griffiths
I would be getting the data off and reinstalling it. Easier and faster

format is what any tech would do...of course its quicker, look how long you have spent trying to fix it.

tarry500

Ho hum, never mind

cjwood555

A new hard drive off ebay would've been £30 inc postage - I'd imagine you've spent far more than £30 worth of your time trying to fix it the hard way?