Re: XP File System, CoolWebSearch Addware and hidden file

From: DBADave (DBADave_at_discussions.microsoft.com)
Date: 07/13/04 

Date: Mon, 12 Jul 2004 20:04:02 -0700

Unfortunately, in this case it is not. I can reset the Administrator password and login interactively with it in XP, but when I reboot and run Recovery Console, it indicates that the password is incorrect. In checking with IBM tech support, they said that Recovery Console does not work with imaged PCs as the RC Admin password is the original pw used when installing Windows.

I can fix my problem, if I can unhide this comlnm.dll file in windows\system32, but I can't figure out how (again, the file is even hidden to attrib/etc, even though it appears in the registry, taskman and in the disk's FAT table.

If anyone knows how I can delete this file, without having to completely wipe out my hard drive and reinstall the OS, please let me know.

Thanks,
Dave

"Dave Patrick" wrote:

> The recovery console administrator password is the current local
> administrator password.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
>
> "DBADave" wrote:
> |I somehow got the CoolWebSearch addware/spyware on my fully patched WinXP
> Professional install. I have tried all of the removal tools (ie ad-aware,
> cwshredder, spybot, etc), all detect it and remove most of it's components,
> but the single hidden loader DLL (c:\windows\system32\comlnm.dll) remains
> and since it is hidden, I cant delete it. It is hidden even if you attempt
> to view all hidden files and the attrib command can't locate the file,
> however in viewing running processes and the disk's partition table, I see
> the file there, I just cant delete it using standard methods. I know I
> could run the Windows Recovery Console, however I have a preloaded IBM
> computer, which IBM loads in mass quantities and sets a random initial
> Administrator password, so even if I reset the Administrator password, I
> cant run Recovery Console as I don't know the initial Administrator
> password. IBM has suggested that I delete my partiton and reinstall
> everything from scratch.
> |
> | HELP!! How can I delete this file?
> |
> | Thanks,
> | Dave
>
>
>

Relevant Pages

  • Recovery console, cant login!
    ... recovery console i cant. ... recovery console is installed on my hard drive, ... administrator password and it wont let me login, ... in to recovery console remember) to install windows xp?? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP File System, CoolWebSearch Addware and hidden file
    ... The recovery console administrator password is the current local ... Dave Patrick ....Please no email replies - reply in newsgroup. ... could run the Windows Recovery Console, however I have a preloaded IBM ...
    (microsoft.public.win2000.file_system)
  • Re: XP Home Recovery Console Password Problem
    ... >> when I can't boot from the hard drive). ... >> When accessing the Recovery Console option during a boot from the XP ... I'm not always asked for the Administrator Password, which seems odd, ... When I access the Users applet via Control Panel, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Home Recovery Console Password Problem
    ... Boot to Safe Mode. ... > When accessing the Recovery Console option during a boot from the XP ... I'm not always asked for the Administrator Password, which seems odd, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: No boot and no administrator password!
    ... Linux-based bootable floppy to the rescue! ... I was able to change my recovery console from ... otherwise valid desktop administrator password. ... >> I didn't make the rescue disks, ...
    (microsoft.public.windowsxp.accessibility)