Windows 7: STOP 0x7B and viruses

I've found (on a Vista 32 bit system at work) that there is a virus infection that will change the ACL's of a system in order to prevent booting.

I'm running SUBINACL in Windows PE Mode to (hopefully) reset the ACL's.

The registry is mounted - but I don't know if SUBINACL will find it. Since the registry is mounted in the HKLM key of the PE Mode, it's presumable that the commands will fix it.

Then I should be able to use normal fixes to enable booting without the STOP 0x7B

I'll report back with more details as things progress.

Ugh, how did you get that?

That one is nasty. Do keep us informed.

Still having issues with fixing the ACL
- SUBINACL didn't work
- Tried ICACLS *.* /reset /T /C - and dunno if it worked

Only way I've got to see if it's "fixed" is to run Startup Repair and let it fail - the "Details" of the failure will list "CorruptAcl"

This I will follow with interest........

It's looking like the culprit was atapi.sys (I have to check with the tech who discovered this to find out how).
Funny thing is that we used a different recovery CD and it fixed it without any further issues.
I'm able to boot into Windows and can remove the rest of the "crud" from the system.

Additional note - system has both Trend Micro and Norton antivirus installed

Thank you for the update. I am glad to hear you are well on your way to a clean system again.

Ugh!..............
Glad to hear things are [ almost] working again.....

Well, it's "sorta" working. I'm still not happy with it, but I didn't get to talk with the other tech today - and I don't work again until Monday.

What you are still "unhappy" with can wait........in the meantime enjoy your weekend.