C:\CI.dll Corrupt file crash - help!

Page 1 of 3 123 LastLast

  1. Posts : 15
    Windows 7 64bit
       #1

    C:\CI.dll Corrupt file crash - help!


    Hi guys,

    this morning while torrenting some stuff I got a virus (I immagine) that instantly restarted my computer and I got an unusual "loading files" message ... it then proceeded into an endless loop of startup repair that fails... and then I have to shutdown and it all starts again.

    When i check the results of the failed scan i discovered that the corrupt file is
    C:\CI.dll
    So I've been searching all over for something to solve it, but unluckily I don't have a Win7 CD to install (came with the computer already installed) and I haven't backed up any of my files

    I've already tried various things such as disabling restart from the advanced boot menu, the Sfc /scannow, infinite loop repair, System restore to an earlier point, system image recovery, windows memory diagnostics, chkdsk, various command prompt methods...

    I'm about to try to use a pre boot avira antivir cd, to see if that works.
    Basically I want to reinstall windows without loosing any of my files (Untill now the only decent method i've found to give a try is taking out the HD and putting it on another computer to copy the files then reinstall Windows 7 from System recovery Options) ...what do you think I should do?

    Some other questions:
    Can i move my HD to a mac? I have no other computers accessible right now...
    The Reinstall Windows option from recovery tools, will it delete all of my files?

    The affected computer is an MSI GX740
    - Windows 7 64bit
    - Intel i5 430 2.23ghz Cpu
    - 4GB Ram
    - 320GB hard drive
    - Ati Radeon HD 5870 Gpu

    I'll give further specs if needed.
    Thanks in advance :)
    Last edited by Rakdos; 15 May 2011 at 12:31.
      My Computer


  2. Posts : 15
    Windows 7 64bit
    Thread Starter
       #2

    Anyone :s ?
      My Computer

  3.   My Computers


  4. Posts : 15
    Windows 7 64bit
    Thread Starter
       #4

    Hi SIW2,

    I've already read all of those topics, tried the answers you and others provided, but none of them have worked, as i've written in my original post. (The problem isnt updates either)
    I'll check out the Macrium reflect and puppy linux now..
      My Computer


  5. Posts : 16,129
    7 X64
       #5

    Did you manage to run avira and get it to clean up the infection?

    First try replacing the corrupt ci.dll - using a boot cd of some kind.

    If that doesn't do it:

    If you are able to start your built in oem recovery program - there should be an option there which allows you to copy important data to another location - before it reimages the pc.

    The reimaging will overwrite at least the windows partition.
      My Computers


  6. Posts : 15
    Windows 7 64bit
    Thread Starter
       #6

    I have managed successfully to boot up with Avira, and to scan, but i met some other issues, where it results in an [archive scan abort] on the trojan, and doesnt solve anything. Additionally, when I save the logs, and as instructed am told to restart, it wipes the logs and nothing changes.

    I just replaced the ci.dll file that i just downloaded, and it didnt change anything - still can't boot.

    I do have access to the System recovery options, the screen is like http://4.bp.blogspot.com/_8qMdy9GxQw...RE/s1600/8.jpg with an added Reinstall OS at the end as an additional option.

    What would you have me do exactly?
      My Computer


  7. Posts : 1
    Windows 7 64 bit
       #7

    Hi all,

    Don't mean to hijack this thread by any means, but my recent problems sound identical.

    Rakdos: have you tried hitting F8 when the machine starts and selecting 'disable driver signature enforcement'? I tried it in on a whim when nothing else would work and much to my surprise, my machine booted up perfectly.

    I too suspect that my problems stem from a virus, as malwarebytes and the other virus scans I ran caught a few things once I finally got it booted.

    However, once I ran those, I re-booted again and the startup repair loop was back. I had to choose 'disable driver signature enforcement' again. Once booted, I scanned for viruses and found nothing. I'm still getting google search redirects though, so I know it's not totally gone.

    Is it possible that even if the virus is eradicated, the ci.dll file (or whatever causes the startup repair loop) is still damaged? Any ideas on how to get the computer to boot normally again?
      My Computer


  8. Posts : 1
    windows 7 ultimate x64
       #8

    You have a Virus


    The process is pretty easy.
    Pull your hard drive and attach to a working computer via USB or other method.
    Download TDSSKiller.exe. from How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)?

    scan your system and remove the reported virus.

    Reattach your drive. boot and do a full system virus scan
      My Computer


  9. Posts : 6
    win7 64
       #9

    I had this happen yesterday and I am giving you the benefit of over 8 hours of time wasting. it was on a laptop so I did not have a windows disk, just a recovery partition. I did have a boot disk, though.

    Mine was definitely a trojan infection of the root files- as described above...

    System Restore will not work, nor will using an image, or even recovery disks.

    1 this is not due to a faulty ci.dll file. The Ci.dll will not work if other files are corrupt or missing. This is a red herring - replacing the ci.dll file will not help. If you try to boot the system with a boot disc you will find it tells you the ci.dll file on the Boot Disk is faulty!

    2 Forget about doing anything with command prompt (DOS) When I tried it the sfc /scan... commands failed every time and I could only navigate to X:\ It would not recognize any other drive. This is because the trojan affects the headers of the various disc drives.

    3 Some people recommend downloading iso versions of Avira, Trinity and other boot up virus killers. These will not work as most of them need an internet access to update once they are running and as your PC is almost bereft of life they can't get a connection!
    Avira did find the problem after over an hour of scanning, but could not fix it.

    If you have this problem, it is probably due to the rootkit Trojan as described above. if you have not downloaded anything from the net (or opened a compressed file - .rar etc) just prior to this happening, you might have a different cause - some people say this happens after critical updates from MS (!?)

    Luckily, I have a remote USB drive caddy case (£3 on ebay). I removed the SATA drive from the laptop and connected it to an XP machine and ran the software How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)?

    This did not seem to have an option to scan remote drives, only C, but it did report finding the trojan and by clicking on "cure" it removed it

    However, when I put it back in the laptop I got the looping Startup Repair again!.

    I removed all my files by using the caddy, replaced the drive in the laptop and did a Factory Reset.

    You may find a different virus killer may repair the root so you don't need a reset.
    On XP there was a DOS command - FIXBOOT. I don't think 7 has this but I may be wrong. I did not try this. it does the trick on XP. It might work after the Trojan has been removed.
    Last edited by fedupwith7; 11 Aug 2011 at 10:22.
      My Computer

  10.    #10

    All boot repair commands are automated in Win7 Startup Repair. The infinite Startup Repair loop should be repaired using the Win7 DVD Repair console or Repair CD because of likely System file corruption in built-in WinRE. System Repair Disc - Create

    To disinfect or clear of possibility of infection, you can first run Microsoft Standalone System Sweeper from boot using CD or flash stick, or best is Malwarebytes from Safe Mode if necessary.

    If BIOS has been infected you may need to reflash the BIOS.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:24.
Find Us