ua user clicked on windows defender 2010 to run  and her pc has infected.
she will not be able to boot the computer now.
i started the computer in safe mode and it stuck on atapi.sys stage.
how do i fix?
this is XP.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Your best bet is to remove the hard drive and connect it USB to another machine and run a scan on it. I have seen viruses attach themselves to sys files. Run AV, Malwarebytes scans on it and post results here.

You can also try repairing OS using CD.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
You then have the possiblity of infecting the good machine, if you get a copy of erd commander and boot off that then you will be able to do a system restore to before the virus got onto the system, this may work the other way would be to rebuild the machine.  With erd commander you will be able to recover data on the local machine if you do have to rebuild it
pdsmicroAuthor Commented:
where do i get this ERD comader?
i have ERD2003 which does not work with SATA.
Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

Ive used it on a sata machine but i was using the erd 2005 version
pdsmicroAuthor Commented:
2003 does not work on SATA, it has to be 2005 or above.
When starting in safe mode, do you get a prompt dealing with loading spd.sys file?
Answer no if you previously were answering yes or letting the boot fall throug (loading it) this is likely the issue that is preventing the system from booting.

As others pointed out, you may fair better if reinstalling the OS on the system will not lead to data loss.
i.e the user's data is in a roaming profile and redirected folders or on a share.
pdsmicroAuthor Commented:
Thank you all.
i did parale installation and backed all the data.
i reinstalled the OS .
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.