Smart hdd virus

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by dogmoat, Aug 24, 2012.

  1. dogmoat

    dogmoat Private E-2

    It says "windows failed to start"
     
  2. thisisu

    thisisu Malware Consultant

    Enter System Recovery Options.
    Choose Startup Repair
    Let me know the results of what startup repair found / didn't find.
     
  3. dogmoat

    dogmoat Private E-2

    Startup Repair diagnosis and repair log
    Number of repair attempts: 1
    Session detatils
    system disk=\devisce\harddisk0
    windows directory=C:\windows
    autochk run=0
    Number of root causes=1

    Test performed:
    name: check for updates
    result: completed successfully. error code=0x0
    time taken=0ms

    test performed:
    name: system disk test
    result: completed successfully. error code =0x0
    time taken=0ms

    test performed
    Names disk failure diagnosis
    result: completed successfully. error code=0x0
    time taken=156ms

    test performed:
    name:disk metadata test
    result:completed successfully. error code=0x0
    time taken=46ms

    test performed:
    name: target os test
    result:completed successfully. error code=0x0
    time taken=172ms

    test performed:
    name Volume content check
    result:completed successfully. error code=0x0
    time taken=203ms

    test performed:
    name:boot manager diagnosis
    result: completed successfully. error code=0x0
    time taken=0x0

    test performed:
    name: system boot log diagnosis
    result:completed successfully. error code=0x0
    time taken=0ms

    test performed:
    name:event log diagnosis
    result:completed successfully. error code=0x0
    time taken=0ms

    test performed:
    name:internal state check
    result:completed successfully. error code=0x0
    time taken=47ms

    test performed:
    name:boot status test
    result: completed successfully. error code=0x0

    root cause found:
    boot status indicates that the os booted successfully
     
  4. thisisu

    thisisu Malware Consultant

    It seems as though it found something to repair.

    Try to boot normally.

    If that does not work, reenter Startup Repair and provide an updated repair log.
     
  5. dogmoat

    dogmoat Private E-2

    it did not boot up normally.
    I ran the startup repair and got the following msg:
    "startup repair cannot repair this computer automatically"
    problem details:
    problem signature
    problem event name: startuprepairoffline
    problem signature 01: 6.1.7600.16385
    problem signature 02: 6.1.7600.16385
    problem signature 03: unknown
    problem signature 04: 2120039
    problem signature 05: manualrepair
    problem signature 06: 4
    problem signature 07: nobootfailure
    os version: 6.1.7601.2.1.0.256.1
    lacale id: 1033
     
  6. thisisu

    thisisu Malware Consultant

    Delete your existing FRST.txt
    Then rescan with FRST and attach the latest log.
     
  7. dogmoat

    dogmoat Private E-2

    Before I do the FRST scan again; I need to mention that all of these scans are being performmed in Systems Recovery through the Recovery (14.65) partition.

    I cannot get into Systems Recovery through the OS (581.41) partition because it will not boot properly.

    Should I continue?

    I feel the only solution from here is to reload Windows.
     
  8. thisisu

    thisisu Malware Consultant

    You kind of lost me with your latest post.

    In order to run FRST, neither your 581.41GB partition nor your 14.65 partition needs to be in tact (or bootable)

    We are simply scanning from the flash drive only. In your case, the 29 GB flash drive. And it looks like you've been successful in doing that.
    Similar to how GParted is run from CD. FRST is run from Flash drive.

    Whenever you boot into Windows Recovery Options successfully, you should be seeing a screen similar to this first and foremost:

    [​IMG]

    and then you come to a screen like this:

    [​IMG]

    and from there you should be brought to here:

    [​IMG]

    Which you gives you the option to use Command Prompt. This is what you have done, right?

    That's how FRST is supposed to be run.

    I do not think this is a lost cause, we just need to make sure you are doing the instructions properly first.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds