white screen & 'please wait while connection is restablished'

Hi,

I also have the virus with the withe screen when i startup.
it says: 'please wait while connection is restablished'

i tried the frst.exe but when i typ it in and press enter, my pc says:
Het subsysteem dat vereist is voor de ondersteuning van het type installatiekope, is niet aanwezig.

> there is no subsystem for what you want to do

what can i do now please?

thanx anyway
Martijn

 

Welcome to MajorGeeks, Martijn

There is a 32-bit (x86) version of the tool as well as a 64-bit (x64) version.
Make sure you are using the correct one.

http://img827.imageshack.us/img827/1263/frst.gif Please download Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

• Select Command Prompt
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
• Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

 

thanks for the fast answer,

i already tried to do that,
but my pc says there is no subsystem for what i want to do
i cant open the frst.exe file in command prompt

 

Do you know which operating system you are running and whether it is 32bit or 64bit?

 

32bit, window 7 is running on my pc now

i have both the install cd's 32bit and 64bit

tx for the help so far
grtz martijn

 

• Go back into System Recovery Options -> Command Prompt
• Type in this command and press ENTER:
  • wmic os get osarchitecture
• Let me know what it says.

 

OSArchitecture
64-bit

 

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ You must download and use FRST64.exe

 

i actually did try it with FRST64.exe

 

Did you download the 64bit version of the tool? Or did you just rename FRST.exe into FRST64.exe?

Please verify and let me know what troubles you are running into.

 

of course i downloaded the other one
im not such a noob

tx anyway

 

If neither FRST.exe or FRST64.exe work, then you may want to try these instructions: HERE

 

it worked fine,

after the kaspersky thing i ran combofix (see log)
after combofix i ran malwerebytes, it says nothing found (see log)
is my pc safe now?

tx so far!

 

Good job.
I'd like to run a couple more scans just to be sure the registry has been repaired as well.

http://img805.imageshack.us/img805/9659/rktigzy.gif Please download RogueKiller to your desktop.

Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
When it opens, press the Scan button
When it is finished, there will be a log on your desktop called: RKreport[1].txt
Attach RKreport[1].txt to your next message. (How to attach)

__

http://img707.imageshack.us/img707/6703/generalxpicon.gif Download SystemLook from one of the links below and save it to your desktop.
Download Mirror #1
Download Mirror #2

If you have a 64-bit system, please download the 64 bit version from here:
SystemLook (64-bit)

• Double-click SystemLook.exe to run it.
• Copy and Paste the content of the following code box into the main text-field:

Code:

[COLOR="DarkRed"]:dir[/COLOR]
c:\users\Gebruiker\AppData\Roaming
[COLOR="DarkRed"]:filefind[/COLOR]
Dickemoepse*

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan and a file entitled SystemLook.txt will be created on your desktop.
• Attach that file to your next message. (How to attach)

 

here they are

 

I have edited the above SystemLook search script.
Please refresh this browser page and scan using the text inside the code box.
Then attach the newest SystemLook.txt.

 

here you are

 

Thank you.

If there are no other problems, you can delete the C:\FRST folder at this time as well as any other tools I had you download. Although, we recommend that you keep Malwarebytes' Anti-Malware.

Be safe

 

tx alot,

what can i do now to protect my pc against other infections?
i think he is clean now, i want to hold it clean

 

You're welcome
Here you go: How to Protect yourself from malware!