PLEASE HELP... Can't startup my computer after running Norton Power Eraser

Discussion in 'Malware Help (A Specialist Will Reply)' started by WiLOz, Apr 29, 2012.

  1. WiLOz

    WiLOz Private E-2

    So i believe i got a virus and i ran Norton 360 virus scan but it said it did not find anything but the way my computer was reacting when it start up (going to startup repair and scanning and saying it fixed the errors) i knew there was still a major issue but at this point atleast i was still able to start my computer and get into windows.. I was told to try and use Norton Power Eraser and that it might help.. So after i ran NPE it found the errors that norton 360 didn't find and it was supposedly going to fix them.. But after it finished and the computer restarted i was unable to get into windows... it would go to startup repair and try to scan and fix the issue but at this point now startup repair would not even work.. i downloaded the Norton rescue boot disk and tried to undo the actions NPE made.. So after i did that it seems even worse now because it still doesn't startup and when it trys to now theres just a dash flashing on the top corner of the screen.. I'm praying someone here can help me and get my computer to start again without losing all my files, pictures and videos i have.. it will be heartbreaking if i lose the thousands of pics and vids i have... i just don't understand why when this program was supposed to help me fix my computer that it made it worse then it already was....
     
  2. thisisu

    thisisu Malware Consultant

    Hello and welcome to Major Geeks :)

    Try the following:

    http://img827.imageshack.us/img827/1263/frst.gif For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
    For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    To enter System Recovery Options by using Windows installation disc:

    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.
    On the System Recovery Options menu you will get the following options:
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    • Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)
     
  3. WiLOz

    WiLOz Private E-2

    Thanks for the reply.. Here is the attachment I hope that it helps me...



    -WiLOz-
     

    Attached Files:

  4. thisisu

    thisisu Malware Consultant

    Try to reboot normally after running this fix.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Attached to this message is fixlist.txt
    • Save fixlist.txt to your flash drive.
    • You should now have both fixlist.txt and FRST.exe on your flash drive.

    Now re-enter System Recovery Options.
    Run FRST and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt).
    Please attach this to your next message. (How to attach)

    Now attempt to boot normally.
     

    Attached Files:

  5. WiLOz

    WiLOz Private E-2

    Here is the Fixlog.txt.. i was still unable to boot up
     

    Attached Files:

  6. thisisu

    thisisu Malware Consultant

    Some of the commands did not execute properly.

    Can you try the same fix except this time download and use FRST64.exe, not FRST.exe

    There are some discrepancies in your logs on whether you are running 64bit or 32bit OS.
    Code:
    Windows 7 Home Premium   ([COLOR="Red"]X86[/COLOR]) OS Language: English(US) 
    2012-04-28 02:53 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\[COLOR="Purple"]SysWOW64[/COLOR]
    2012-04-01 16:05 - 2012-04-01 16:05 - 0000000 ____D C:\[COLOR="Purple"]Program Files (x86)[/COLOR]
     
  7. WiLOz

    WiLOz Private E-2

    I just tried to use frst64 and it did not work. It said that it is not compatible with the version of windows i am running.. Also I am unable to press F8 to get into the system recovery tool to open command prompt I have to use the norton rescue boot disk and go from there. As soon as the computer try to startup it goes right to the dash blinking in the corner
     
  8. thisisu

    thisisu Malware Consultant

    Ok that explains why some of the commands did not execute.

    Do you have your Windows 7 DVD? If not, I will try to find a workaround for what needs to be done.
     
  9. WiLOz

    WiLOz Private E-2

    No unfortunately the laptop did not come with one
     
  10. thisisu

    thisisu Malware Consultant

    I attached a .zip to this post.
    Extract the BootRec.exe file from this archive and place it directly on your flash drive in the same location where FRST.exe / FRST64.exe are at.

    Boot back into Norton rescue disk and get into the Command prompt.
    Identify your flash drive letter again by using the Notepad trick.

    Once you have found your flash drive letter, type in the these two commands, pressing ENTER after each one:

    • i:\bootrec /fixmbr
    • i:\bootrec /fixboot

    Note: This assumes that i: is still your flash drive letter. It can change so always double-check. Adjust accordingly if it is not i:

    Let me know the output of both commands. If both were successful, try rebooting normally.
     

    Attached Files:

  11. WiLOz

    WiLOz Private E-2

    this is also saying that it is not compatible with my version of windows...
     
  12. thisisu

    thisisu Malware Consultant

    I see.

    Which options does the Norton Rescue Disk have?
     
  13. WiLOz

    WiLOz Private E-2

    Its the Norton Bootable Recovery Tool which has 2 options plus a link for the command prompt

    1- Norton Power Eraser Recovery Scan
    After i first ran NPE it got worse, i wasn't able to get into startup repair so when i downloaded the norton bootable recovery tool i was able to undo the changes but that didn't work
    2- Norton Advanced Recovery Scan
    I ran this scan and It didn't find anything at all
     
  14. thisisu

    thisisu Malware Consultant

    I need to gather a bit more information, from the Command Prompt, type in this command and press ENTER

    • wmic os get osarchitecture

    Let me know what output you receive
     
  15. WiLOz

    WiLOz Private E-2

    i actually tried that earlier to find out if i was running 32bit or 64bit and again when i tried now it says

    ERROR:
    Description = Invalid class string
     
  16. WiLOz

    WiLOz Private E-2

    If this helps there were 2 files that Norton Power Eraser said was infected and deleted which then made my computer not be able to boot

    they were

    1- PhysicalDrive0
    2-photoshop.exe

    I had photoshop on my computer for awhile now and it never seemed like it had an issue
     
  17. thisisu

    thisisu Malware Consultant

    It's the PhysicalDrive0 which had trouble. We see this often when people use tools like NPE. They mean well but sometimes the infection is not completely removed which causes the boot issue.

    I have attached another fixlist.txt. Copy this to your flash drive, replace the previous version of it.

    http://img827.imageshack.us/img827/1263/frst.gif Go back into Command Prompt and run FRST.exe and then Fix.

    Attach the latest fixlog.txt.

    Attempt to boot normally.
     

    Attached Files:

  18. WiLOz

    WiLOz Private E-2

    dont think it worked... here is the log
     

    Attached Files:

  19. thisisu

    thisisu Malware Consultant

    Do you still have bootrec.exe on your flash drive?
     
  20. WiLOz

    WiLOz Private E-2

    yea i haven't deleted it
     
  21. thisisu

    thisisu Malware Consultant

    Which drive letter does your Windows partition appear as when you are in Command Prompt? C:? D:? E:?
     
  22. WiLOz

    WiLOz Private E-2

    it seems like it switches around but right now its D
     
  23. thisisu

    thisisu Malware Consultant

    Ok I will try to explain what needs to be done. All we want to do right now is copy bootrec.exe into the WINDOWS folder. For example: D:\WINDOWS

    Replace your flash drive letter and WINDOWS drive letter accordingly for this command. When it says 1 file(s) copied, then you know it worked properly.

    • copy /y i:\bootrec.exe d:\windows

    Let me know when you have done this successfully or if you are having trouble.
     
  24. WiLOz

    WiLOz Private E-2

    the bootrec before was saying that it was incompatible with my system.. will that be an issue?
     
  25. thisisu

    thisisu Malware Consultant

    Quite possibly yes, I think you have a 64bit OS so I attached the 64bit version of bootrec.exe.

    If you still have compatibility issues I will provide the 32bit bootrec.exe
     
  26. WiLOz

    WiLOz Private E-2

    the frst64 and the bootrec file you attached both said incompatible when i tried to use them... though right now it says the system cannot find the file specified
     
  27. thisisu

    thisisu Malware Consultant

    Is bootrec.exe on the root of the flash drive?
     
  28. WiLOz

    WiLOz Private E-2

    ok it wasn't but i fixed it and it copied
     
  29. thisisu

    thisisu Malware Consultant

    Alright, then try these two commands:

    • bootrec /fixmbr
    • bootrec /fixboot

    If still a compatibility issue, continue with the below:

    Attached is the 32-bit (x86) version of Bootrec.exe

    Let me know if you still get compatibility issues with this one.

    Remember to try the instructions provided earlier with this version of Bootrec.exe
     

    Attached Files:

  30. WiLOz

    WiLOz Private E-2

    ok so now the 32bit worked but now its saying the program won't start because wer.dll is missing
     
  31. thisisu

    thisisu Malware Consultant

    Heh, ok copy the x86 version of Bootrec.exe into this folder c:\Windows\system32
    Delete the bootrec.exe that you previously copied in D:\Windows (the x64 bit version of bootrec.exe)

    then try:

    • bootrec /fixmbr
    • bootrec /fixboot

    Let me know the output of each this time.
     
  32. WiLOz

    WiLOz Private E-2

    yea thats what i did and thats when it said that error code for both of the commands "The program can't start because wer.dll is missing from your computer. Try reinstalling the program to fix this problem" ...

    It kills me to say this but i think im going to have to give up for now.. Will you be available later on tonight? as much as im dying to get this working i have to try and get some sleep before i have to be at work in a few hours... i really appreciate everything you have done so far to help me though..
     
  33. thisisu

    thisisu Malware Consultant

    Yes.

    No problem.
     
  34. WiLOz

    WiLOz Private E-2

    Are you still around.. Ready for round 2?
     
  35. thisisu

    thisisu Malware Consultant

    Hello,

    I am out of ideas without you being able to boot from a full recovery disc. Unfortunately Microsoft not allow servers to host this type of disc for free.

    If you have another Windows 7 computer, you may be able to create your own following these directions: How to Create a Windows 7 System Repair Disc

    Otherwise, there are sites like the following which host the downloads for a ~$10 fee. High-Speed Repair CD Downloads

    If you are able to get one of these, you would go into the Command Prompt after booting from the CD and type the following commands:

    bootrec /fixmbr
    bootrec /fixboot

    If you are still unable to boot after that, let me know and I will be able to assist you further but provide details on what type of boot issue you receive.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds