Problem With Booting Up Following SuperAntiSpyware Scan

Discussion in 'Malware Help (A Specialist Will Reply)' started by musicgamer10, Jun 24, 2008.

  1. musicgamer10

    musicgamer10 Private E-2

    Hello I'm new to Major Geeks-

    Both my father and I had an issue with a virus known as "WinAntiviruspro". We didn't fall for the trick, and he completed the Major Geeks Spyware removal guide. However, I was running through it, and I got all the way to the part with SuperAntiSpyware before I ran into problems.
     
  2. musicgamer10

    musicgamer10 Private E-2

    Hello I'm new to Major Geeks-

    I recently had an issue with a virus known as "WinAntiviruspro". I didn't fall for the trick, and I began the Major Geeks Spyware removal guide. However, I was running through it (the XP version), and I got all the way to the part with SuperAntiSpyware before I ran into problems.

    The first time I scanned (making sure that all settings were set the way specified in the guide), the program found two threats, and scanned approximately 500 files before crashing and rebooting. I tried once more with all windows closed, and of course got the same result. Then I made two changes as indicated by the guide, and the scan appeared to be successful. However, around the time when all or nearly all of the threats had been removed, the computer shut down and began to reboot. I assumed that an automatic reboot was part of the program.

    The computer now goes through all the normal startup procedures, and just before it arrives at the Windows login screen, it crashes and begins to boot again. This loop continues, and I am unable to enter safe mode. I get to the selection screen when this happens: the highlighted option is "Start Windows Normally", and I cannot scroll up or down with the arrow keys to get to safe mode. I've tried other various keys as well, to no effect.

    Help?
    -Jon
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Sorry to hear of the problem this has cause for you. I have asked our contact ( Nick ) at SUPERAntiSpyware.com to check into this thread. Please be patient while waiting for him. In the meantime please answer the below:
    • Based on your message, SAS was run 3 times? And there were only 2 detections? Do you remember what they were?
    • On the 3rd run after you made the 2 changes to the settings, were there still only the same 2 detections.
    • Have you tried using Last Know Good Configuration?
    • Do you have a bootable copy of the Windows CD for your PC?
     
  4. musicgamer10

    musicgamer10 Private E-2

    I meant that initially there were two detections, before it crashed. The third time it ran successfully (after I made the changes), and there were around 200 threats.

    What I mean to say is that I cannot arrow up to any other option other than "Start Windows Normally".

    And I think I've misplaced the CD somewhere in my house.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please power down your PC, wait a minute and then power back up. Can you boot normally now, can you get to Safe Mode, Safe Mode with Command Prompt or Last Known Good now?

    You should try to find your CD as it may be needed.

    What is your experience level? For example, if I asked you to put your hard disk into another PC as a slave drive so that we could look for a SUPERAntispyware log on your drive, could you do this?
     
  6. musicgamer10

    musicgamer10 Private E-2

    I tried to boot one last time, no luck. I'll look for the CD around here. I could probably do what you said, I did build the computer now experiencing problems.
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you try Safe Mode with Command Prompt or Last Known Good ? If you cannot get your keyboard to work it sounds like your drivers are not even loading. What kind of keyboard is it (USB or PS/2)?


    Then you could try doing this and looking in the below folder:

    C:\Documents and Settings\UserName\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs

    for anylogs and then attach them here so we can see what was remove. Note that UserName will be your real user account name where you ran the scan from. And betting that you may not find any logs since SAS did not get to the point of removing anything. Your previous message said
    In order for SAS to remove anything the scan has to complete and they show you the results window and from there you have to decide what to fix and not to fix. This is where problems would be fixed not before. Thus is is quite possible that SAS did not remove anything and that whatever malware you had is at the heart of this problem.

    Since you also said you ran SAS multiple times, I would also check to see if anything is in the Quarantine folder that is here:
    C:\Documents and Settings\UserName\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Quarantine
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    In fact to show you what I mean about SUPERAntiSpyware and the stages, see the below. You can expand the thumbnails by clicking on them.

    When a scan actually completes you will first see the scan summary window

    SAS-Summary.jpg

    Then after you click OK you will be back to the scan results first window:

    SAS-Scan-Result1.jpg

    In this window you can unselect or select any items that you don't want to remove or want to remove. Then when you click the Next button the actual removal will occur (no removal occurs before this) and then you will see the results of what you decided to remove. In the below, you will see that only the cookies were removed from the first scan results screen.

    SAS-Scan-Result2.jpg
     
  9. musicgamer10

    musicgamer10 Private E-2

    The keyboard I am using is a USB. It seems to work, but is useless at the selection screen.

    I was in the process of removing threats in SuperAntiSpyware, I believe I was nearly finished when it shut down.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Not sure why this happens but it sounds like drivers are not loaded.

    Did you find your CD yet? You may need it so that you can do a repair install or if necessary a reinstall.

    Did you think about doing what I said with the slave drive setup? You can also use this to backup any data you want from your hard disk before doing anything else just to be safe.
     
  11. musicgamer10

    musicgamer10 Private E-2

    Today I'm planning to bring up an older computer from the basement and try the slave setup. I'll keep looking for the cd but this could be promising.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What operating system is on the older computer?
     
  13. musicgamer10

    musicgamer10 Private E-2

    Unfortunately, the older computer does not work correctly either (doesn't display on any moniter). I think it was Windows 98 or something.
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It would not have helped anyway. You would have had a problem reading your WinXP formatteded file system with Win98.

    What about your father's PC?

    Your only other option is to find your CD. You will need it to either repair or reinstall. A third option is to use System Recovery CD's if you have them which will return your PC to the state it was shipped. But note you will loose all of your files doing a System Recovery.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds