Removed Spyware and Malware now Vista system will not boot

caceyjones · Dec 11, 2012

Hello,

Please help.

I took my friends computer to repair which originally had a problem connecting wirelessly. Now the problem is more serious. I decided to run a battery of scans on the computer to remove some viruses. I booted the computer into safe mode, installed and ran Spybot, Malwarebytes, and Hitman. In the process I had found that the subscription to Norton had expired and I had uninstalled it in hopes to install a free antivirus program. All of this done without a reboot(which is likely my error).

On reboot windows attempts to load but flashes a blue screen and loops. Windows runs its startup recovery tool but fails to fix the error. I cloned the drive with clonezilla in hopes that the tool would fix the boot error. Did not work. I ran the window repair from the windows disc. Did not work.

It is an HP laptop running Windows Vista Home Premimum 64 bit

I found a thread on this site that ran through farbar recovery tool.http://forums.majorgeeks.com/showthread.php?mode=hybrid&t=257012

I followed the instructions up to the point where the text file was needed.

Here is the text file that I came up with.

Thanks,

Kestrel13! · Dec 12, 2012

Welcome to the Malware Removal Forum.

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

caceyjones · Dec 12, 2012

Thank you for the reply.

I have read the READ & RUN ME first.

I still have a HP laptop that is in a continuous boot loop. It will not allow me to enter into safe mode. I am unable to do anything with it but I did run the farbar scanning tool and attached the log file to the previous post if that helps.

Kestrel13! · Dec 13, 2012

Well let's try this...

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Attached is fixlist.txt

Save fixlist.txt to your flash drive.

You should now have both fixlist.txt and FRST64.exe on your flash drive.

Now re-enter System Recovery Options.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt).
Please attach this to your next message. (How to attach)

Now attempt to boot normally.

-------------------------------

caceyjones · Dec 14, 2012

Thanks for the reply.

I ran the frst64.exe then clicked fix. The farbar program created the log file. I went to reboot and the problem still exists where it boots showing the windows loading screen, flashes the blue screen of death then reboots. Here is the Log file that was created.

Kestrel13! · Dec 15, 2012

Does this computer boot in safe mode?

caceyjones · Dec 17, 2012

Thanks for the reply.

The computer does not boot into safe mode. It loads all the files and gets to ..../drivers/crcdisk.sys then hangs for a second or two. Flashes a blue screen and reboots.

Kestrel13! · Dec 17, 2012

I'm sorry, but you would be better off posting about this in the software forum, and then if need be, you can return here for malware removal afterwards.

caceyjones · Dec 17, 2012

Thank you for your help.

Kestrel13! · Dec 17, 2012

You are most welcome.

Log in or Sign up

Removed Spyware and Malware now Vista system will not boot

caceyjones Private E-2

Attached Files:

FRST.txt

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

caceyjones Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Attached Files:

fixlist.txt

caceyjones Private E-2

Attached Files:

Fixlog.txt

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

caceyjones Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

caceyjones Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member