WAS "Help with system recovered from serious error msg" NOW machine won't boot

Towards the beginning of the month, when I went to start PSE v7, my machine rebooted. After checking the threads on the forum, I started a thread in the Hardware Forum thinking that possible my machine needed additional memory. Caliban and Satrow were helping me there. Aftering looking at some dump files and a screen shot where AVG (Internet Security v9) picked up a Microsoft file as infected, Satrow suggested I move over into the Malware Forum.

I downloaded the malware removal programs onto a jump drive to copy to the desktop and start the log files. The computer rebooted whenever I plugged the jump drives into the USB port.

I fought off a very nasty rootkit infection a year ago that ended up crashing my hard drive because it rebooted and regenerated so often. So I panicked when this began to happen.

I went into BIOS and booted from the CD drive. I ran Dr. Web Live CD. It identified/cleaned 2 files infected with TrojanDownloader 7 but stalled at 62%.
It also identified a ScriptVirus but couldn't access those .pdf files for some reason.

After that the machine wouldn't boot. :cry

Yesterday I ran AVG Recue CD. It identified and cleaned 2 Trojan Generic files but the machine still wouldn't boot. Not in normal or safe mode.

Today I tried repairing Windows. I got:
IRQL_NOT_LESS_OR_EQUAL
Stop: 0x0000000A (0xF000E989, 0x00000002,0x00000001, 0x808247A4)
and couldn't continue. Recently I upgraded to 2Gb RAM.

I'm freaked. Please help. A million thanks
LuniLadi

 

Chaslang,
I have a bootable Windows CD. I made it after I had ZeroAccess rootkit. I tried repairing Windows. No go. That's where I got the error message I posted:
IRQL_NOT_LESS_OR_EQUAL
Stop: 0x0000000A (0xF000E989, 0x00000002,0x00000001, 0x808247A4)

Now when I try to boot the machine I get the black screen saying "Last start up of Windows didn't start normally...." and get a choice of starting Windows normally or in safe mode. No matter which one I pick, the machine boots up to the Gateway/Windows logo screen but doesn't continue. It goes right back to the black screen with the choices again.

I'm sorry I don't know which files were deleted.
And I know it certainly wasn't the smartest move to run the Live CD :-o
but, like I said, I panicked. Knee jerk reaction after fighting ZeroAccess for weeks and weeks....and eventually losing my hard drive.

Is there anything I can do?
Thanks
LuniLadi

 

Chaslang,
Thank you very much for giving me some options. ::heart::

The first time I booted from the Windows CD, I missed the "press any key" prompt. Chkdsk ran. File verfication was ok. It deleted a couple of indexes under Index verification. One of them was pagefile.sys which I think might have been infected/removed, and recovered some orphaned files (pagefile.sys was among them). I wrote these down if you think it's helpful.
The rest of checkdisk went by too fast for me to write anything.

I was hopeful that Windows would start but, once again, was presented with the black screen and "normal/safe" choices.

Second boot from Windows CD:
-- Selected R for recovery console
-- Selected C:\Windows to log in
and got the STOP error message screen.

Did I miss the place where I would get the command prompt?

I thought I would check in before going on to the Microsoft instructions.
Thanks again
Luni

 

Chaslang,
Nope, nothing plugged into USB ports.

I have an older laptop that's running XP and *might* have a full copy of XP. I keep all drivers/installation disks/etc in one spot until the hardware is tossed. If the machine came with the OS disk, it's there.

But it sounds like that's not going to be much of an option.

I've also been checking around in Majorgeeks software forum. Something like what you recommended or Hiren's Disk may be over my head but what about Wondershare's LiveBoot CD? It seems to have a simple menu system and "claims" to repair the mbr/boot errors. Do I have anything to lose at this point?

If that fails am I facing a fresh install?

I aooreciate you spending valuable time on what appears to be a lost cause.
Luni

 

Chaslang,

<< Is there any other info in the STOP message. Does it indicate any file names? >>
Nope, that's all the info that's given.

And I had upgraded the RAM amount to 2Gb but I got the specs for my machine's model direct from the mfg (Gateway) website. Also the computer was booting/running with the new memory before I ran the Dr Web Live CD so I don't think that's the problem. Satrow had originally been trying to check on driver/software updates but then sent me to the Malware forum.

<< See what was posted in message # 12 of the below thread and see if you can get this CD to run. >>

I have the Hiren's CD. Do you want me to follow the directions in post #12 of that thread?

When the CD boots choose "DOS BootCD".
At the Hiren's BootCD main menu, select Next and hit Enter.
At the second menu select 1 MBR (Master Boot Record)Tools
In the list of MBR Tools select 1 MBR Work 1.08
This screen will show the hard drive configuration.
Type 5 to Install standard MBR code then hit Enter
Type 1 to select Standard then hit Enter
Type Y then hit Enter to confirm
Type E then hit Enter to exit
Press Ctrl+Alt+Del to restart the machine

(Just double checking...don't want to jump the gun *again*)

I'll try to run the CD and use MBR Work tomorrow.
Thanks so much
Luni

 

Chaslang,

Ran Hiren's Boot CD this morning but I have v 15.2 and the menu system in that post is using v 10.2 and it's not quite the same. I explored a few of the menu items but I couldn't find MBR Work so I didn't run anything. (God, I feel like a dunce who needs alot of hand holding)

I also searched MG and found a post related to v 10.1 but when I went to that site there was no download.

I'm not sure what to do now.
Luni

 

Ran Hiren's Boot v 10.2. Followed all the menu items and after I selected "1=Standard, Y=confirm" it didn't seem to do much but cycle back to Partition info/menu area. Upon hitting "esc" to exit, I got a black screen:

Loading SmartDrv
Type M for menu (when I did that I got the Main Menu for Hiren's)
R\Tools (if I hit esc, I just got the drive letter R)

And the machine won't boot.So I guess it didn't work. <sigh>
Luni