Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

> 

When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

> Laptop virus infection prevents complete logon, even in Safe Mode, Can force an internet connection, but cannot access any files or progs
Euthenia
post May 30 2009, 01:25 AM
Post #1


New Member
*

Group: Members
Posts: 3
Joined: 29-May 09
Member No.: 337,131



I have an IBM ThinkPad, running Windows XP Professional. While working online last week, The screen suddenly went blue and gave an error message (unfortunately, I don't recall what it said). I attempted to restart, but could not logon. I shut down, then removed the battery. A few hours later, I reinserted the battery and tried to boot back up. I now receive the following error messages:

First -
Services.exe - Application Error

The instruction at "0x00096e80" referenced memory at "0x00096e80". The memory could not be "written".

Click OK to terminate the program
Click CANCEL to debug the program

Second, appearing behind that error message, is the logon screen. I enter my password and the logon screen disappears. A few seconds later, another error message pops up:

Data Execution Prevention

To help protect your computer, Windows has closed this program.

Name: Boot Acceptance Application for Registry
Publisher: Microsoft Corporation

Data Execution Prevention helps protect against damage from viruses and other security threats. What should I do? CLOSE MESSAGE


If I click on the underlined "What should I do?" link, it brings up a help screen. Through that screen, I am able to follow another link which brings up my browser window, and I am able to access the internet. If I 'X' out that error window, I get yet another pop up error message:

Boot Acceptance for Registry

Boot Acceptance Application for Registry has encountered a problem and needs to close. We are sorry for the inconvenience.

If you were in the middle of something, the information you were workin gon may be lost. For more information about this error, click here. CLOSE (or) DEBUG


Following that link I get:

Boot Acceptance Application for Registry

Error signature EventType : BEX P1 : services.exe P2 : 5.0.2134.1 P3 : 47d29fec P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00095778 P8 : 00000005 P9 : 00000008

To view technical information about the error report click here. CLOSE


Which takes me here:

Error Report Contents

The folowing files will be included in this error report:

C:\DOCUME~\********\LOCALS~1\Temp\WERa267.dir00\services.exe.mdmp
C:\DOCUME~\********\LOCALS~1\Temp\WERa267.dir00\appcompat.txt
CLOSE

(asterisks above represent my computer logon name)

I have used ctrl+alt+del to bring up the Task Manager, where I have tried to access the Desktop by starting a New Task, but as soon as I do, I get a black screen with the notorious System Security 2009 warning, followed by the 'loading' of my desktop icons behind a fake AV program which runs and tells me I am infected. The difference in my case, however, is that this appears to be more malicious than a mere succession of nag screens. I cannot circumvent the pop-ups in order to run my MalwareBytes and other system protection software. In fact, I cannot access any of my laptop files. Any icon I click or program I try to 'run' or folder I try to open results in a tiny pop-up bubble over a fake AV icon in the taskbar, which tells me that the specific file is infected and urges me to click to download the latest protection. I have tried a couple of times to use Task Manager to end some suspicious processes, but that doesn't seem to have any effect. Eventually, the same cycle of warnings begins, no matter what.

I have also tried to get into Safe Mode in order to run my Malware and Spybot programs, but I am denied logon access completely, nor can I force the Task Manager to open.

Is there any way at all to force a logon? I have tried downloading and running my Malware prog again, and telling it to open and run upon completion of download, but the program will not download. I haven't tried scanning my laptop directly from the internet - is that an option? Can you recommend a safe site where I can do this free of charge that will also allow me to remove the offending files?

I am at my wits' end. Is this a lost cause or can my laptop be salvaged? I have some very important files that I had not yet backed up and cannot afford to lose them . . .

Any help would be very greatly appreciated!
Go to the top of the page
 
+Quote Post

Posts in this topic


Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 24th November 2009 - 04:19 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.