BleepingComputer.com: Can Only Boot to Safe Mode after virus attack

Quote

Hopefully the redirects will stop happening now.

Quote

I need to look into the error your are receiving and see what I can find on it. It's getting late over here right now, and am not going to have a chance to look into this until early evening tomorrow.

I should hopefully have something for you then.

Have a good night.

SweetTech

No redirects on either computer since resetting modem. Things are looking good.

Thanks so much for your help.

Afternoon johnsig,

I've just had some time to look into that error message.

You can read a little more about this error message from this link: http://support.microsoft.com/kb/945658

Try this:

Last Known Good Configuration

Start the computer by using the last known good configuration. To start the computer by using the last known good configuration, follow these steps:

• Restart your computer.
  
• As the computer starts to boot-up, Tap the F8 KEY repeatedly,
  
• This will bring up a menu.
  
• Use the Up and Down Arrow Keys to scroll to Last Known Good Configuration
  
• Then press the Enter Key on your Keyboard
  
• Go into your usual account

If that does not work proceed with doing this:

Please do the following:

1. Run Chkdsk
Running chkdsk may take some time to complete. Please be patient and do not use the computer, press any keys, or try to stop the chkdsk scan once it has started.

• Right-click the Start button and select Explore
  
• Navigate to your C: Drive, then right-click the drive and select Properties
  
• In the Properties window that pops-up, click the Tools tab and then click on the button that says Check Now
  
• If the User Account Control window pops-up asking for permission to run Check Disk, please click on Continue
  
• In the Check Disk Options window that pops-up, place a check-mark in both boxes:
  • Automatically fix file system errors
    
  • Scan for and attempt recovery of bad sectors
  
  
• Now click on Start.
  
• A new window will pop-up saying, Windows can't check the disk while it's in use, click schedule disk check
  
• Now shut-down your computer, not restart, and then turn on your computer.
  
• When your computer turns on, you will see a blcak screen with white lettering, this is chkdsk running.
  
• Let chkdsk run through its 5 Stages. When it is finished, your computer will boot to the desktop.

2. Chkdsk Log

• Click on Start, then Run.
  
• Copy and paste the following bold text in to the Open: box:
  eventvwr.msc /s
  
  
• This will bring up the Event Viewer window
  
• In the left panel click on Application
  
• The chkdsk log should be the first entry, with a source of Wininit. If it is not the first log:
  • Click on View, and then on Newest First
    
  • This should place the chkdsk log at the top of the list.
  
  
• Click on the entry once
  
• Now right-click on the entry and choose Properties.
  
• In the window that pops-up, click on (this will copy the log).
  
• Paste the log in a Reply to this topic.

Thanks for the the link. I wonder how much of that is unique to XP.

Booting using the "Last Known Good Configuration" got me to my desktop without displaying the form that I have been seeing but the bluescreen popped right up and the computer rebooted.

In safe mode I went thru setting up a CHKDSK to run at the next start and then shut down the computer and started it again (not restart). It booted to the desktop without running CHKDSK, with the familiar form and then the blue screen appeared followed by reboot.
I've been getting some odd things in safe mode. I log on manually to my network using the new setup and it asks me if I want to save it and connect automatically but even if I select this, I still have to connect manually next time I boot to safe mode. When connected to the network I have no audio and in windows explorer cannot find the files which were formerly shared with my desktop. I will check my sharing settings.

I've got some disks that came with the laptop which are supposed to reset it to the state it was in when I purchased it. I'm about ready to go that route unless you want to try something else. I can live with having to restore programs and files that I have loaded on the computer. (assuming even this works).

No frustration here yet ;-). Thanks for your hard work.

In all honesty a reformat and re-install maybe the easiest and fastest thing you can do. This will accomplish two things: 1. Will allow you to start over with a clean computer and 2. Will let you know if your computer is having some sort of hardware issue.

Let me know.

OK, I'm going to do that. I'll reply here with my results Probably not until tomorrow.

Okay.

I have used the recovery disks that came with my laptop and restored it to "store bought" condition. Had one little problem with the DVD drive but I found a registry tweak which apparently has fixed that. In the process of updating the windows vista OS, I had one update fail - KB973687 so I need to investigate that. I still have some software to reload and update which will take a while.

Do you think Windows firewall, AVG free antivirus, Spybot S&D, and Spywareblaster with Malwarebytes for backup is an adequate protection scheme?

Thanks for all your help. I'll be sending a little something via paypal.

John

Quote

If you could provide me with the error code, I can look into that and see what may be the reason for it failing to install.

I meant to add more to my previous post, but it didn't want to wait for me to type in the rest of my response.

Quote

I'm not the hugest fan of AVG as of late. There latest version seems to bog down systems way too much! I'd use Avira or Avast before using AVG. But that's my opinion.

When we our done, i'll provide my usual all clean speech for how to stay clean.

The error code on that Windows Update was 80070026. I got the stand-alone update from Microsoft and tried to run it but it ended prematurely with a message indicating that the update was not necessary for my configuration. So why did I get it in the first place? The only thing I can think is that it was also included in a later update that I ran. Anyway Windows Update says I am good. I'll give AVAST a try in lieu of AVG.

Quote

When it comes to Microsoft it's really hard to determine there reasoning behind something.

This is what I provide to my users when they are clean:

All Clean Speech




Below I have included a number of recommendations for how to protect your computer against malware infections.


Updated Anti-Virus Program
It's essential that you have an updated anti-virus program running on your computer. You don't want to run more than one as it can cause program conflicts, as well as false positives

You can view an excellent list of Free Security Software programs that has been compiled by GeekstoGo.


Avoid P2P Programs

Remember that no matter how clean the program you're using for peer-to-peer filesharing may be, it offers no guarantees regarding the cleanliness of files you may choose to download. All files available via p2p filesharing carry a high risk, particularly those that offer you illegitimate methods of using legitimate software programs without paying for them. Some further readings on this subject, along the included links, are as follows: File-Sharing, otherwise known as Peer To Peer and Risks of File-Sharing Technology.

If you have any of these programs installed then I highly suggest you uninstall them.

NOTE: Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.


Internet Browsers

Many of the users that I assist here on the forums, ask me which programs they can use to prevent themselves from getting infected again in the future. The best answer I can give you is too practice safe browsing.

Please consider using an alternative browser such as Google Chrome or Opera. They are both much more secure than Internet Explorer, immune to almost all known browser hijackers, and also have great built-in pop-up blockers.

I also suggest you make your Internet Explore more secure.



Extra Goodies

• It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
  Strong passwords: How to create and use them then consider a password keeper, to keep all your passwords safe.
  
  
• Keep Windows updated by regularly checking their website at: http://windowsupdate.microsoft.com/
  This will ensure your computer has always the latest security updates available installed on your computer.
  
  
• You should run an updated scan with MalwareBytes' Anti-Malware weekly. Instructions are included below:
  
  
  • Open Malwarebytes' Anti-Malware
    
  • Select the Update tab
    
  • Click Check for Updates
  
  
  
• Be weary of e-mails from unknown senders. Keep the following in mind as well: If it's to good to be true, then it more than likely is.
  
  
  
• FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Its important to keep programs up to date so that malware doesn't exploit any old security flaws.
  
  
• ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  
  
• WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
    
  • Yellow for caution
    
  • Red to stop
  WOT has an addon available for Chrome and Opera.
  
  
• Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
  
  
• In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:
  
  Think Prevention.
  PC Safety and Security--What Do I Need?.

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.

Cheers,
SweetTech.

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.