BleepingComputer.com: I Bungled rkill now I can't even get into safe mode

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

I Bungled rkill now I can't even get into safe mode Trying to get rid of the MS Removal and rebooted after starting rkill

#1 User is offline   jimmygo 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 07-May 11

Posted 07 May 2011 - 09:14 PM

I got the MS Removal Trojan Horse on my Windows Vista box and I was trying to follow the instructions about using "rkill". However it seemed to hang and I powered down the PC to start over. However when I did, it went past the "Press F2" prompt and went to a blank screen. I could not even get into Safe Mode. I tried using a Knoppix bootable CD to see if I could get into the hard drive but it did not boot either. How screwed am I? Is ther anything I can do to get back what was on the hard drive or maybe even get Vista back up and running again? Thanks.

This post has been edited by hamluis: 08 May 2011 - 06:38 AM
Reason for edit: Fixed typo.

#2 User is offline   jimmygo 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 07-May 11

Posted 07 May 2011 - 09:16 PM

Pardon the typo. I meant to type, "Press F2".
-Jimmygo

#3 User is offline   hamluis 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 31,446
  • Joined: 03-September 05
  • Gender:Male
  • Location:Killeen, TX

Posted 08 May 2011 - 06:41 AM

I've added this post to our list maintained for systems which are unbootable due to malware...someone should assist you shortly :).

Louis
Am I Infected, What Do I Do?
Preparation Guide, Malware Log Topics
Using The Report Button
Misplaced Malware Logs
Discussion Forum Rules

#4 User is offline   etavares 

  • Bleepin' Remover
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 10,743
  • Joined: 16-August 08
  • Gender:Male

Posted 08 May 2011 - 10:59 AM

Hello and welcome to Bleeping Computer

My name is etavares and I will be working with you to fix your computer.

Please take note:

  • If you have since resolved the original problem you were having, we would appreciate you letting us know.
  • Please tell us if you have your original Windows CD/DVD available.
  • If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.
  • Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting. If you will be unable to respond (e.g. vacation, travel, etc.), please let me know ahead of time.
  • Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.


Please give me a little time to look over your log and I'll reply back.

If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Posted Image
Unified Network of Instructors and Trusted Eliminators

#5 User is offline   etavares 

  • Bleepin' Remover
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 10,743
  • Joined: 16-August 08
  • Gender:Male

Posted 08 May 2011 - 11:05 AM

OK, please don't miss my post above as it contains important requests and information.

Some questions to help narrow this down:
  • Do you hear any beeps when it hangs?
  • Do you have your Windows CD handy?
  • What kind of computer is this? E.g. a Dell, Toshiba, etc.
  • Is this disk encrypted?
  • Do you get an error message?
  • You said that you can't even get into safe mode. Please tell me more about this...specifically:
    • Do you see the Windows logo on the screen?
    • If you press F8 can you get the boot options menu?
    • If you can get to the boot menu, did you try Safe Mode? Please also try Safe Mode (command prompt) and let me know if you can boot that way.


Please answer those questions. That will help narrow down the root cause.

If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Posted Image
Unified Network of Instructors and Trusted Eliminators

#6 User is offline   etavares 

  • Bleepin' Remover
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 10,743
  • Joined: 16-August 08
  • Gender:Male

Posted 11 May 2011 - 05:57 PM

still with me?

If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Posted Image
Unified Network of Instructors and Trusted Eliminators

#7 User is offline   etavares 

  • Bleepin' Remover
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 10,743
  • Joined: 16-August 08
  • Gender:Male

Posted 14 May 2011 - 09:04 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Posted Image
Unified Network of Instructors and Trusted Eliminators

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users