Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot load to desktop.... not even in safe mode


  • Please log in to reply
24 replies to this topic

#1 inf

inf

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 16 February 2009 - 12:06 AM

Hello,

So my computer got hit with thewin32.trogandownloader.agent malware and it made my malwarebytes not start up.

I was going through the forums and followed some other person's direction to download and rename ComboFix to Combo-Fix and to run it, which I did. After I ran CF, the computer did not start up properly. I restarted, tried again but didn't work. I restarted pressed F8 and loaded most recent safe configuration. Upon doing that the computer booted up properly, Malwarebytes worked and so I ran a scan and came back with over 30+ infections so I had MB remove all infections. Some of the infections required a restart to be removed properly so I restarted my computer but it could not load to desktop, I received an error message saying: spoolsv.exe - Application Error The instruction at "0x008b0664". The memory could not be "written". Mind you, I do not have a printer installed or hooked up to that computer. I also get this second error message: StarWind iSCSI Target (Alcohol Edition) has encountered a problem and needs to close.

No matter what combination or ok/cancel I hit, nothing loads on my desktop after those 2 windows goes away. I tried booting up via safe mode and it worked. I ran malwarebytes doing a full system scan and it detected "Rootkit.Agent". I had MB remove that infection which required a reboot.

Now I am where I am.... safe mode doesn't load the desktop, I just see a black screen with safe mode showing in the corner. Normal boot just loads my wallpaper background and the same 2 error messages.

Wondering if I am completely out of luck and will have to use my restore CD or is there potentially some way I can still salvage this? I posted something similar in the Am I Infected forum but given my current problem, its more of an OS problem than a virus problem I think.

Thank you.

BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,811 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 16 February 2009 - 02:17 AM

This is why we suggest that Combofix not be run without the supervision of one of our HJT Team members who are trained in the use of this application. Combofix is not intended for the use of the general public, if used improperly it can render your computer inoperable.

If you can't boot into either normal or Safe Modes you will have to use the installation disk to make a repair, try using the Recovery Console.

Note: You may need to change the boot order in the BIOS so that the CD-ROM is the first device in the boot order to be able to boot from the Windows installation disk.

To run the Recovery Console from the Windows XP startup disks or the Windows XP CD-ROM, follow these steps:

1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.

Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted.

2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.

3. If you have a dual-boot or multiple-boot computer, select the installation that you must access from the]Recovery Console.

4. When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.

5. At the command prompt, type chkdsk /r , and then press ENTER.

6. To exit the Recovery Console and restart the computer, type exit at the command prompt, and then press ENTER.

If this doesn't work you will need to do a repair installation.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 16 February 2009 - 05:00 PM

Did the above, booted the computer through the XP CD and ran chkdsk /r, it completed the process but I am getting the exact same errors when the computer restarted after it finished chkdsk.

What should I try to do next?

Not entirely sure what repair installation is..

Thanks.

#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,811 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 16 February 2009 - 10:21 PM

A repair installation would be my suggestion.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 16 February 2009 - 11:04 PM

I am trying to run the repair installation now.. but I've hit another snag.

I have a GeForce 8800 GT that I have on my computer that was an upgrade I purchased. When I run the repair installation, it hangs and a window pops up saying "Hardware Installation" - Software you are installing for this hardware has not passed Windows Logo testing to verify its compatibility with Windows XP.

Problem now is that when that window pops up, I cannot use the keyboard to select yes/no and the mouse doesn't work anymore either. The installation basically hangs at that point and I'm not sure how I can move past that. I've sat at 34 minutes for more than 30 minutes now. The background of the installation still changes to the different things that XP offers and the bottom right processing green squares are still moving.

Thanks

#6 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 12:11 AM

Ok figured out a way to skip the hardware that was causing the problem (graphics card).

Finished the repair installation, computer booted up the first time and loaded the desktop with all my icons. I put in my graphics card driver CD, rebooted and again I had one of the same errors as before...

StarWind iSCSI Target (Alcohol Edition) has encountered a problem and needs to close.

New error:

Date Execution Prvention - Microsoft Windows
Name: Windows Explorer

I accept both and again I just sit there with my background loaded but no icons or start menu bar

Edit:

Tried booting to safe mode and encountered the same problem with Date Execution Prevention - Windows Explorer

Some additional information from debug option.

Error Signature:

EventType: BEX P1: explorer.exe P2: 6.0.2900.2180 P3: 41107ece P4: unknown P5: 0.0.0.0 P6: 00000000 P7: 009c0664 P8: c0000005 P9: 00000008

Error Report Content:
C:\DOCUME~1\TOSHIH~1\LOCALS~1\Temp\WER9777.dir00\explorer.exe.mdmp
C:\DOCUME~1\TOSHIH~1\LOCALS~1\Temp\WER9777.dir00\appcompat.txt

Edited by inf, 17 February 2009 - 12:18 AM.


#7 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 12:32 AM

Managed to access task manager while in safe mode (still not desktop icons, task bar, etc)

Ran a malwarebytes scan and it came back with no infections, not sure why explorer is being blocked by DEP

Edit:

Ok this thing is driving me crazy... after the malwarebytes scan that came up with nothing, I restarted the computer and tried accessing safe mode again, this time everything loaded, desktop icons, start menu bar everything...

Restarted the computer again tried loading normal way

spoolsv.exe - Application Error The instruction at "0x00390664" referenced memory at "0x00390664". The memory could not be "written"

And nothing loaded on desktop, tried safe mode after this and nothing loaded as well...

Gonna take a break before I cause anymore damage... did I do something wrong after the repair installation? I experienced a number of errors during the repair installation (.net framework, media center, etc) but for all of them I just clicked ok and it proceeded. Do I have to do another?

Edited by inf, 17 February 2009 - 12:50 AM.


#8 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,811 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 17 February 2009 - 01:50 AM

It's beginning to look like you may have a problem with your RAM, download Memtest86, you will want the ISO image for creating bootable CD (Windows - zip).

StarWind iSCSI is an option to add when Alcohol is installed, unless you are connected to a network you don't need this feature. I would uninstall Alcohol and reinstall it and when the option to add StarWind iSCSI is offered decline it.

For windows installation begin by downloading either the Pre-Compiled Windows package to build a boot-able floppy disk or an ISO (zip version) to create a boot-able CD-ROM. After the file is downloaded an extract must be done to uncompress the file(s). To extract right click on the downloaded file and select the "Extract All" option. The extract option will let you choose where the files will be extracted to. To build a bootable floppy go the the folder where the files were extracted and click on the Install icon. The floppy disk will appear to be unformatted by Windows after the install is complete.

To build a boot-able CD-ROM use your CD burning software to create an image from the un-zipped ISO file.

http://www.softpedia.com/get/System/Benchm...Memtest86.shtml

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#9 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 09:02 AM

Problem is I cannot get to safe mode or normal mode to run memtest86.

Also with regards to bootable CD-Rom, I do have a Windows XP CD that I booted the computer from.

#10 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,811 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 17 February 2009 - 09:19 AM

Once you have downloaded the memtest86 it is burned to a CD which you boot from, just like you can from the XP CD.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#11 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 09:41 AM

Understood, I will try that when I get home from work. I will post the results then. Thanks!

#12 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 12:18 PM

Ok dumb question... I burned the iso image of the memtest (Memtest86_3.5.iso) onto a CD, I opened the CD to make sure that the file was on it correctly and I saw a whole bunch of files and some of them were still zipped within the CD. Is this normal or did I do something wrong?

Thanks.

#13 cartman257

cartman257

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:51 AM

Posted 17 February 2009 - 12:23 PM

I'd say lay off the porn. :DD jkjk

Edited by cartman257, 17 February 2009 - 12:24 PM.


#14 hamluis

hamluis

    Moderator


  • Moderator
  • 56,569 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:51 AM

Posted 17 February 2009 - 04:32 PM

You need to burn it to a bootable CD, which can be easily done by using an .iso-burning program. There are tons of them, do a Google search and find one you like.

I use Active@ ISO Burner - http://www.ntfs.com/iso_burner_free.htm because I think it's very easy and I like easy :thumbsup:.

Louis

#15 inf

inf
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 17 February 2009 - 07:01 PM

WE HAVE DESKTOP AND DESKTOP ICONS! I still experienced the same problem of loading to a blank desktop but I tried going into task manager and start new process "explorer.exe" and all my taskbar and icons came up.

I am updating back to XP SP3 but the computer is running excruciatingly slow. I mean it took firefox about 2 mins to load up, 30 secs to type the web address.

Is there anything I can provide that will help diagnose what is wrong with my computer?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users