Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

cannot enter safe mode to remove antivirus live


  • Please log in to reply
3 replies to this topic

#1 Jimbooey

Jimbooey

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:02 PM

Posted 13 January 2010 - 05:10 PM

Hi there,
Have been infected with Antivirus Live.
Printed off removal guide and downloaded rkill.com and mbam-setup.exe to USB flash drive
tapped F8 during reboot and choose safe mode with networking as requested in guide
Was given message that windows has detected a problem and shut down to protect computer.

Technical information:
0x0000007E (0xC0000005, 0x80537009, 0xF89DB3E0, 0xF89DB0DC)

Ant ideas as this is all i get every time the systen tries to boot up........

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:02 PM

Posted 14 January 2010 - 11:57 PM

Have you tried using normal mode?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Jimbooey

Jimbooey
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:02 PM

Posted 15 January 2010 - 02:54 AM

Thanks for replying.
Since trying to enter safe mode with networking and getting blue screen with error message, it now gives this same screen no matter which option I use. Including last good settings and normal mode.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:02 PM

Posted 15 January 2010 - 09:33 AM

If you cannot bootup in normal or safe mode because of continued crashes and BSODs, then your options are limited.If you choose Hiren's, please be aware:

While this collection of tools can be very useful, potential users should note that many of the tools are commercial applications that have not been legally licensed for redistribution, and so download/use/sharing of Hiren's BootCD may be illegal (depending on your legal jurisdiction).

Note about Hiren's BootCD

You can try running Chkdsk from the Recovery Console but you will need your XP CD. Chkdsk is a utility that scans the hard drive and will check the files and folders for file system errors, lost clusters, lost chains, and bad sectors. When encountering logical inconsistencies in file system data, it will perform the necessary actions to repair the file system data. For instructions, please refer to How to Repair a Damaged Hard Drive Using Chkdsk
  • The command chkdsk /p (only availabe in the Recovery Console) does an exhaustive check of the drive and corrects any errors.
  • The command chkdsk /r locates bad sectors and recovers readable information. It will scan the surface of the disk for physical errors in the disk scan phase only and indicates that chkdsk should try to recover the data.
Another option is to create a Bootable CD:These are links to Anti-virus vendors that offer free LiveCD or Rescue CD utilities that are used to boot from for repair of unbootable and damaged systems, rescue data, scan the system for virus infections. Burn it as an image to a disk to get a bootable CD. All (except Avira) are in the ISO Image file format. Avira uses an EXE that has built-in CD burning capability.If you are not sure how to burn an image, please read How to write a CD/DVD image or ISO. If you need a FREE utility to burn the ISO image, download and use ImgBurn.

Note: In order to use a rescue disk, the boot order must be set to start from the CD-ROM drive. If the CD is not first in the boot order, the computer will attempt to start normally by booting from the hard drive. The boot order is a setting found in the computerís BIOS which runs when it is first powered on. This setting controls the order that the BIOS uses to look for a boot device from which to load the operating system. The default will normally be A:, C:, CD-ROM. Different computers have different ways to enter the BIOS. If you're not sure how to do this, refer to:If none of the above methods give you access to your computer, then you can try doing a Repair Install with Recovery Console. The Recovery Console is a Windows utility that provides a DOS-like command line from which you can run some repair programs. If you have a Microsoft Windows CD-ROM, you can get to the Recovery Console by booting from that CD and pressing any key when you told to 'Press any key to boot from CD'. At the 'Welcome to Setup' screen, press r for Repair.If you don't have your XP CD you can download an ISO of the Recovery Console files:Burn it as an image to a disk to get a bootable CD which will startup the Recovery Console for troubleshooting and fixing purposes. This is especially useful for those with OEM systems with factory restore partitions or disks but no original installation CD. If you are not sure how to burn an image, please read How to write a CD/DVD image or ISO and Creating A Windows XP Recovery Console CD Image.

Important Note: Since the inability to boot properly was most likely caused by malware or attempts to remove it, you should know that some infections can result in a system so badly damaged that reinstalling Windows without first wiping the entire hard drive with a repartition/format will not remove the infection. The reinstall will only overwrite the Windows files. Any malware on the system causing problems will still be there afterwards. Using System Restore may return your system to a more stable state so it can boot up if provided that feature was not disabled and you have usable restore points but there is no guarantee the malware will not still be present afterwards. You confront the same possibility when using a Boot or Rescue CD.

Edited by quietman7, 15 January 2010 - 09:41 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users