Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ran Combofix, Operating System not Found?


  • This topic is locked This topic is locked
60 replies to this topic

#1 wsb851

wsb851

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 11:13 AM

My computer has internet security 2010 on it, tried to run MBAM but it stalled 3 times after running for 2 1/2 hrs. Ran combofix against your warnings out of impatience, found rootkit, upon restart i get:

Intel® Boot Agent FE v4. 1. 18
Copyright © 1997-2005, Intel Corporation

PXE-E61: Media test failure, check cable
PXE-M0F: Exiting Intel Boot Agent.
Operating System not found

Can anyone please help me?

Edit: Moved topic from XP to the more appropriate forum. ~ Animal

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,870 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:57 PM

Posted 10 February 2010 - 12:15 PM

A couple of things:

1. That message merely indicates that your system is trying to boot XP from a network.

It sometimes happens when a CMOS battery is weak and the BIOS automatically defaults to certain settings. I guess...that it depends on how XP was installed originally, although I have never done a network install but I have seen my system BIOS revert to that when my CMOS battery was weak.

That's not necessarily the only reason that such would happen...it's what I consider to be the typical reason.

2. Take a look at Internet Security 2010 (Uninstall Guide) - http://www.bleepingcomputer.com/virus-remo...t-security-2010. Try to follow the exact steps posted. In the event of problems, please follow the instructions near the bottom for those who continue to have system problems after having gone through the suggested procedures listed in the guide.

Your situation may also be compounded by the fact that you have run ComboFix on your own. See ComboFix usage, Questions, Help - Look here - http://www.bleepingcomputer.com/forums/t/273628/combofix-usage-questions-help-look-here/.

Louis

#3 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 01:04 PM

1. changed boot order to boot from recognized HD, same result.
2. can't start computer to attempt removal of internet security 2010


#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,202 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:57 AM

Posted 10 February 2010 - 01:28 PM

Hello, what we can do in this case is create a bootable CD that will allow me to see detailed information about what is running on your computer.

You will need to download an iso file from approx. 300 MB and burn this to a CD. You will also need a flash drive to transfer a logfile.

Let me know if you are able/willing to continue with this (I will need to move this topic to the HJT forum in that case).

If you have more questions, just let me know smile.gif

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:57 PM

Posted 10 February 2010 - 01:39 PM

wsb851, I have been providing you what information I can find in this thread which you started yesterday.

Please do not start new threads or duplicate topics as this causes confusion and makes it more difficult to get the help you need to resolve your issues. Further, it necessitates staff spending time with housecleaning...time which could have been provided to others needing assistance.

I will close that topic to avoid confusion. Please continue here.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 01:56 PM

Quietman7In your thread you said,"You will need to do some research or start a new topic in the Operating Systems Subforums forum specifically for this issue"

I am sorry if i did someting wrong,but i thought I was doing what you told me.


elise025, i am definetly willing to continue this, if you can walk me through it.

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,202 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:57 AM

Posted 10 February 2010 - 02:03 PM

Okay, here we go smile.gif

This file is big Print these instruction out so that you know what you are doing

Two programs to download

First

ISOBurner this will allow you to burn OTLPE ISO to a cd and make it bootable. Just install the program, from there on in it is fairly automatic. Instructions

Second
  • Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to Non-Microsoft
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:57 PM

Posted 10 February 2010 - 02:05 PM

Yes I said or start a new topic in the Operating Systems Subforums forum. This is not one of those OS subforums. However, to avoid more open threads, just continue here with elise025.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 02:35 PM

started computer with downloaded file, clicked on OTLPE icon, Browse For Folder comes up

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,202 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:57 AM

Posted 10 February 2010 - 02:37 PM

Select your windows folder, this should start the scan.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 02:39 PM

it shows:
choose windows directory

My Computer
-RAMDisk(B:)
-ReatogoPE (X:)
-Shared Documents

#12 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 02:45 PM

if i select my cmpute it says:
No windows installations found

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,202 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:57 AM

Posted 10 February 2010 - 02:49 PM

Okay, lets try something else:

Please boot from the CD and using My Computer, look if the following file exists: c:\boot.ini

If you don't see your C drive there, please let me know.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 wsb851

wsb851
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:10:57 PM

Posted 10 February 2010 - 02:56 PM

in my computer it only shows:
Shared documents
RAMDisk B:
ReatogoPE X:
Control Panel

#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,202 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:57 AM

Posted 10 February 2010 - 03:00 PM

Do you have your XP install disk at hand?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users