Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can only boot in safe mode after running ComboFix


  • This topic is locked This topic is locked
3 replies to this topic

#1 benalexandria

benalexandria

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:07 AM

Posted 05 March 2010 - 10:17 AM

Not sure if this is the right place to post this topic but here is the background. My wife got malware that had pop-up screens that said she was infected and she should buy "XP antivirus 2010". I ran MalwareBytes and Spybot Search and destroy in normal and safe mode and it appeared the problem was solved. However, hours later "XP anitvirus 2010" problem reappeared. I spoke to a computer friend of mine and he suggested that I run combofix. I downloaded combofix and ran it. It installed "Microsoft Windows Recovery Console" sucessfully then it ran combofix. Combo fix ran fine until it forced a reboot. It tried to reboot in "normal mode" and failed. At that time, I restarted the computer and it sucessfully ran in "safe mode". At that time combofix continued to run and it completed and created the Combofix log file. Now I may have a computer that does not have malware (it does not show up in "safe Mode"). However, I want to get the computer to boot into "normal mode". Suggestions greatly appreciated. Windows does boot beyond the splash screen but at some point before the normal desktop screen appears it stops accessing the disk and does not complete the boot.

Edited by benalexandria, 05 March 2010 - 10:33 AM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,247 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:07 AM

Posted 05 March 2010 - 11:28 AM

Try booting into safe mode...then Disable Automatic Restarts When Windows Crashes - http://www.bleepingcomputer.com/forums/t/74644/how-to-disable-automatic-restarts-when-windows-crashes/.

Once that is done...you can try running BlueScreenView - http://www.nirsoft.net/utils/blue_screen_view.html.

Double-click the BlueScreenView.exe file to run the program.

When scanning is done, Edit/Select All...then File/Save Selected Items and save the report as BSOD.txt.?

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Louis

#3 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:03:07 AM

Posted 05 March 2010 - 12:02 PM

Your userinit.exe file was probably infected and Combofix removed it
Since you installed the Recovery Control Panel this should not be too much of a problem for the Malware Removal team

Post your Combofix log here:
http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/
Explain what happened
They will walk you through the steps to get it to boot again and then follow up to make sure you are virus-free

Good luck
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#4 Pandy

Pandy

    Bleepin'


  • Members
  • 9,559 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:07 AM

Posted 05 March 2010 - 01:19 PM

Since benalexandria has posted a log here in the Malware Removal forum I will close this topic for now to reduce confusion. If this topic needs to be reopened please feel free to pm any moderator and request it to be opened again for you.

Do not anticipate trouble, or worry about what may never happen. Keep in the sunlight.

Hide not your talents. They for use were made. What's a sundial in the shade?

~ Benjamin Franklin

I am a Bleeping Computer fan! Are you?

Facebook

Follow us on Twitter





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users