Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tdss killer has made my computer unbootable


  • This topic is locked This topic is locked
56 replies to this topic

#1 fogde

fogde

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 18 December 2010 - 02:12 AM

After numerous attempts with with Microsoft security essentials, spy bot, kaspersky tdss killer, malwarebytes and norton security i tried to remove tdss killer with gmer. Half way through the scan my computer froze up so i turned it off. A big mistake. I am running windows xp home edition. i can go into f2 and f12 but it will not go to safe mode, boot from cd rom or boot from partition. i have tried to slave drive the hard drive to another computer and run virus check but did not correct the issue. When i start my computer after seeing the flash screen of windows xp it goes to black screen with flashing cursor in up left corner but can not type anything. I downloaded Norton Bootable Recovery tool to a flash drive and was able run tool it did remove a virus but still did not correct my boot up problem. I guess the good news is that what ever is effecting my computer it has not corrupted the flash drive. Please help.

BC AdBot (Login to Remove)

 


#2 Casey_boy

Casey_boy

    Bleeping physicist


  • Malware Response Team
  • 7,765 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:02:10 AM

Posted 28 December 2010 - 05:51 PM

Hi,

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you still require help, then please let me know. Else, I would appreciate it if you could let me know that you have since resolved this topic.

Casey

If I have been helping you and I do not reply within 48hours, feel free to send me a PM.


* My Website * Am I Infected? * Malware Removal Help * If you'd like to say thanks *


#3 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 28 December 2010 - 07:32 PM

yes i still need help

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,816 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:10 AM

Posted 30 December 2010 - 09:44 AM

Hello and sorry for the delay.

Do you have an XP CD at hand? Do you remember what TDSSkiller detected?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 31 December 2010 - 10:22 PM

yes i have windows xp disk and no i do not remember what it detected i was running gmer and it froze on me. stupid me i restarted my computer. now it will not boot. it does not reconize my disk drive nor can i boot in safe mode.

Edited by fogde, 31 December 2010 - 10:26 PM.


#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,816 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:10 AM

Posted 01 January 2011 - 06:03 AM

Hi again, and Happy New Year!

Let's try to boot your computer using a Boot CD.

Please print this guide for future reference!

You will need a blank CD, your Windows XP install disc, a clean computer and a flash drive.

Please follow the steps below and let me know if you were successful. Please tell me what error messages you got and/or what steps you got hung up on.

1. Download the PE Builder to your desktop

http://www.nu2.nu/download.php?sFile=pebuilder3110a.exe
  • Double-Click on the PE Builder that you just downloaded to your desktop.
  • Follow all of the instructions/prompts that come up.
2. Insert your XP CD with SP1/SP2/SP3 into a CD Rom drive
  • Double-Click on PE Builder.exe located on your desktop.
  • Click NO to Search for Windows Installation Files
  • Make the following selections from the Main Screen that pops up:
    • Builder
    • Source:(path to Windows installation files)
    • Enter the path to the drive where your XP CD is located.
    • You can click on the "..." button on the right to navigate to the path as well.
  • Custom: (include files and folders from this directory)
    • No information is necessary, leave blank.
  • Output:
    • Keep the default
  • Media output
    • Choose Create ISO image
    • Do not choose Burn to CD/DVD
    • Download the RunScanner plugin and save it to your desktop

    http://www.paraglidernc.com/Files/RunScanner10025.cab

    Please note: You will be prompted for the folder that it shall be saved. By default it appears as runscanner10025. It should be modified to just runscanner <--- Important!!!


    • Press the Plugin button on the PE Builder interface
    • Press the Add button and navigate to the location of the RunScanner plugin to install
    • Please note: If you are using a Windows XP disc with sp2 then highlight RpsSS needs to launch DComLaunch and then press Enable
  • When your done press Close and the PE Builder interface will re-appear
3. Click on the "Build" button
  • You will see the Windows EULA message. Click on I Agree
  • You will now see the Build Screen. Let it run it's course
  • When the Build is finished you can click close, then exit
4. Burn your ISO file to CD==========

Next........

From your clean computer..

Please download OTLPE.zip and save it to a flash drive.
http://oldtimer.geekstogo.com/OTLPE.zip
http://www.itxassociates.com/OT-Tools/OTLPE.zip

Double click and unzip OTLPE.zip to its own folder on your flash drive. Name it OTLPE <-- Important!!

==========

Plug your flash drive into your sick computer now and do as instructed below..

==========

1. Restart Your sick Computer Using the PE Builder ISO CD That You Have Created
  • Insert the CD in to one of your CD/DVD drives.
  • Restart your computer.
    • The computer should choose to boot from the CD automatically. If it doesn't and you are asked if you want to boot from CD, then choose that option.
  • Once the desktop appears, you will receive a message asking: Do you want to start Network support?
    • Click on No
  • After it loads press the Go button in the lower left and do this....
    • Go
    • System
    • Display
    • Screen Resolution
    • 1024x768
    Next choose....
    • Go
    • Programs
    • A43 File Management Utility

==========

In A43File Management you should see your flash drive
Navigate to the OTLPE folder that you saved to your flash drive.

Open the OTLPE folder and double click Start.cmd.

  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTLPE should now start

    Change the following settings
    • Change Services, Drivers, Standard and Extra Registry to Use Safelist
    • Uncheck LOP and Purity check

    Please note: Stay with your computer during the course of the scan. If "Entry Point Errors" are encountered simply press "ok" and allow the program to continue. <-- Important!!
  • Push Posted Image
  • A report will open named "OTL.tx"t and another will be minimized to the system tray named "Extra.txt". Save both log's to your flash drive. Copy and Paste them in your next reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 08 January 2011 - 02:22 AM

okay i got to step 4. Burn your ISO file to CD. what is the name of the file i'm looking for to burn. i cant find it on my c:drive

never mind i think i found it

Edited by fogde, 08 January 2011 - 02:46 AM.


#8 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 08 January 2011 - 03:36 AM

it still will not boot from the cd. i can hear it spinning for about 30 seconds than it stop and all i have is the flashing cursor on the upper left. is it possible to burn the iso image to a flash drive?

#9 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,816 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:10 AM

Posted 08 January 2011 - 05:17 AM

Are you sure you burnt the iso to a CD (this is not the same as copying the iso to a CD).

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#10 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 08 January 2011 - 10:19 PM

yes i also tried the Gear ISO burn v1.7.1 it will no boot. do you know how to do it by usb flash drive

Edited by fogde, 08 January 2011 - 10:19 PM.


#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,816 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:10 AM

Posted 09 January 2011 - 04:55 AM

I haven't tried this personally, but it should work (note that the folder names in the images are "OTLPE" and not "BartPE", this is just about preference and not important):
  • After you have finished creating the BartPE iso:
    Download eeepcfr.zip from the following link and save it to your Desktop: the mirror
  • If you do not have a file archiver like 7-zip or Winrar installed, please download 7-zip from the following link and install it: the mirror
  • Once you have 7-zip install, decompress the BartPE iso by rightclicking on the folder and choosing the options shown in the picture below. Please use a dedicated folder, for example BartPE, on your Desktop

    Posted Image
  • Please also decompress eeepcfr to your systemroot (usually C:\).
  • Empty the flash drive you want to install BartPE on.
  • Go to C:\eeecpfr and double-click usb_prep8.cmd to launch it.
  • Press any key when asked to in the black window that opens.
  • As indicated in the image, make sure you have selected the correct flash drive, before proceeding.
    For Drive Label: type in BartPE.
    Under Source Path to built BartPE/WinPE Files click ... and select the folder BartPE that you created on your Desktop.
    Finally check Enable File Copy.

    Posted Image


  • Click on Start, accept the disclaimers and wait for the program to finish.

Your bootable flash drive should now be ready!

Edited by elise025, 09 January 2011 - 04:56 AM.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 12 January 2011 - 04:28 AM

okay so it was able to get it to boot with the flash drive and i saw the loading bartpe but then went to the windows xp page. wierd thing was is it said xp "professional", when both computers i have is xp "home" and then the blue screen of death showed up

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,816 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:10 AM

Posted 12 January 2011 - 07:33 AM

In that case, please try this.

  • Insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.

  • If your PC is not booting from the CD, you need to change the boot order:
    • Restart your PC
    • As soon as you get an image, press the Setup key. This is usually F2, or Del. On some machines the key can also be a different one. It should, however, be stated on the screen which key is the setup key.
    • Once you enter the computer's BIOS, use the arrow keys and tab key to move between elements. Press enter to select an item to change.
    • Navigate to the tab, where you can set the boot order. It should be called Boot or Boot order
    • The tab should now show your current boot order.
      If the CD-drive is not at the top, please navigate to the CD-Rom drive with the keys arrows. Then move it to the top of the list. The keys for switching boot position are usually + to move up and - to move down. However they can be different, but they should be stated in the help, so that you can find them easily.
    • Once the CD-drive is on top of the boot order, navigate to Exit and select Exit saving changes.
  • Your PC should now boot from your XP-CD.
    Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted.

  • When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
  • When prompted to choose a windows installation, type 1 and press enter.
  • When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.

  • A command prompt will open
Type fixmbr and press enter. Note - if you get a message about non-standard or corrupted MBR, you can continue. Do NOT continue if you use drive encryption!!

Then type EXIT and press enter. Let me know if you can boot normally now.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 12 January 2011 - 11:37 AM

no it still will not boot from cd.

#15 fogde

fogde
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:06:10 PM

Posted 18 January 2011 - 03:25 AM

i was able to make a ms dos floppy boot disk and restart computer in safe mode

Edited by fogde, 18 January 2011 - 03:34 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users