Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tidserv, unable to boot [split topic]


  • This topic is locked This topic is locked
14 replies to this topic

#1 gorussgo1

gorussgo1

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 26 January 2011 - 02:28 PM

My machine has been infected with Boot.Tidserv.B as well. I am unable to boot the machine into Windows, including Safe Mode. Is there a bootable removal tool I can use to correct this issue? Any help would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 27 January 2011 - 04:23 AM

Hi, what happens when you try to start your computer? How far does it boot up? Do you still see the Windows Splash screen? Does tapping F8 bring up the advanced boot options menu?

Also, what version of Windows is this and do you have the Windows CD/DVD at hand?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#3 gorussgo1

gorussgo1
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 27 January 2011 - 03:23 PM

Computer boots all the way through the Windows splash screen to the login screen, at which point clicking on "guest" or entering password for my account and pressing enter causes a scrambled screen, then blue screen, then reboot. Same exact results when attempting to boot in Safe Mode. Tapping F8 after POST does bring up advanced boot options, and I am also able to access bios settings and make changes. I have used a bootable Symantec Virus Scan DVD to scan the machine. The only threat detected was Boot.Tidserv.B, which the software was unable to remove or fix. The machine is a Dell desktop running Windows 7. Unfortunately, I have no Windows CD/DVD as none was provided when the machine was purchased.

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 27 January 2011 - 03:33 PM

When tapping F8, do you see the "repair windows" option? If so, choose that and once it is loaded, choose Startup Repair.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 01 February 2011 - 11:33 AM

Hi, are you still there?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#6 gorussgo1

gorussgo1
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 01 February 2011 - 10:30 PM

Hi Elise,
Thank you so much for your prompt assistance. The computer is my girlfriend's and she has taken it to her work, to have someone else look at it. I will post again when she brings it back or gets a resolution. Thank you again.

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 02 February 2011 - 05:06 AM

No problem, thank you for letting me know. I will close this topic for now and in case you need it reopened, you can just send me a PM. :)

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 15 February 2011 - 02:26 AM

Reopened as requested.

Can you please give me a description of how things are now.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#9 gorussgo1

gorussgo1
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 15 February 2011 - 10:36 PM

The computer will boot all the way up to the point where I can choose to log in to either my girlfriend's account or the "guest" account. Once I click on her account and enter her password, I get a scrambled screen for about 2 seconds, then the machine either gives a blue screen of death and reboots or reboots immediately. The same exact thing occurs when clicking the guest account. And the same thing occurs when choosing any of the Safe Mode options.

I AM able to enter and change bios settings by tapping F2 after POST as well as F8 for advanced boot options after POST. I have also been able to boot to a Norton Bootable Recovery Tool DVD. Running this tool and performing a complete scan detected only one alert; Boot.Tidserv.B, which the software was unable to remove or fix.

The machine is a Dell desktop running Windows 7. Unfortunately, I have no Windows CD/DVD as none was provided when the machine was purchased.

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 16 February 2011 - 02:21 AM

Please see my question in Post #4, do you see that option?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 gorussgo1

gorussgo1
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 16 February 2011 - 10:08 PM

Yes, turns out it was F12, not F8. But anyways I tapped F12 for Boot Options, and then I select "Boot to Utility Partition". From here I see a "Windows Error Recovery" screen. I then choose "Launch Startup Repair (recommended)". After attempting repairs, I see a "Startup Repair" window that says "Startup Repair cannot repair this computer automatically." I then have the option to send repair info to Microsoft or not send. The "Problem Details" drop down shows the following info:
------------------
Problem Signature:
Problem Event Name: StartupRepairOffline
Problem Signature 01: 6.1.7600.16385
Problem Signature 02: 6.1.7600.16385
Problem Signature 03: unknown
Problem Signature 04: 306
Problem Signature 05: AutoFailover
Problem Signature 06: 1
Problem Signature 07: 0xd1
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033
------------------
Beneath this dropdown info, there is an option that says, "View Advanced options for system recovery and support". When I click this, I get the following list of options:
------------------
Startup Repair - (this takes me to the option that resulted in failure earlier)
System Restore - (apparently, there are no available restore points)
System Image Recovery - (no recovery images available)
Windows Memory Diagnostic
Command Prompt
Dell DataSafe Restore and Emergency Backup

#12 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 17 February 2011 - 03:28 AM

Please choose "command prompt" and type the following lines (press enter after each:

c:

bootrec /fixmbr


Now exit and try to reboot normally.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#13 gorussgo1

gorussgo1
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:03 AM

Posted 17 February 2011 - 06:56 PM

Problem solved! Thank you so much!! My girlfriend is thrilled and she thinks I'm a hero, thanks to you!

#14 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 18 February 2011 - 03:10 AM

I'm glad to hear that! :)

Let me know if you need any more help here, otherwise this topic will be closed.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,824 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:03 PM

Posted 23 February 2011 - 06:28 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users