Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue screenof death cannot start is safemode


  • This topic is locked This topic is locked
56 replies to this topic

#1 MID1991

MID1991

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 22 September 2012 - 03:57 PM

Hello Folks

I have a Windows 7 Ultimate machine that is infected with something. The story goes:

The machine has Nortons 360 installed and was up date. The machine began to report that it could not contact the Norton server and to verify the machines IP address. About a minute after this happened, the Blue Screen of Death (BSOD) appeared with "IRQL_NOT_LESS_OR_EQUAL" and then rebooted before the enitre message could be read.

Restarted the machine and attempted to do a scan with Malwarebytes Anti-Malware. It did detect a trojan virus but before I could print off the report the machine rebooted.

I have 3 user acounts on the machine, lets call them A, B and C. This behaviour began when user A was logged in. I then tried to log in in safemode. This would give about 2 minutesof time to do something before it would reboot. I seemed to have more time on accounts B and C. I was able to run Malwarebytes throught the other user accounts and it reported no infections, however there would still be a uncommanded reboot.

The machine performance, if you can call it that, has steadily deterioated since then. The amount of time that the machine stays active now before BSOD is very short on all accounts. I cannot login in safemode anymore. The minute I click on the passoword, the machine reboots.

Any idea or assitance provided will be appreciated.

Rgds

MID1991

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:03 PM

Posted 22 September 2012 - 04:01 PM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 23 September 2012 - 11:12 AM

Hi naren,

The machine gives me no more than 2 to 3 minutes before I get the BSOD. Consequently I cannot run the scan. Sugestions?

Rgds

MID1991

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:03 PM

Posted 23 September 2012 - 11:16 AM

Restart the PC

Press F8 on bootup

Select REPAIR YOUR COMPUTER

Click on REPAIR

On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

Can you get to this screen?

If yes

Select System restore

If you have restore point before you had these issues,restore it

#5 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 23 September 2012 - 11:42 AM

Hi narenxp

Things just keep getting worse everytime I start this. Whether I hit F8 or not now I get

A light blue screen that says

Your PC needs to be repaired

Digital signature for this file could not be verified

windows\system32\winload.exe


I have my upgrade cd but not sure how to proceed. I have the options of hitting F8 or enter but I can never get away from this screen.

???

Rgds

Tom

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:03 PM

Posted 23 September 2012 - 12:26 PM

Insert the windows 7 DVD and try the instructions posted before.Let me know if you're able to enter recovery options

#7 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 24 September 2012 - 04:42 AM

Hi narenxp

I was able to repair using the DVD to a certain extent. I can boot off the hard drive now, but it always goes to automatic repair. I did try to restore to an earlier time, however it says that there are no restor points. There should be but it can not find any.

Thanks for all your help. I am leaving town on bussiness and won't be back to this until Friday.

Thanks

MID1991

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:11:03 PM

Posted 24 September 2012 - 04:45 AM

Can you enter the command prompt option?

Are you sure if this happened due to infections?

#9 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 24 September 2012 - 07:11 PM

Hi

Will check when I get home.

Yes I am sure. Nothing new, hardware or software, installed. Malware bytes found a Trojan virus

Willbe back in touch Friday

#10 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 30 September 2012 - 02:08 PM

Hi narenxp

Unfortunetly only back for a day.

Yes I can reach the command prompt.
Thanks

MID1991

#11 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,765 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:03 AM

Posted 01 October 2012 - 10:21 AM

:welcome:

Lets give it a try. You will need a USB Flash drive.

Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter the System Recovery Options and select the command prompt.

  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,492 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:03 AM

Posted 01 October 2012 - 11:05 PM

Hello, just letting you know I moved this topic to Here in the Virus, Trojan, Spyware, and Malware Removal Logs forum where it will stay.

Please remember to click the Watch Topic button at the top right and select Immediate Notification so you do not miss any replies now that you were moved.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 02 October 2012 - 02:24 PM

Thanks Boopme

#14 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,765 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:03 AM

Posted 02 October 2012 - 03:45 PM

Waiting for your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#15 MID1991

MID1991
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:11:03 PM

Posted 04 October 2012 - 05:38 PM

Hi JSntgRvr

I apologize. I have been out of town. Returning Friday and will try your instructions.

Rgds

MID1991




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users