I could use some help...WindowsXP starts to load, then a quick Windows splash screen and it reboots. Using XP home edition, 32-bit, and I believe it's SP2 or 3.
It was infected with CryptoDefense...luckily, I found the section here on the virus and had the version that left the key on my computer, so I downloaded the decryption app from here and ran it on my machine. It took almost three weeks of running constantly before it finished (ran it in Safe Mode). Updated MalwareBytes, ran it and it cleaned up the machine. Installed my version of Kaspersky AV, ran it...it needed to do a "special" type of disinfecting...it deleted a few things, rebooted, and then continued...it was during the evening and showed that it would take 7 hours so I let it run all night. In the morning, I thought since it had been running for three weeks, I'd give it a break and shut it down for the day.
After getting home from work, I wanted to do a backup and that's when the problem started. It went to the "Windows was not shut down properly" screen.
Since then I've tried all of the options on this screen...also used the F8 key for the other boot-up options and they all behave the same...system reboots after a quick Windows splash screen.
I've tried disconnecting everything to no avail.
I pulled the HD, stuck it in an external drive device (USB) and connected it to my laptop...I could get to all the files and performed a backup with this setup. Ran CHKDSK but it found no errors.
I would still like to get it working as there are a lot of applications on it that I'd like to keep...I didn't bother keeping all of the original disks (we moved and I got rid of a lot!) since they wouldn't run on Windows7 (my laptop) and I wasn't going to spend the money on upgrades.
I didn't get rid of the WindowsXP disk, but since we've moved, I haven't been able to locate it...I know I should try a "repair" and I will if I can find it...
So here's what I know:
While trying Safe Mode, the last file shown is klbg.sys...it seems this is a Kaspersky file. I found somewhere that stated that the window shows the last file loaded successfully, so I don't know what it's trying to load next...I would guess another Kaspersky file.
Since the last change I made was to install Kaspersky, I'm afraid something went wrong in this area.
Using my laptop and the external drive device, is it possible to remove the Kaspersky application?