Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

The Boot Configuration Data For Your PC Is Missing or Contains Error


  • This topic is locked This topic is locked
15 replies to this topic

#1 ThePie69

ThePie69

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 23 September 2014 - 01:57 PM

Does anyone no how to fix this? Yesterday I got a UAC Zero Access Virus and tried using windows repair disc to go back to a restore point. That just made everything worse and now I can't boot into windows at all. I have a multiboot PC (its set to just windows 8 and windows 7 right now, windows 7 being the biggest partition on the drive).

 

Recovery

Your PC needs to be repaired

 

The boot configuration data for your pc is missing or contains errors.

 

File:\Boot\BCD

Error code: 0xc000000f

 

20140923_143603.jpg


Edited by hamluis, 23 September 2014 - 02:02 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,030 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:09 PM

Posted 23 September 2014 - 03:05 PM

Can you boot into either of the two operating systems?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 23 September 2014 - 03:18 PM

No. What I have right now is a multiboot USB setup which has a Win7 repair disc iso on it. Right now I booted into that and it can't detect any versions of windows but it says it might have found a solution via a pop up, but when I click on restart and repair it shows a error saying it "couldn't save blah". So I just exit out of that and go to the next screen which has command prompt listed as the last option. I open cmd and I'm running a chkdsk /F /R G: right now. It's at 164337 out of 382192 files processed.

 

FYI: My windows 7 is on volume G and windows 8 is on volume E. I believe my C is the SYSTEM volume.

 

Also I wanted to take this time to explain the issue I'm going to have once I get it to boot into windows. Once at the login screen in windows you can type in your password and click log in and it will load your settings. Normal your desktop and your icons would show up afterwards but in this case (cause of the virus) it shows a black screen with a yellow box that says "This computer has been locked" and you can type in a password and click unlock which will do nothing no matter what, or you can click get password which opens up a 32bit legacy chrome browser that navigates you to a survey site. Not sure how to get rid of that virus yet either.



#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,030 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:09 PM

Posted 23 September 2014 - 03:26 PM

The virus is a rootkit.  You can run TDSSKiller or Malwarebytes AntiRootkit.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 23 September 2014 - 05:12 PM

Ok. If and I'm stressing if, the chkdsk fixes a issue and I'm able to boot to windows how am I supposed to run either of those programs if I can't do anything after the windows login screen?

#6 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 23 September 2014 - 05:56 PM

20140923_185326.jpg

I got the boot record all figured out. Just don't know what to do with this virus now...


Edited by ThePie69, 23 September 2014 - 05:58 PM.


#7 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 23 September 2014 - 09:56 PM

Bump. Does anyone no anyway of getting rid of this so I can use my laptop?

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,471 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:09 PM

Posted 23 September 2014 - 10:52 PM

I'll report this topic to appropriate helpers.

1. Please let us know what Windows version you have and if it's 32- or 64-bit.
2. Is the computer bootable in any mode?

Hold on there....


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#9 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 24 September 2014 - 08:06 AM

I have windows 7 64 bit. The computer starts normally and you then sign in to windows like you normally would. But instead of your desktop showing up afterwards you get the picture I posted above with the UAC box.

#10 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,030 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:05:09 PM

Posted 24 September 2014 - 08:45 AM

Please download TDSSKiller from here and save it to your Desktop.
 
1.  Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
 
 
tds2.jpg
 
2.  Check Loaded Modules, Verify Driver Digital Signature, and Detect TDLFS file system.
 
If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now.
 
 
2012081514h0118.png
 
3.  Click Start Scan and allow the scan process to run.
 
 
tds4-1.jpg
 
4.  If threats are detected select Skip or Cure (if available) for all of them unless otherwise instructed.
 
***Do NOT select Delete!
Click Continue.
 
 
tds6.jpg[/*]
 
5.  Click Reboot computer.
 
Please copy the TDSSKiller.[Version]_[Date]_[Time]_log.txt file found in your root directory (typically c:\) and paste it into your next reply.
 
 
___________________________________________________________________________________
 

Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 
mbam1_zps95cc812c.png
 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 
mbam1_zps98e7fba9.png
 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 mbam2_zps85f38f0c.png
 
3)  The scan will automatically run now.
 
mbamreplace_zps3ead4824.png
 
 
4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions
 
mbam4_zps23e52ad4.png
 
 
5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes
 
 mbam4_zps490948cc.png
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items.  Copy and paste this in your next post.

Edited by dc3, 24 September 2014 - 08:49 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#11 Laith225

Laith225

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Stockholm, Sweden
  • Local time:03:09 AM

Posted 24 September 2014 - 09:08 AM

It is a rootkit. If you have recover partiton then your screwed. And every computer have a hidden drive that tells the computers model and stuff like that. I think you might be screwed a lot.



#12 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,713 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:09 PM

Posted 24 September 2014 - 09:17 AM

Hello ThePie69,

I'm moving this topic to the log forum at the request of a malware removal specialist. The topic link will remain the same.

~ OB :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#13 Bud_91

Bud_91

  • Malware Response Team
  • 438 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:09 PM

Posted 25 September 2014 - 08:39 AM

Hi ThePie69,

I will be helping you now, so please stick with following my instructions.

Please respect my volunteered time and stay with me until I declare your computer clean. If you are going to be delayed for a while, please let me know.

Is the virus affecting your Windows 7 installation, the Windows 8 installation, or both? Do you know how to, and can you, enter the recovery environment?

Please answer my questions and then we can start fixing. :)

If I have not responded to your log in 36 hours, feel free to send me a PM.

If you would like to make a thank-you donation, please click here: btn_donate_SM.png

 

A.K.A. Buddierdl @ GeeksToGo.com


#14 ThePie69

ThePie69
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:09 PM

Posted 26 September 2014 - 11:54 AM

Hi ThePie69,

I will be helping you now, so please stick with following my instructions.

Please respect my volunteered time and stay with me until I declare your computer clean. If you are going to be delayed for a while, please let me know.

Is the virus affecting your Windows 7 installation, the Windows 8 installation, or both? Do you know how to, and can you, enter the recovery environment?

Please answer my questions and then we can start fixing. :)

Thank you guys for the help. First off I would like to say that I have everything fixed now. I had to use a bootable USB to do the system work because you can not run anything on the computer with this virus. It blocks all types of applications (ie, .exe, cmd, etc.). So running the scans above would not have worked. Although I did run those scans after wards to clean up and stray infections.

 

I do have one final question though, I noticed that when I go to start -> and then click on "lock" for locking the pc. Nothing happens which is unusual. Anyone no of a way to fix this?

lock.png



#15 Bud_91

Bud_91

  • Malware Response Team
  • 438 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:09 PM

Posted 29 September 2014 - 10:07 AM

It may be a leftover from the infection. Would you like to run a few scans to make sure the computer is clean? If so, please follow the instructions below. Otherwise, you should post a new thread in the Windows forum where others will have access to help you out.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Please download Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the all of the options are checked:/Users/ryanlavender/Downloads/Addition-7.txt

    FSS.gif
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

If I have not responded to your log in 36 hours, feel free to send me a PM.

If you would like to make a thank-you donation, please click here: btn_donate_SM.png

 

A.K.A. Buddierdl @ GeeksToGo.com





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users