Potential Infection - Unresponsive Computer

[cschaffe]

Still takes me to the blue screen of death.

[Angelfire777]

Can you copy the exact errors the BSOD showed?

[cschaffe]

A problem has been detected and windows has been shut down to prevent damage to your computer.

If this is the first time you've seen this stop error screen, restart your computer. If this screen appears again, follow these steps:

Check for viruses on your computer. Remove any newly installed hard drives or hard drive controllers. Check your hard drive to make sure it is properly configured and terminated. Run CHKDSK /F to check for hard drive corruption, and then restart your computer.

Technical information:

*** STOP: 0x0000007B (0xF7CAF524, 0XC0000034, 0x00000000, 0x00000000)

[Angelfire777]

Hi,

That stop error means that it can't somehow find the RC partition or it can't access its files. Not sure why it does that.

Can you repeat the steps posted in post #18 including a redownload of combofix.exe

I'll try to dig some more.

[cschaffe]

Here's the CF-RC.txt data from the most recent run - redid steps in posts 18 (& 9).

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons


Since this looks like what it did the last time I posted it, I'll go ahead and give a reboot a try and see if I get any different results.

[cschaffe]

Just did a reboot - no difference than before (same error).

[Angelfire777]

That doesn't look nice. I'll try to search for something.. If not, I will have to ask our experts. Hold on.

[Angelfire777]

Hi,

Click start > run > copy and paste:

chkdsk /r

If it asks if you want to schedule a check on reboot, enter "y" then reboot your machine.

After that, please reinstall Recovery console again by repeating the steps in post #18.

Tell me how it went.

[cschaffe]

CF-RC.txt
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

Did the chkdsk /r, but walked away so didn't see it complete. Should I do again and watch it?

Also, when I run combofix.exe, I get a Stack Overflow when it first starts, but it continues running. Is this an issue?

Still get the BSOD after doing all of this.

[Angelfire777]

Hi,

Did the chkdsk /r, but walked away so didn't see it complete. Should I do again and watch it?

No need for you to do that.

Also, when I run combofix.exe, I get a Stack Overflow when it first starts, but it continues running. Is this an issue?

To be honest, I'm not sure.


Did you remember the time when you first did this? and I told you that what you downloaded was the wrong setup (you downloaded home)? Did you try if recovery console worked at that time?

[cschaffe]

Originally Posted by Angelfire777

Did you remember the time when you first did this? and I told you that what you downloaded was the wrong setup (you downloaded home)? Did you try if recovery console worked at that time?

Yes. I tried it at that time as well and it didn't work either.

[Angelfire777]

Hi, sorry for the delay. I'm trying my best to get something..

Does the blue screen immediately come out when you click the option to start in recovery console? Or was there a progress bar before that happens?

Also, is this a legit copy of media center edition? Reason I asked is because a bootleg copy of this OS may cause problems with the recovery console.

[cschaffe]

Originally Posted by Angelfire777

Hi, sorry for the delay. I'm trying my best to get something..

Does the blue screen immediately come out when you click the option to start in recovery console? Or was there a progress bar before that happens?

There IS a progress bar before before the blue screen.

Also, is this a legit copy of media center edition? Reason I asked is because a bootleg copy of this OS may cause problems with the recovery console.

Yes, it came with the computer when we purchased it from Dell. It's not a bootleg.

[Angelfire777]

Does the bar load and then the BSOD? Or does it immediately show the BSOD?

[cschaffe]

It says "Starting Windows Recovery Console" with the bar along the bottom.

The status bar then zips along the bottom and completes. At that point, it switches to saying "Please Wait..."

Then, the screen goes black like it's going to start running something and the BSOD appears.

[Angelfire777]

I dug around and I can't find a solution..

BUT.. I may have something better than recovery console for you.

If you want, you can download this:

http://www.resqware.com/RescueBoot/Download.aspx

It will allow you to boot to your machine so you can recover your files in case of driver/malware corruption.

Here's how to use it: http://www.rescueboot.com/help/index.htm

Delete this folder: C:\cmdcons

then rename boot.bak to boot.ini

Let me know if that works for you.

[cschaffe]

Thanks for all of the help by the way. I went out of town right around your last post and haven't had a chance to look into this since. I've downloaed the rescueboot SW. I'll get it setup.

Thanks again for all of your help.

[Angelfire777]

Click start > run > copy and paste:

combofix /u

That will hide your system files, clear your system restore cache and uninstall combofix.


Here are some free programs I recommend that could help you improve your pc's security.

MVPS Hosts File
~You can download it from here
~I highly recommend this hosts file. You can learn more about this here

Install SpyWare Blaster
~You can download it from here
~You can read the tutorial on how to use Spyware Blaster here

Note: Make sure you update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Please check out Tony Klein's article "How did I get infected in the first place?"

Happy safe surfing!

Note: Please reply to this thread one last time so I could close it.

[cschaffe]

You may close this thread.

Thanks for all of your help.