PLZZ HELP - system restarting automatically - URGENT

Solved
By dsoumil
Jul 26, 2012
  1. hello.
    I had malware on my pc and I succesfully removed it using windows tool.

    everything was working fine until I decided to instal microsoft security essentials.


    after couple of minutes it shows 2 trojans found and windowss gives me a dialog box saying "WIndows has encountered an critical error" and it says it will restart in 60 seconds.


    now whenver I boot my pc after a couple of mins the error comes and pc restarts.
    I tried booting in safe mode also. same thing happens within couple of minutes.


    please help. I cant afford reformatting because crutial data is there on my pc and if I loose it I may have to fail my semester.

    thanks in advance
  2. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ==============================================

    What Windows version is it?
  3. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    its windows 7 ultimate x84 sir
  4. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to a flash drive.
    For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you will get the following options:

      • Startup Repair
        System Restore
        Windows Complete PC Restore
        Windows Memory Diagnostic Tool
        Command Prompt
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

    Next...

    Re-run FRST again.
    Type the following in the edit box after "Search:".

    services.exe

    Click Search button and post the log (Search.txt) it makes to your reply.

    I'll expect two logs:
    - FRST.txt
    - Search.txt
  5. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    I cannot enter "repair my computer " as it says " the boot selection failed because a required device is inaccessable"
  6. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    I think you're not reading my instructions carefully.

    Tell me step by step what you're doing and at what EXACT point you're getting stuck.
  7. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    as u said I downloaded the file and put it on my flash drive.
    then I plugged the flash drive into the infected pc while it was turned off.
    then I turned on my pc and then pressed f8 to enter the selection screen
    then I selected " repair my pc"
    then I got the error "the boot selection failed because a required device is inaccessable"
  8. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    can I just run that sofware when my desktop loads.
    because I have 1 minute till my pc restarts
  9. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    That tool won't work from within Windows.
    Hold on...
  10. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

  11. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    We can try something else but I need to know on what date the issue started.

    You will need a USB flash drive.

    Download GETxPUD.exe to the desktop of your clean computer
    • Run GETxPUD.exe
    • A new folder will appear on the desktop.
    • Open the GETxPUD folder and click on the get&burn.bat
    • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
    • Click on Start and follow the prompts to burn the image to a CD.
    • Next download rst.sh to your USB flash drive
    • Remove the USB & CD and insert it in the sick computer
    • Boot the Sick computer with the CD you just burned
    • The computer must be set to boot from the CD
    • Gently tap F12 and choose to boot from the CD
    • Follow the prompts
    • A Welcome to xPUD screen will appear
    • Press File
    • Expand mnt
    • sda1,2...usually corresponds to your HDD
    • sdb1 is likely your USB
    • Click on the folder that represents your USB drive (sdb1 ?)
    • Confirm that you see rst.sh that you downloaded there
    • Press Tool at the top
    • Choose Open Terminal
    • Type bash rst.sh
    • Press Enter
    • After it has finished a report will be located on your USB drive named enum.log
    • Remove the USB drive and insert it back in your working computer and navigate to enum.log

      Please note - all text entries are case sensitive
    Copy and paste the enum.log for my review
  12. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    We posted at the same time.
    Read my previous reply.
  13. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    this issue started in past 12 hours.
    I am doing what u asked and ill post the logs in no time
     
  14. Broni

    Broni Malware Annihilator Posts: 45,217   +243

  15. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    55.8M Jul 27 04:17 /mnt/sdb1/Windows/System32/config/SOFTWARE
    15.8M Jul 27 04:17 /mnt/sdb1/Windows/System32/config/SYSTEM

    14.1M Dec 12 2010 /sda1/~/RP1/~SOFTWARE
    14.2M Dec 12 2010 /sda1/~/RP2/~SOFTWARE
    14.2M Dec 12 2010 /sda1/~/RP3/~SOFTWARE
    3.0M Dec 12 2010 /sda1/~/RP1/~SYSTEM
    3.2M Dec 12 2010 /sda1/~/RP2/~SYSTEM
    3.2M Dec 12 2010 /sda1/~/RP3/~SYSTEM
  16. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    We have couple of restore points but they go all the way back to Dec. 2010

    If it's OK with you we can try to use them.
    Let me know.
  17. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    what will be the consequences if I use restore points that long?
  18. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    Your data will be safe but you'll have to reinstall some programs and reinstall necessary Windows updates.
  19. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    so all my data files are programs such as my laters adobe illustrator and all that software will be there?
    and is there any other way we can go about this?
  20. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    Your data will be there but the program itself will have to be reinstalled (any program which was installed after 2010).
  21. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    that is two long years man. too many programs to keep track of.
    is there any other alternative we can try.
    I am willing to try anything here
  22. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    Do you have Windows 7 DVD?
  23. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    no. it has been a long time since I installed the os.
  24. dsoumil

    dsoumil Newcomer, in training Topic Starter Posts: 38

    is there any other way that I can boot into so that I can run the frst or something like that.
  25. Broni

    Broni Malware Annihilator Posts: 45,217   +243

    You can create Windows 7 DVD.
    See pinned topics at my forum: http://www.smartestcomputing.us.com/forum/98-windows-7/

    Then try option #2 from my initial instructions:

    See if it'll work for you.
    My bed time is coming so give it a whirl and I'll check on you tomorrow.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.