Inactive Rootkit.agent C:\WINDOWS\system32\drivers\ubschvbx.sys

[Broni]

You'll be booting from a CD, Windows won't be involved, so no blue screens.

 

[Lahta]

Sorry, I do not have a windows xp cd. The computer is my son's whose dad got it for him and the disk is 350 miles away. i do not know anyone who has one. It looks like this is beyond my capability and I will probably have to bring the pc to someone to fix. Thanks for your help.

 

[Broni]

Did you try to create hard drive test CD?

 

[Lahta]

Did you try to create hard drive test CD?

Exactly what is that? (I feel like I'm going in circles now! )

 

[Broni]

My post #24.

 

[Lahta]

The hard drive test was good. I tried to go through #24 again and no look. Windows recovery still goes to the BSOD and will not boot normally.I do not know anyone with a cd. Is there another way?

 

[Broni]

Well, it all started, when you ran something, I didn't ask for:

I went ahead and ran malware and it looked good and then avast

I suspect, some system files has been removed.
At this point, you'll have to try to find/borrow Windows CD, so we can run repair installation.
I don't see any other option.

 

[Lahta]

I finally got a windows xp cd!

 

[Broni]

Run Windows repair installation: http://www.geekstogo.com/forum/topic/138-how-to-repair-windows-xp/

 

[Lahta]

After the license agreement screen, I pressed F8, but instead of showing the previous windows xp installations it shows a list of existing partitions? It shows a "C:" partition1 (which is of course where all the data is with 152578 MB), an unpartioned space on "C" and a "D" partition1? What should I do? Choices are to set up windows on selected items, create a partition or delete a partition.

 

[Broni]

It looks like Windows installation is corrupted beyond repair.
Do you have important data there?

 

[Lahta]

Yes and no. It is my son's computer and he didn't want to loose a bunch of stuff. He has a band (school) program but I am sure we can get that back running. Is there a way to back up the data?

 

[Broni]

There are several ways to back up your data.
1. Slave your hard drive in another computer
2. Buy USB hard drive enclosure (ca $20)
3. Create following CD an boot from it. It'll allow you to navigate through your hard drive and save your data to USB flash drive:

Let's see, if we can look at your computer booting from an external source.

Please download OTLPE (filesize 120,9 MB)

• When downloaded double click on OTLPENet.exe and make sure there is a blank CD in your CD drive. This will automatically create a bootable CD.
• Reboot your system using the boot CD you just created.
  • Note : If you do not know how to set your computer to boot from CD follow the steps here
• Your system should now display a REATOGO-X-PE desktop.
• From there you'll be able to see your hard drive and access your data

 

[Lahta]

Success! Windows is up and running. But, that's all. There are not even any icons on the desktop. Having trouble setting up the internet connection,,,keep getting the message tthat we need to install a network adapter. Looking at the devices through device manager they all appear to be recognized?

 

[Broni]

Without knowing what you actually did, I can't comment

 

[Lahta]

Without knowing what you actually did, I can't comment

Gee thanks! And thanks - for your guidance .

 

[Broni]

Is it some secret to what you did?