Guest Dusty Posted November 17, 2008 Posted November 17, 2008 I ended up getting antivirus xp 2008. It had disabled ctrl alt delete and other functions. I shut the computer down and tried to start it back up and I got this screen saying my computer was infected. It then went to this blue screen that talks about dumping physical memory, etc. I tried rebooting into safe mode and it would get to the user profile screen. I have tried selecting administrator as well as the other logins and it will go into the welcome screen then the computer restarts. I have tried booting windows from a windows xp cd and acts like the cd is blank (which I know it is not). I put in a windows 2000 cd and it gives me 4 different options in the screen that comes up. What will happen if I allow it to install windows 2000? Will I lose everything on my hard drive? Does anyone have any suggestions about what I can do to my computer since I cant boot into safe mode? Quote
Guest Malke Posted November 17, 2008 Posted November 17, 2008 Dusty wrote: <span style="color:blue"> > I ended up getting antivirus xp 2008. It had disabled ctrl alt delete and > other functions. I shut the computer down and tried to start it back up > and > I got this screen saying my computer was infected. It then went to this > blue screen that talks about dumping physical memory, etc. > > I tried rebooting into safe mode and it would get to the user profile > screen. I have tried selecting administrator as well as the other logins > and it will go into the welcome screen then the computer restarts. > > I have tried booting windows from a windows xp cd and acts like the cd is > blank (which I know it is not). > > I put in a windows 2000 cd and it gives me 4 different options in the > screen that comes up. > > What will happen if I allow it to install windows 2000? Will I lose > everything on my hard drive?</span> You don't want to install Win2k! Yes, you will lose everything on your hard drive. It may be possible to salvage this install but it really depends on the severity of the infection (you may have other infections also), your skill, and your patience. From your description of the machine's behavior, personally I'd just grab your data and do a clean install. It is completely possible to get the data without being able to boot into Windows. Let me know if you need help with that. Here are the general instructions: If you are infected with XP Antivirus or Antivirus 2009/10, here are removal steps: http://www.bleepingcomputer.com/malware-re...-antivirus-2009 http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions) Removal instructions for Antivirus 2010: http://www.malwarebytes.org/forums/index.php?showtopic=6703 Removal instructions for Antivirus 2009: http://www.malwarebytes.org/forums/index.php?showtopic=5178 These may work for you and all may be well. However, in many cases the computer will also be infected with Zlob and/or Vundo trojans and protected by a rootkit. These machines are extremely difficult to clean. If your machine is one of these cases, either get guided help at one of the specialty forums below OR back up your data and do a clean install of Windows. It is your choice. If you are unsure how to back up your data or how to do a clean install, you can take your machine to a local computer professional. I don't recommend using BigComputerStore/GeekSquad types of places. PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS. http://aumha.org/downloads/hijackthis.zip http://aumha.net/ - Click on the HijackThis forum. Read the announcement and the stickies first . http://www.atribune.org/forums/index.php?showforum=9 http://aumha.net/viewforum.php?f=30 http://www.bleepingcomputer.com/forums/forum22.html http://www.dslreports.com/forum/cleanup http://www.cybertechhelp.com/forums/forumdisplay.php?f=25 http://www.geekstogo.com/forum/Malware_Rem...o_Here-f37.html http://www.malwarebytes.org/forums/index.php?showforum=7 http://gladiator-antivirus.com/forum/index.php?showforum=170 http://spywarewarrior.com/viewforum.php?f=5 http://forums.techguy.org/54-security/ http://forums.tomcoyote.org/ http://www.thespykiller.co.uk/index.php?board=3.0 http://forums.subratam.org/index.php?showforum=7 When this is over, create and implement a backup strategy because Stuff Happens All The Time. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest Dusty Posted November 19, 2008 Posted November 19, 2008 Thanks, I will check out the forums you listed. How would I go about getting my data without booting into windows? I think that is my only choice since I can't get past the "welcome" screen. Also, is there a way to get to DOS and reformat from there? "Malke" wrote: <span style="color:blue"> > Dusty wrote: > <span style="color:green"> > > I ended up getting antivirus xp 2008. It had disabled ctrl alt delete and > > other functions. I shut the computer down and tried to start it back up > > and > > I got this screen saying my computer was infected. It then went to this > > blue screen that talks about dumping physical memory, etc. > > > > I tried rebooting into safe mode and it would get to the user profile > > screen. I have tried selecting administrator as well as the other logins > > and it will go into the welcome screen then the computer restarts. > > > > I have tried booting windows from a windows xp cd and acts like the cd is > > blank (which I know it is not). > > > > I put in a windows 2000 cd and it gives me 4 different options in the > > screen that comes up. > > > > What will happen if I allow it to install windows 2000? Will I lose > > everything on my hard drive?</span> > > You don't want to install Win2k! Yes, you will lose everything on your hard > drive. It may be possible to salvage this install but it really depends on > the severity of the infection (you may have other infections also), your > skill, and your patience. From your description of the machine's behavior, > personally I'd just grab your data and do a clean install. It is completely > possible to get the data without being able to boot into Windows. Let me > know if you need help with that. > > Here are the general instructions: > > If you are infected with XP Antivirus or Antivirus 2009/10, here are removal > steps: > > http://www.bleepingcomputer.com/malware-re...-antivirus-2009 > http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions) > > Removal instructions for Antivirus 2010: > http://www.malwarebytes.org/forums/index.php?showtopic=6703 > > Removal instructions for Antivirus 2009: > http://www.malwarebytes.org/forums/index.php?showtopic=5178 > > These may work for you and all may be well. However, in many cases the > computer will also be infected with Zlob and/or Vundo trojans and protected > by a rootkit. These machines are extremely difficult to clean. > > If your machine is one of these cases, either get guided help at one of the > specialty forums below OR back up your data and do a clean install of > Windows. It is your choice. If you are unsure how to back up your data or > how to do a clean install, you can take your machine to a local computer > professional. I don't recommend using BigComputerStore/GeekSquad types of > places. > > PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS. > > http://aumha.org/downloads/hijackthis.zip > http://aumha.net/ - Click on the HijackThis forum. Read the announcement and > the stickies first . > http://www.atribune.org/forums/index.php?showforum=9 > http://aumha.net/viewforum.php?f=30 > http://www.bleepingcomputer.com/forums/forum22.html > http://www.dslreports.com/forum/cleanup > http://www.cybertechhelp.com/forums/forumdisplay.php?f=25 > http://www.geekstogo.com/forum/Malware_Rem...o_Here-f37.html > http://www.malwarebytes.org/forums/index.php?showforum=7 > http://gladiator-antivirus.com/forum/index.php?showforum=170 > http://spywarewarrior.com/viewforum.php?f=5 > http://forums.techguy.org/54-security/ > http://forums.tomcoyote.org/ > http://www.thespykiller.co.uk/index.php?board=3.0 > http://forums.subratam.org/index.php?showforum=7 > > When this is over, create and implement a backup strategy because Stuff > Happens All The Time. > > > Malke > -- > MS-MVP > Elephant Boy Computers - Don't Panic! > FAQ - http://www.elephantboycomputers.com/#FAQ > > </span> Quote
Guest Malke Posted November 19, 2008 Posted November 19, 2008 Dusty wrote: <span style="color:blue"> > Thanks, I will check out the forums you listed. How would I go about > getting > my data without booting into windows? I think that is my only choice > since I can't get past the "welcome" screen. > > Also, is there a way to get to DOS and reformat from there?</span> DOS isn't involved in XP at all. This is how you do a clean install of Windows: http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To http://www.elephantboycomputers.com/page2....talling_Windows - What you will need on-hand Here are some suggestions for retrieving your data: 1. Pull the drive and slave it in a computer running a working install of XP/Vista. Depending on the target drive's characteristics, you may need a drive adapter; i.e., laptop-to-IDE or a SATA controller card, etc. A usb/firewire external drive enclosure works very well, too. Use the working Windows Explorer to copy the data to the rescue system's hard drive and then burn the data to cd or dvd. 2. Or pull the drive and put it in a USB external drive enclosure. Attach to a working install of XP/Vista and copy the data off that way. 3. You can also boot the target computer with either a Bart's PE or a Linux live cd such as Knoppix and retrieve the data that way. http://www.knoppix.net http://www.nu2.nu/pebuilder/ - Bart's PE Builder I think #3 is the easiest route. Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest Dusty Posted November 19, 2008 Posted November 19, 2008 You just answered the million dollar question for me in #2. I was assuming that if I bought the USB housing and put either of my two HD's that it would just be plug and play and that no data would be lost. Though, everyone I have asked has told me that I would lose all of my data (I am not trusting their answers though, especially after one of those people told me to just flash my bios to fix my pc). I do have a copy of Unbuntu around here somewhere, would that work? Otherwise I would probably have to order a copy of knoppix (no access to a cd burner). Once I install one of the open source OS's would I just be able to access my files the same as usual? I would be installing it as a dual partition right? Thanks again for all of your help. "Malke" wrote: <span style="color:blue"> > Dusty wrote: > <span style="color:green"> > > Thanks, I will check out the forums you listed. How would I go about > > getting > > my data without booting into windows? I think that is my only choice > > since I can't get past the "welcome" screen. > > > > Also, is there a way to get to DOS and reformat from there?</span> > > DOS isn't involved in XP at all. This is how you do a clean install of > Windows: > > http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To > http://www.elephantboycomputers.com/page2....talling_Windows - What > you will need on-hand > > Here are some suggestions for retrieving your data: > > 1. Pull the drive and slave it in a computer running a working install of > XP/Vista. Depending on the target drive's characteristics, you may need a > drive adapter; i.e., laptop-to-IDE or a SATA controller card, etc. A > usb/firewire external drive enclosure works very well, too. Use the working > Windows Explorer to copy the data to the rescue system's hard drive and > then burn the data to cd or dvd. > > 2. Or pull the drive and put it in a USB external drive enclosure. Attach to > a working install of XP/Vista and copy the data off that way. > > 3. You can also boot the target computer with either a Bart's PE or a Linux > live cd such as Knoppix and retrieve the data that way. > > http://www.knoppix.net > http://www.nu2.nu/pebuilder/ - Bart's PE Builder > > I think #3 is the easiest route. > > Malke > -- > MS-MVP > Elephant Boy Computers - Don't Panic! > FAQ - http://www.elephantboycomputers.com/#FAQ > > </span> Quote
Guest Malke Posted November 19, 2008 Posted November 19, 2008 Dusty wrote: <span style="color:blue"> > You just answered the million dollar question for me in #2. I was > assuming that if I bought the USB housing and put either of my two HD's > that it would > just be plug and play and that no data would be lost. Though, everyone I > have asked has told me that I would lose all of my data (I am not trusting > their answers though, especially after one of those people told me to just > flash my bios to fix my pc). > > I do have a copy of Unbuntu around here somewhere, would that work? > Otherwise I would probably have to order a copy of knoppix (no access to a > cd burner). > Once I install one of the open source OS's would I just be able to access > my > files the same as usual? I would be installing it as a dual partition > right?</span> Actually, I meant to say that I thought #2 was the easiest for most people. My apologies for my slip. Just get an external hard drive enclosure (useful to have anyway), set the jumpers on your hard drive to Master if it's IDE (SATA doesn't have jumpers), and attach it via USB to your working computer. Of course you won't lose any of your data by doing that. You can use Ubuntu or Knoppix, but you don't install it. You use it as a Live CD. This means you boot with it and the Linux OS runs in memory, not touching your hard drive. Here are general instructions for data retrieval with Knoppix just in case you want them for now or the future: You will need a computer with two cd drives, one of which is a cd/dvd-rw OR a usb thumb drive with enough capacity to hold your data OR an external usb/firewire hard drive formatted FAT32 (not NTFS) . To get Knoppix, you need a computer with a fast Internet connection and third-party burning software. Download the Knoppix .iso and create your bootable cd. Then boot with it and it will be able to see the Windows files. If you are using the usb thumb drive or the external hard drive, right-click on its icon (on the Desktop) to get its properties and uncheck the box that says "Read Only". Then click on it to open it. Note that the default mouse action in the window manager used by Knoppix (KDE) is a single click to open instead of the traditional MS Windows' double-click. If you want to burn CD/DVDs, use the K3b program. My understanding is that you can now write to an NTFS partition from Linux. If you wish to do this, Google for instructions. http://www.knoppix.net Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ Quote
Guest saad Posted December 6, 2008 Posted December 6, 2008 or you can download avg anti virus software and that removes it to i used that when antivirus 2009 got in to my com "Dusty" wrote: <span style="color:blue"> > I ended up getting antivirus xp 2008. It had disabled ctrl alt delete and > other functions. I shut the computer down and tried to start it back up and > I got this screen saying my computer was infected. It then went to this blue > screen that talks about dumping physical memory, etc. > > I tried rebooting into safe mode and it would get to the user profile > screen. I have tried selecting administrator as well as the other logins and > it will go into the welcome screen then the computer restarts. > > I have tried booting windows from a windows xp cd and acts like the cd is > blank (which I know it is not). > > I put in a windows 2000 cd and it gives me 4 different options in the screen > that comes up. > > What will happen if I allow it to install windows 2000? Will I lose > everything on my hard drive? > > Does anyone have any suggestions about what I can do to my computer since I > cant boot into safe mode?</span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.