My COM had Torjon SpyWear on it Now im cant boot up

[EddieLawRocls]

This is what i did, when i found out i had this virus on my COM , I used AVG
free sypwear , once i installed it and had it scan my COM , it said you have
to reboot to take off the virus, so i did , when it restarted it went right
to the LOG IN ICON
which i never had before Because im the only one thats on this COM

Ok so i click on it , its says starting windows, then its says real fast
saving Settings
then logs off , it go right back to the long in Icons ,

It does this in safe mode too, I try to use XP repair installation . it
went trough all the steps still the same thing, can some one help me
i have a NOTE BOOK DELL INESPIRON 8100 if i cant get this to boot back up
with out taking it to a teach how can i get the files off this HD when its
a note book i do have another one just like it , but you cant use the HD as a
slave any help would be great thanks
Eddie

 

[Terry]

Have a look at this http://support.microsoft.com/kb/892893

Hope this helps.

 

[PA Bear [MS MVP]]

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.

 

[EddieLawRocls]

Hi PA Bear

How do i use the internet when i cant get windows to start up
when i power up the COM , its starts up just like it should then when the
black XP window is starting windows , it goes to the ICONs like if you have
2 people using the same COM , so i press on the ICON that says my name and
it says Starting windows then says saving Files like if i was logging off,
then say logging off And then it goes back to the windows ICON again , And
it does the same thing in Safe mode too. Now i can press F8 should i say i
with safe mode with network ? im using another COM right now , thats how im
sending this messages thanks for your help let me know what you think
Eddie

 

[EddieLawRocls]

thanks terry i will read it , but i cant get on the internet with that COM
Eddie

 

[Malke]

thanks terry i will read it , but i cant get on the internet with that
COM Eddie

You have to get all the tools/updates for malware removal from a different,
known-clean computer. Since you can't start Windows at all, you'll need to
either slave the drive in another computer and scan from there or work from
a rescue system (Bart's PE, Linux live CD w/NTFS drivers, or other rescue
CD) outside the operating system. Only you know whether you have the skills
to do this.

The alternative, and probably the best solution for you, is to back up your
data with one of the above methods and then clean-install Windows.

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/page2.html#Reinstalling_Windows - What
you will need on-hand

Malke

 

[PA Bear [MS MVP]]

See my esteemed colleague Malke's reply.

Hi PA Bear

How do i use the internet when i cant get windows to start up
when i power up the COM , its starts up just like it should then when the
black XP window is starting windows , it goes to the ICONs like if you
have
2 people using the same COM , so i press on the ICON that says my name
and
it says Starting windows then says saving Files like if i was logging
off,
then say logging off And then it goes back to the windows ICON again ,
And
it does the same thing in Safe mode too. Now i can press F8 should i say
i
with safe mode with network ? im using another COM right now , thats how
im sending this messages thanks for your help let me know what you
think Eddie

 

[EddieLawRocls]

HI Malke sorry for the other reply using Terry as your name i just re read
your message im trying it now with Bart's PE i hope this works thanks so
much i will let you know

 

[EddieLawRocls]

Hi Malke
So far i made the boot CD from Bart PE builder , i put it in the CD
it comes up with the Bart PE background with the GO icon
at the botton left , So i got this far , i look at all the things in the
GO botton what do i do next , or is there something i can read to help me
along, I look at something that looked like the Explore when you click in C:
you would see everthing that was under it , i didnt see any of my files doc,
i saw a folder that said Eddies music i had alot of folders on my desk top
, not there , anyway if you can help me from here that would be great
thanks
Eddie

 

[Malke]

Hi Malke
So far i made the boot CD from Bart PE builder , i put it in the CD
it comes up with the Bart PE background with the GO icon
at the botton left , So i got this far , i look at all the things in
the
GO botton what do i do next , or is there something i can read to help
me
along, I look at something that looked like the Explore when you click in
C:
you would see everthing that was under it , i didnt see any of my files
doc,
i saw a folder that said Eddies music i had alot of folders on my desk
top
, not there , anyway if you can help me from here that would be great

Sorry, but I find the above post very hard to understand. The point of using
a Bart's PE is to 1) scan for viruses/malware using one of the appropriate
plugins; 2) retrieve your data by copying it onto an external hard drive
(or a second internal hard drive if that's your situation).

For help using Bart's, post in one of their active user forums.

Malke

 

[EddieLawRocks]

Hi Malke
sorry about the post , its been a long time sense i worked on computers but
its all coming back to me,

i understand what you want me to do with Bart PE NOW

its a notebook i dont have a slot to put another HD to it , I could get a
Adapter Cable To Go Laptop To IDE Hard Drive. This way i could use my desk
top computer to retrieve my data .

But if the bad HD is used as a slave Drive can i still scan win XP for
Viruses ?
i know it well scan the files if i ask it to scan what ever the Slave drive
is just wanted to know that i really would like to see if i can get it to
log in befoer i get the cable and use my desk top if we can .

Ok i tryed to use a CD with a download of viruses/malware MSRT removal
that you told me to use . But it wont work , i use my good COM to get the
files burned it on a CD , But when i put the CD in my CDrom drive on the
notebookl , It just freeze the COM . see im not sure if i can take out the
Brat PE Cd out . and put that MSRT in ,

you said to use the appropriate Plugins how do i get the plugins in the
bad HD when i cant use the CD ROM drive . what am i doing wrong , i know we
are close to fixing this , thanks again for your help sorry my other post was
hard to understand i hope i did better on this one
Eddie

 

[Malke]

EddieLawRocks wrote:

Comments inline:

its a notebook i dont have a slot to put another HD to it , I could get a
Adapter Cable To Go Laptop To IDE Hard Drive. This way i could use my
desk top computer to retrieve my data .

Or you could just get an external drive enclosure and pop the drive into it.
In my shop I use a USB adapter which can connect to either a laptop or
desktop hard drive. Either way, this isn't very expensive.

But if the bad HD is used as a slave Drive can i still scan win XP for
Viruses ?
i know it well scan the files if i ask it to scan what ever the Slave
drive
is just wanted to know that i really would like to see if i can get it
to log in befoer i get the cable and use my desk top if we can .

Yes, you can scan the files. No, you obviously can't log on because you
won't be booting into the laptop's Windows install.

Ok i tryed to use a CD with a download of viruses/malware MSRT removal
that you told me to use . But it wont work , i use my good COM to get the
files burned it on a CD , But when i put the CD in my CDrom drive on the
notebookl , It just freeze the COM . see im not sure if i can take out
the Brat PE Cd out . and put that MSRT in ,

Sorry, I don't know what's happening there. Perhaps the problems with your
computer are physical and have nothing to do with viruses. There's no way
for me to know. If the CD drive doesn't work on your laptop, that has
nothing to do with Windows or viruses. Are you saying that the CD you made
is now stuck in the drive? Start the laptop and as soon as it starts press
the release button for the drive to see if it will open. If the CD drive
isn't opening, this is a physical problem and you'll need to either call
the laptop mftr.'s tech support or take the machine to a competent local
computer shop. I don't suggest using a BigComputerStore/GeekSquad type of
place.

you said to use the appropriate Plugins how do i get the plugins in the
bad HD when i cant use the CD ROM drive . what am i doing wrong , i know
we are close to fixing this , thanks again for your help sorry my other
post was hard to understand i hope i did better on this one

You must fix your optical drive problem first. I have no idea what you're
doing wrong because I can't see your computer. The plugins are added when
you create the Bart's PE disk but obviously if your laptop's CD drive is
broken you need to address that first.

Malke

 

[EddieLawRocks]

Hi Malke
no the CD rom is not broken , it works fine , I can put the Brat PE CD in
my Drive and run the com and it boots to Brats PE , So what your saying is
the plug in's are on the Barts pe boot CD i made ? If so how do i find them
? Meaning when i press the GO button what do i look for. thats were im
lost,

What i meant in the other reply about CD rom not workin was i thought i had
to use a Virus remover CD to remove the virus, So when i took Barts CD out
of my Cd drive and put the Virus remover CD in , it did work everything
stopped .

so i guess i need to find how to start up the MRST program from Brats PE CD
let me know and sorry again for not being right to the point
we are getting close heheh thanks again
Eddie

 

[Malke]

Hi Malke
no the CD rom is not broken , it works fine , I can put the Brat PE CD in
my Drive and run the com and it boots to Brats PE , So what your saying
is
the plug in's are on the Barts pe boot CD i made ? If so how do i find
them
? Meaning when i press the GO button what do i look for. thats were im
lost,

What i meant in the other reply about CD rom not workin was i thought i
had
to use a Virus remover CD to remove the virus, So when i took Barts CD
out
of my Cd drive and put the Virus remover CD in , it did work everything
stopped .

so i guess i need to find how to start up the MRST program from Brats PE
CD let me know and sorry again for not being right to the point
we are getting close heheh thanks again

Actually, I don't think we are getting close. I really think taking the
machine to a shop is something you should consider, but of course that's
your business.

You need to spend some time reading about how to create and use a Bart's PE
CD. Go to their site and their forums.

Malke

 

[EddieLawRocks]

thanks for your time

Actually, I don't think we are getting close. I really think taking the
machine to a shop is something you should consider, but of course that's
your business.

You need to spend some time reading about how to create and use a Bart's PE
CD. Go to their site and their forums.

Malke