Re-installing Windows XP Professional trouble

[slsawyer69]

Ok, here is my problem. We had this virus and I kept getting rid of it but
it kept coming back so I was reading somewhere how to permanently get rid of
it. The article told me to download ccleaner , updated version of java and
something else. then it told me to reboot pc in safe mode and run ccleaner.
Well my pc would not go into safe mode so the article said to manually get
the pc in safe mode go to start hit run and thin type msconfig in the box
this will bring up the screen to slect safe mode, it did and I selected that
mode. Here is where the major problems start I am on the balck and white
screen I select safe mode and pc boots and comes back to the black and white
screen again so I select normal mode because at this time I am thinking "uh
oh" after selecting boot in normal mode the pc boots and I come back to the
black and white screen again. I try this several times and it is just a
vicious never ending circle. I have this thought lets put the windows xp cd
in and try re-installing windows. I do this and I go through all the screens
choose boot from disk and I get the Windows screen like its going to boot up
and then I get a screen with safe mode all around the outer edge and an error
that says "windows setup can not run in safe mode" I try again hit f8 to get
the black white screen to choose safe mode, normal mode, etc I choose normal
mode and it goes through the whole process and acts as though it is going to
load and I again get a screen with safe mode all around the edges and an
error that says "windows setup can't run in safe mode" This is an annoying
vicious circle can anyone help me before I lose my mind and throw this pc out
the window.

 

[Daave]

Ok, here is my problem. We had this virus and I kept getting rid of
it but it kept coming back so I was reading somewhere how to
permanently get rid of it. The article told me to download ccleaner
, updated version of java and something else.

What is the name of the virus?

What article are you referring to? It would be helpful to post a link to
it.

then it told me to
reboot pc in safe mode and run ccleaner. Well my pc would not go into
safe mode so the article said to manually get the pc in safe mode go
to start hit run and thin type msconfig in the box this will bring up
the screen to slect safe mode, it did and I selected that mode. Here
is where the major problems start I am on the balck and white screen
I select safe mode and pc boots and comes back to the black and white
screen again

So for some reason you are not able to run in Safe Mode. Sounds like
your virus is preventing you from doing this.

so I select normal mode because at this time I am
thinking "uh oh" after selecting boot in normal mode the pc boots and
I come back to the black and white screen again. I try this several
times and it is just a vicious never ending circle. I have this
thought lets put the windows xp cd in and try re-installing windows.

The thought is not necessarily a bad one, but I'm afraid you have
entered panic mode and you are not thinking as clearly as you normally
would. You have two choices:

1. Hold off on the thought of reinstalling Windows XP and try to remove
the virus, using advice you get in this newsgroup to help you accomplish
this (if this is feasible).

2. Decide that your PC has been compromised so much that you wish to
perform a Clean Install. If that's the case, you need to find a way to
save all your data if you haven't done so already. We can help with
that. Also, you need to make sure you have all your hardware drivers
handy. But don't start doing this without having a game plan first! It's
an involved process that is time-consuming.

I do this and I go through all the screens choose boot from disk and
I get the Windows screen like its going to boot up and then I get a
screen with safe mode all around the outer edge and an error that
says "windows setup can not run in safe mode" I try again hit f8 to
get the black white screen to choose safe mode, normal mode, etc I
choose normal mode and it goes through the whole process and acts as
though it is going to load and I again get a screen with safe mode
all around the edges and an error that says "windows setup can't run
in safe mode" This is an annoying vicious circle can anyone help me
before I lose my mind and throw this pc out the window.

It sounds like you are booting into the mucked up version of Windows on
your hard drive instead of booting off the CD. But instead of diving
into this (that is, a Repair or Clean Install), let's try to address the
issue and *then* determine what your course of action should be. Please
answer the following questions:

1. What is the name of the virus?

2. What is the Web page that had removal instructions?

3. What is the make and model of your PC?

4. What Service Pack level are you cuurently at? And what Service Pack
level is your XP Pro installation CD?

5. Do you have access to an external hard drive? (If not, you should get
one!)

6. Which antivirus and antispyware programs do you have installed on
your PC?

 

[slsawyer69]

What is the name of the virus?

**Trojan vundo.h

What article are you referring to? It would be helpful to post a link to
it.
**http://www.ehow.com/how_4682197_com...ce=yahoo&utm_medium=ssp&utm_campaign=yssp_art

So for some reason you are not able to run in Safe Mode. Sounds like
your virus is preventing you from doing this.


The thought is not necessarily a bad one, but I'm afraid you have
entered panic mode and you are not thinking as clearly as you normally
would. You have two choices:

1. Hold off on the thought of reinstalling Windows XP and try to remove
the virus, using advice you get in this newsgroup to help you accomplish
this (if this is feasible).

** not feasible already tried to reinstall that is where I am at right now.
seems as though I am now in safe mode and need to get out so that windows set
up can run properly and its not letting me get out of safe mode. definently
was in panic mode and had no game plan...ugghhh

2. Decide that your PC has been compromised so much that you wish to
perform a Clean Install. If that's the case, you need to find a way to
save all your data if you haven't done so already. We can help with
that. Also, you need to make sure you have all your hardware drivers
handy. But don't start doing this without having a game plan first! It's
an involved process that is time-consuming.


It sounds like you are booting into the mucked up version of Windows on
your hard drive instead of booting off the CD. But instead of diving
into this (that is, a Repair or Clean Install), let's try to address the
issue and *then* determine what your course of action should be. Please
answer the following questions:

1. What is the name of the virus?
Trojan Vundo.h

 

[Daave]

Hello, slsawyer69. If you would like to reply inline (which is
absolutely fine), please make sure to have a blank line above and below
what you write so that attributions are accurate (also, it's much easier
to read!). A few more questions follow.

**Trojan vundo.h

**http://www.ehow.com/how_4682197_com...ce=yahoo&utm_medium=ssp&utm_campaign=yssp_art

I looked at that link and wasn't impressed, largely because of this
line:

"Finally youll need to run SUPERAntispyware, basic will do the trick but
if your familiar with torrents, grab the pro edition for a lifetime
subscription."

It's ironic that this fix includes a suggestion to download the
equivalent of a pirated program, considering that this very behavior
makes it more likely for many people to become vicitimized by malware in
the first place!

This guide is much better IMO:

http://www.bleepingcomputer.com/virus-removal/remove-vundo-virtumonde

If that doesn't work, a visit here should be helpful:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Sometimes, as you can see, removing malware can be time-consuming. And
for people who think it's possible their PCs have been compromised
beyond a certain point, it would make sense to perform a clean install:

http://michaelstevenstech.com/cleanxpinstall.html

Of course, if you are going to do this, you need to make sure all your
data is copied (preferably onto an external hard drive) off the PC first
(feel free to ask if you don't know where everything is located). Also
you need to make sure you have all the drivers on hand for all your PC's
hardware components. That is one of the reasons I had asked for the make
and model.

Then again, certain PC manufacturers provide a hidden recovery partition
that will give you a clean slate with less work (than the Clean Install
method outlined above). That's another reason I had asked for the make
and model of the PC.

Note that when one performs a clean install, you need to configure the
PC's BIOS to boot off the CD. What you described was an instance of
booting off your infected hard drive (which is the wrong way!).

** not feasible already tried to reinstall that is where I am at
right now. seems as though I am now in safe mode and need to get out
so that windows set up can run properly and its not letting me get
out of safe mode. definently was in panic mode and had no game
plan...ugghhh

But if you tried and it wouldn't let you install Windows, then no
additional damage was done. Therefore, it is arguably feasible. I'd try
the Bleeping Computer guide first if I were you. It won't hurt. But you
really should make sure the data is copied first! Again, that's why I
had suggested an external hard drive. And booting off a rescue CD
(examples: Knoppix, Ubuntu, Bart PE, UBCD4Win) will allow you to easily
copy the files. Post back if you would like guidance.

You really should get one!

Malware? We need a full name!

Also Norton is problematic. In addition to hogging a PC's resources and
affecting performance adversely, it can interfere with the running of
Windows System Restore.

If you can somehow remove the trojan and need to run System Restore, you
can try one of these methods:

1. Run it in the special Safe Mode with Command Prompt mode:

http://support.microsoft.com/kb/304449

2. An alternative (which is a bit involved) is the equivalent of a
manual System Restore:

http://support.microsoft.com/kb/307545

You could try a Repair Install if still no joy:

http://michaelstevenstech.com/XPrepairinstall.htm

But it's not as easy as it sounds. You would need to have IE at the IE6
version, for instance. Also, for best results, SP levels would need to
match. And there's never a guarantee that the malware would be gone!
That's why a Clean Install might need to be performed.

Unfortunately, as you can see, there is probably no easy quick fix. If
the above seems too daunting, a technician should be consulted. And make
sure you don't use a Geek Squad type!

 

[Stuckinviciouscycle]

Hello,

I am having the same issue trying to get out of safe mode. I misleading
application took over my computer. I tried to restart in safe mode to see if
I could get my antivirus to work, but I got the blue screen of death. Then I
decided to do the repair install. Everything started running, but eventually
it says Windows XP setup cannot run in safe mode. This happens even if I hit
F8 and try to get out of safe mode. Any suggestions? I too appear to be
caught in the vicious cycle.