Windows is starting up

[Guest]

I have a compaq laptop with windows xp pro. I had a virtumonde virus on my
computer wich norton security took care of. I dont know if this is the
problem but now I can not start my computer on normal mode. It will start on
safe mode. In safe mode how can I co back to a working copy of windows.
Thanks in advance for the information.

 

[Detlev Dreyer]

I have a compaq laptop with windows xp pro. I had a virtumonde virus on
my computer wich norton security took care of.

Apparently, it did not.

I dont know if this is the problem but now I can not start my computer
on normal mode. It will start on safe mode. In safe mode how can I co
back to a working copy of windows.

"Cleaning a Compromised System"
http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

 

[Newbie Coder]

Ever,

What was the name of the virus?

There are 3 ways:

1) In the boot menu where safe mode... is you can choose 'last known good
configuration'
2) System Restore to before you were hit by the virus
3) Both 1 & 2 above

 

[Newbie Coder]

Detlev,

You always point people to the same document, why? At least twice in the
past few hours. Did you write that article?

 

[Guest]

I have tried both of those thing and it didn't work. The wirus name is
virtumonde.

 

[Detlev Dreyer]

Detlev,

You always point people to the same document, why? At least twice in the
past few hours. Did you write that article?

Nope. What part of that article did you fail to comprehend?

 

[Newbie Coder]

Detlev,

I haven't bothered to go to that site, but see that you always copy/paste
the same thing in, that's all.

 

[Newbie Coder]

Ever,

This isn't a virus but is known as adware

Removal instructions:

http://www.symantec.com/security_response/writeup.jsp?docid=2003-120914-4108-99&tabid=3

You can download Spybot Search & Destroy free of charge. Just install,
update & scan your computer. If anything is shown in red then make sure you
delete it

Spybot:

English version:

http://www.spybot.info/en/mirrors/index.html

As you wrote 'wirus' I was thinking you were Polish. if so, here is the
Polish page:

http://www.spybot.info/pl/mirrors/index.html

Sorry if I misunderstood the language

 

[Guest]

I have repair windows with the cd but I still get the same thing. I have a
blue window and it saids Windows is starting up and dont go any further. I
can not go into the safe mode any more.

 

[Guest]

I have a compaq laptop with windows xp pro. I had a virtumonde virus on my
computer wich norton security took care of. I dont know if this is the
problem but now I can not start my computer on normal mode. It will start on
safe mode. In safe mode how can I co back to a working copy of windows.
Thanks in advance for the information.

Hi Ever,
You have a Viral malware from the Vundo family, try to Perform System
Restore before the Norton Removal of the Virtumonde and Run a scan from the
Link below or run Norton again and instead click Remove click Clean Item.
http://www.lavasoftusa.com/support/securitycenter/virtumonde_remover.php
After cleaning up, try to run Disk Cleanup and Defrag in Safe Mode.
Open a run command and type in:
sfc /scannow Click [OK] the System File Checker will repair any damaged
files/folders by this Viral/Adware, you need your XP CD handy to insert it in
if the system asked you to do so.
If still then you need to perform Repair/Install for XP, don't worry you
will not lose your Data ( although there is no guarantee, but seldom happen
but you can Backup if you get into Normal mode your important data).
How to Repair/Install XP:
http://www.michaelstevenstech.com/XPrepairinstall.htm

If you want help try one of many forums on the internet that help with the
analysis of the Hijackthis log:
=Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
HTH.
nass
===
www.nasstec.co.uk

 

[Guest]

I will do that as soon that I can reboot my computer again. Right now it is
getting worse every time I reboot.

I have a compaq laptop with windows xp pro. I had a virtumonde virus on my
computer wich norton security took care of. I dont know if this is the
problem but now I can not start my computer on normal mode. It will start on
safe mode. In safe mode how can I co back to a working copy of windows.
Thanks in advance for the information.

Hi Ever,
You have a Viral malware from the Vundo family, try to Perform System
Restore before the Norton Removal of the Virtumonde and Run a scan from the
Link below or run Norton again and instead click Remove click Clean Item.
http://www.lavasoftusa.com/support/securitycenter/virtumonde_remover.php
After cleaning up, try to run Disk Cleanup and Defrag in Safe Mode.
Open a run command and type in:
sfc /scannow Click [OK] the System File Checker will repair any damaged
files/folders by this Viral/Adware, you need your XP CD handy to insert it in
if the system asked you to do so.
If still then you need to perform Repair/Install for XP, don't worry you
will not lose your Data ( although there is no guarantee, but seldom happen
but you can Backup if you get into Normal mode your important data).
How to Repair/Install XP:
http://www.michaelstevenstech.com/XPrepairinstall.htm

If you want help try one of many forums on the internet that help with the
analysis of the Hijackthis log:
=Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
HTH.
nass
===
www.nasstec.co.uk