Google redirect, now CPU won't even start in safe mode.

After adaware ran, it detected a Trojan. Itquarantineditandrequireda redraft. Nowmylaptop on cycles overage over trying to redraft and then I get blue screen that says fatal system error, system is shutting down. I have tried itinsafe mode and everything. What can I do. I have found my factory restored for xp media edition, butthatwill wipe all ofmyfiles won't it. HELP!

Hi,

Is this the same computer you are recieving help with here?
http://forums.whatthetech.com/index.php?sh…mp;#entry703075

If so please stay with that thread. Starting multiple topics will not help resolve this issue any faster.

Thanks

Unfortunately it is not the same CPU. Can you please help me? I Ned my files for work.

Hi Coy,

As long as it's not the same computer as you are working on in your other thread. Any fixes posted in this thread will be specific to this computer.

Do you have a working computer that we can use for downloading and transfering tools?

We may also need a CD and a blank usb storage device.


Have you tried Last Known Good Configuration?

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, a menu with options should appear;
• Use the arrow keys to select Last known Good Configuration, then press "Enter".

Did windows start?

Yes, I tried all of the choices in the f8 menu I do have one more CPU and my iPad I can use.

Hi Coy, Let's see if we can get a BSOB code. Reboot your computer and keep pressing F* like you did before. When the screen loads look for an option to “Disable Automatic Restart”. Use the arrow keys to highlight it and press enter. When the computer restarts it shouldn't reboot. You should see a blue screen with an error name and a set of codes. Please post the name and all of the code numbers as ther apper on the screen.

Windows login process systemprocess terminated unexpectedly with a status of 0x0000005 (0x00000000 0x00000000) is what it says.

Hi Coy, There should have been a code right before "Windows login process systemprocess terminated unexpectedly" Please post it.

Sorry for the delay, I had to put the baby to bed. The code is c000021a(fatal system error)

Hi Coy,

If you have ant problems with these steps please let me know. You will need access to a working computer, a CD and a USB to do the following:


Download GETxPUD.exe to the desktop of your clean computer

• Run GETxPUD.exe by double clicking it.
• A new folder will appear on the desktop.
• Open the GETxPUD folder and click on the get&burn.bat
• The program will download xpud_0.9.2.iso, and when finished, it will open BurnCDCC which will be ready to burn the image.
• Click on Start and follow the prompts to burn the image to a CD

Next we need to protect the USB storage device.

Download Flash_Disinfector.exe by sUBs and save it to your desktop.

• • Attach the USB storage device to the computer while holding down the shift key
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder…it will help protect your drives from future infection.
  
  Next we need to add a program to the usb device.
  
  Download driver.sh to your USB drive
• Remove the USB and insert it into the infected computer
• Boot the infected computer with the CD you just burned
• The computer must be set to boot from the CD,depending on your computer you can either do this by pressing F12 and selecting the CD as the first boot option or it can be set in the BIOS
• Follow the prompts
• A Welcome to xPUD screen will appear
• Click on File
• Expand mnt
• sda1,2…usually corresponds to your HDD
• sdb1 is usually your USB
• Expand your USB (sdb1)
• Confirm that you see the file driver.sh that you downloaded to the USB previously
• Press Tool on the top menu bar
• Choose Open Terminal
• Type bash driver.sh -f
• please note there is a space after the word bash and a space after .sh
• Press Enter
• You will be prompted to input a filename.
• Type the following:
  winlogon.exe
  
• Press Enter
• the script will search for this file.
• After it has finished a report will be automatically saved to the USB drive as filefind.txt

Transfer the usb device to the clean computer and post the contents of filefind.txt

Thanks

ok, I have retrieved my files from my cpu and re-installed to factory status. Should I use Webroot, McCaffee, Ad Aware SE or symantec. Should I use a combination of the three. Any advice is helpful. Thanks

Hi Coy,

Without knowing exactly what you where infected with I'd say that was a good choice.

Should I use Webroot, McCaffee, Ad Aware SE or symantec.

It depends on what you want. The thing to remember is you only need one of each type of security program.

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall.

McAfee and Symantec are antivirus programs and depending on which version you use may come with additional features such as antispyware and a firewall. These programs are also paid progams.

Webroot may or may not come with an antivirus program as does Ad-Aware. You would not want to install any version of a program that contains an antivirus program if you have installed McAfee or Symantec. Multipe antivirus programs will conflict and cause problems

You can also build a pretty good security system with free programs.

Antivirus programs

Avast
Help and support can be found here Avast Forum
AVG
Help and support can be found here AVG Forum
Antivir PersonalEditionClassic
Help and support can be found here Avira Personal Support Forum
MicroSoft Security Essentials
Help and Support

Resident antispyware (there are others)

Windows Defender OR Winpatrol

On demand antimalware (this one is very good)

Malwarebytes Anti-Malware

Firewalls
FIREWALL for tips, reviews and links to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware,IMO)

More tips and programs can be found HERE

You can download these programs to another computer and transfer them to the computer you have just reset. Don't go online without your security programs in place or you will most llikey get infected.

Your computer most likely came with a trial version of an antivirus program which would now be out of date. Should you decide to go with a different antivirus program you would need to uninstall the trial version first. Make sure whatever antivirus program you decide to use is up to date.

Once you are ready to go online the first thing you should do is make sure your Windows is up to date. You can do this either with Automatic updates or visiting the Windows Update site and getting what you need.

Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates.

- Ensure that Automatic Update is turned on so you get all the latest patches.
Click start, control panel, click Security Center.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.