[TerryL]

I raised another topic on a similar problem that I had with my laptop but I have raised this new topic to get some help and advice on the problem recurring on my desktop. I am now without any computing at home and have to work from the local library. See below for details of the problem:

My laptop problems (wouldn't reboot) occured after running a Super Antispyware scan, but I had not connected this to the problems I encountered,

I ran a Suoer Antispyware scan on my desktop and guess what - EXACTLY the same problem has now occurred. The desktop goes to the 'Windows starting up' screen and then the screen goes black and it starts re-booting.

I have tried to start in Safe Mode, and I have tried to go back to the last known good configuration but the PC just seems to loop whatever. When it is re-booting I think a message flashes up about being unable to find the boot record, but I can not read it properly as it flashes off the screen. Having messed up my laptop I am keen to take the best course of action to 'save' my desktop.

I am running Windows XP.

Any ideas as to what I can do to get round this problem, and have you come across Super Antispyware causing this sort of issue?

I am in your hands and would really appreciate some advice and something to try to get my desktop working again.

Thanks for any help you can offer as I'm now a bit stuck.

Cheers and thanks for your help and advice so far.

Terry

[Advertisements]

Well you could try booting from the windows xp cd and choosing the first "R" for recovery console when it asks. Note you will need the admin password for this. Once at the prompt you can type the following : chkdsk /r

let that run and when it is done type: exit

then try going to windows

[shard92]

Well you could try booting from the windows xp cd and choosing the first "R" for recovery console when it asks. Note you will need the admin password for this. Once at the prompt you can type the following : chkdsk /r

let that run and when it is done type: exit

then try going to windows

[TerryL]

I 'forced' a chkdsk and it reported no problems with the drive.

As a Super Antispyware scan caused identical problems on my laptop I feel sure that the scan has caused this problem with my desktop. Is nobody else out there experiencing problems?

I have this afternoon tried 'repairing Windows' - using Windows Set Up from my Windows XP disk.

It copied the files, went into Saving Configuration and then re-booted. The screen it went into showed Set Up will complete in approximately 39 minutes. Although there were a couple of errors reported it carried on to completion.

It rebooted, came up with the Welcome to Windows screen, and went through the 'let's set up your computer'. I answered the various questions (language, etc.) and then I pressed Finish, expecting to go on into Windows.

The PC rebooted, went on to the Windows is starting up screen... stays on that for a minute or two and then re-boots itself.

When I tried to run Recovery Console I hit return at the 'which operating system prompt' but instead of going into the Recovery Console it again went straight to rebooting.

It's as if something is deliberately blocking the PC from going beyond the Windows is starting up stage. Sounds malicious to me?

Is there anybody on Geeks to Go that has any idea of what else I can do? I'm based in South Manchester (UK) and would be happy to have a home visit if anyone knows a company or individual that can help?

Edited by TerryL, 31 July 2008 - 10:03 AM.

[TerryL]

Best Answer

As the trail on this thread seems to have gone cold, and as things have moved on I have raised a new thread.

This can be closed - thanks for the help on it.

[need2knowro]

PC won't boot after Super AntiSpyware Scan, PC just loops when trying to boot it.

I disabled the auto reboot option after pressing F8 during one of its many reboot cycles. It froze with a wonderful Blue Screen of Death. Read "STOP: c000021a came up followed by logon failed at 0xc0000135"

All I read online was "Re-Install Windows". But I wasn't having it. I jumped in the shower and thought about what I did. I ran a scan of Super AntiSpyware. But what exactly does that do. Besides scan the PC and eliminates files "It" claims are threatening. Of course this program like many others create a log of every scan. Cool, how do we get to it.

I have a boot CD. Get it here ( http://www.ubcd4win.com )It's a disc that while in the CD-rom when the computer starts, will load a virtual operating system. And not your Windows operating system cuz remember, it won't boot. So this cool virtual operating system allows me to access the files in the C: drive. And it unhides ALL folders & files. We need to get into you C:\Documents and Settings folder. Inside you will find several folders. Also user account folders. Very important you find the user account folder of the user account your were in when you scanned with Super AntiSpyware.
Once in the user account folder locate the Application Data folder. Inside you should see the SUPERAntiSpyware.com folder. (if not, you are in the wrong user account folder).
If you see it, open it. You might see yet another SUPERAntiSpyware.com folder. Inside that you will find a Logs folder. Inside that you should see a note pad named SUPERAntiSpyware Scan Log with a date.

open it. Mine looked like this,
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/21/2009 at 05:56 PM

Application Version : 4.0.1154

Core Rules Database Version : 3949
Trace Rules Database Version: 1891

Scan type : Complete Scan
Total Scan Time : 00:32:24

Memory items scanned : 318
Memory threats detected : 3
Registry items scanned : 5085
Registry threats detected : 25
File items scanned : 18379
File threats detected : 73

Trojan.Agent/Gen-MSFake
C:\WINDOWS\SYSTEM32\MSVCRT.DLL
C:\WINDOWS\SYSTEM32\MSVCRT.DLL
C:\WINDOWS\SYSTEM32\DLLCACHE\MSVCRT.DLL

Adware.Vundo/Variant-MSFake
C:\WINDOWS\SYSTEM32\LNORECE.DLL
C:\WINDOWS\SYSTEM32\LNORECE.DLL

Trojan.Downloader-CREW
C:\WINDOWS\SYSTEM32\RZMWEVPT.DLL
C:\WINDOWS\SYSTEM32\RZMWEVPT.DLL
HKLM\Software\Classes\CLSID\{11895E5D-3DC2-46D0-ADA2-0668A843C05e}
HKCR\CLSID\{11895E5D-3DC2-46D0-ADA2-0668A843C05E}
HKCR\CLSID\{11895E5D-3DC2-46D0-ADA2-0668A843C05E}\InprocServer32
HKCR\CLSID\{11895E5D-3DC2-46D0-ADA2-0668A843C05E}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{14B2B3C2-5568-41D4-BE09-C22632294A5e}
HKCR\CLSID\{14B2B3C2-5568-41D4-BE09-C22632294A5E}
HKCR\CLSID\{14B2B3C2-5568-41D4-BE09-C22632294A5E}\InprocServer32
HKCR\CLSID\{14B2B3C2-5568-41D4-BE09-C22632294A5E}\InprocServer32#ThreadingModel
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11895E5D-3DC2-46D0-ADA2-0668A843C05e}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{14B2B3C2-5568-41D4-BE09-C22632294A5e}

Parasite.WareOut
HKLM\Software\Classes\CLSID\{89DD5001-7374-5299-1401-8960A19C166A}
HKCR\CLSID\{89DD5001-7374-5299-1401-8960A19C166A}
HKCR\CLSID\{89DD5001-7374-5299-1401-8960A19C166A}\InprocServer32
ERTYDF.DLL

Adware.Vundo/Variant-Joke
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}#Version
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}\InprocServer32
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}\InprocServer32#ThreadingModel
HKCR\CLSID\{A8ECCEB5-94D6-4A18-9A43-FB2A3AAF9D92}\ProgID
Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\alpurbqh

Trojan.SpyFalcon
C:\WINDOWS\system32\oleext.dll

Trojan.Malware
HKCR\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}
HKCR\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}#IT
HKCR\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}#Bin
HKCR\CLSID\{357A87ED-3E5D-437d-B334-DEB7EB4982A3}#No

Malware.LocusSoftware Inc/PCPrivacyTool
C:\Documents and Settings\HP_Owner\Application Data\ultra\uninstall.bat
C:\Documents and Settings\HP_Owner\Application Data\ultra

Trojan.Agent/Gen-FakeAlert
C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\TEMP\13459.EXE

Trojan.Agent/Gen-Frauder
C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\TEMP\16059.EXE

Trojan.Agent/Gen
C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\TEMP\5226.EXE
C:\WINDOWS\SYSTEM32\5226.EXE.OLD

Adware.SysGuard/FakeAlert-C
C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\TEMP\C.EXE

Trojan.Agent/Gen-JSExploit
C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\TEMP\E.EXE

Adware.E404 Helper/Variant-N1
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\121973\121973.DLL.VIR
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\796525\796525.DLL.VIR
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\SYSLOC\SYSLOC.DLL.VIR

Trojan.Downloader-NtOsKernel
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\NTOSKRNL.DLL.VIR

Trojan.Unknown Origin
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\PPPCGM.EXE.VIR
C:\WINDOWS\SYSTEM32\FILESAFER23.EXE

Unclassified.Unknown Origin/System
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\SPHLP32.EXE.VIR

Trojan.Downloader-XLIB
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\XLIBGFL254.DLL.VIR
C:\WINDOWS\SYSTEM32\ULTRA\XLIBGFL254.DLL

Trojan.DOmen
C:\WINDOWS\SYSTEM32\CSPYS.EXE
C:\WINDOWS\SYSTEM32\DMACE.EXE
C:\WINDOWS\SYSTEM32\DMAOO.EXE
C:\WINDOWS\SYSTEM32\DMBZU.EXE
C:\WINDOWS\SYSTEM32\DMCFN.EXE
C:\WINDOWS\SYSTEM32\DMCVO.EXE
C:\WINDOWS\SYSTEM32\DMDWV.EXE
C:\WINDOWS\SYSTEM32\DMEOE.EXE
C:\WINDOWS\SYSTEM32\DMESO.EXE
C:\WINDOWS\SYSTEM32\DMEUI.EXE
C:\WINDOWS\SYSTEM32\DMEZJ.EXE
C:\WINDOWS\SYSTEM32\DMFFT.EXE
C:\WINDOWS\SYSTEM32\DMFML.EXE
C:\WINDOWS\SYSTEM32\DMGLI.EXE
C:\WINDOWS\SYSTEM32\DMGRN.EXE
C:\WINDOWS\SYSTEM32\DMGXP.EXE
C:\WINDOWS\SYSTEM32\DMHDL.EXE
C:\WINDOWS\SYSTEM32\DMHLE.EXE
C:\WINDOWS\SYSTEM32\DMHPZ.EXE
C:\WINDOWS\SYSTEM32\DMHWA.EXE
C:\WINDOWS\SYSTEM32\DMIEF.EXE
C:\WINDOWS\SYSTEM32\DMIHO.EXE
C:\WINDOWS\SYSTEM32\DMIOG.EXE
C:\WINDOWS\SYSTEM32\DMKKX.EXE
C:\WINDOWS\SYSTEM32\DMLHT.EXE
C:\WINDOWS\SYSTEM32\DMLZY.EXE
C:\WINDOWS\SYSTEM32\DMMOP.EXE
C:\WINDOWS\SYSTEM32\DMNFA.EXE
C:\WINDOWS\SYSTEM32\DMNXD.EXE
C:\WINDOWS\SYSTEM32\DMOSY.EXE
C:\WINDOWS\SYSTEM32\DMQBO.EXE
C:\WINDOWS\SYSTEM32\DMQKG.EXE
C:\WINDOWS\SYSTEM32\DMRXA.EXE
C:\WINDOWS\SYSTEM32\DMSBQ.EXE
C:\WINDOWS\SYSTEM32\DMSLQ.EXE
C:\WINDOWS\SYSTEM32\DMTIW.EXE
C:\WINDOWS\SYSTEM32\DMTPC.EXE
C:\WINDOWS\SYSTEM32\DMTQT.EXE
C:\WINDOWS\SYSTEM32\DMUFI.EXE
C:\WINDOWS\SYSTEM32\DMUFW.EXE
C:\WINDOWS\SYSTEM32\DMUNC.EXE
C:\WINDOWS\SYSTEM32\DMUSQ.EXE
C:\WINDOWS\SYSTEM32\DMXCV.EXE
C:\WINDOWS\SYSTEM32\DMXVV.EXE
C:\WINDOWS\SYSTEM32\DMYBU.EXE
C:\WINDOWS\SYSTEM32\DMZNZ.EXE
C:\WINDOWS\SYSTEM32\DMZYT.EXE

Trojan.HW-Qhost
C:\WINDOWS\SYSTEM32\HOWIPER.EXE

Trojan.Agent/Gen-FakeDropper
C:\WINDOWS\SYSTEM32\IEHELPER.DLL.OLD

Adware.SBSoft
C:\WINDOWS\SYSTEM32\VLBTI.DLL


So i decided to find all the .dll deleted from the C:\Windows\System32 folder. These might be important.
LONG STORY SHORT, I found these to be missing,
C:\WINDOWS\SYSTEM32\MSVCRT.DLL
C:\WINDOWS\SYSTEM32\DLLCACHE\MSVCRT.DLL
C:\WINDOWS\SYSTEM32\LNORECE.DLL
C:\WINDOWS\SYSTEM32\RZMWEVPT.DLL
C:\WINDOWS\system32\oleext.dll
C:\WINDOWS\SYSTEM32\ULTRA\XLIBGFL254.DLL
C:\WINDOWS\SYSTEM32\VLBTI.DLL

I looked for them on a working Windows XP machine. But I could only find the first one, MSVCRT.DLL.
I copied it and pasted it in both
C:\WINDOWS\SYSTEM32
C:\WINDOWS\SYSTEM32\DLLCACHE

Just in case. And WhooHoo. My machine booted.
get that file here, http://sandiegofoosb...iles/msvcrt.dll

Good Luck. Sorry if this did not fix your issue.

[PompeyWhite]

Ive had the same- my wifes laptop after a scan wont start, just gets caught in a startup repair loop- now my PC has done the same 15 minutes after a superantivirus scan- this CANT be a coincidence. 

[phillpower2]

Hello PompeyWhite,

 

Being that this thread is over ten years old I cannot see you getting any feedback from the thread starter, if you require assistance for yourself please start your own thread and someone will be happy to help you there.