[AnnH]

I had a virus yesterday, from a fake Firefox alert. It ran a Perl.sh script, which made lots of pop-up pages appear, and some audio in the background. My AVG Antivirus never saw it. I ran did a full system scan, but AVG did not find anything. I ram Malwarebytes, and it found 6 registry errors (fixed them). Problems remained. I ran SuperAntispyware, and it found 444 threats (over 400 were cookies), and fixed them all. Problem first appeared gone, then reappeared. So, I ran OTLI, and it found a non-safe process called "Windows/ujucua.exe". I removed that file, and two schehduled tasks that OTLI also found. Then I rebooted. Windows came up to allow me to login, then said "Windows encountered a problem and needs to verify your license" (or similar). I can either accept or reject, but cannot get Windows to load. The accept gets me to a screen with my custom wallpaper, and a Windows Activation window, that has a blue screen in it. No clicking produces any content. I tried to boot from my Windows XP upgrade CD, and after loading all the files, I was told that Windows cannot find a currently installed product on my PC, and to please insert a full version of a Windows OS (Ugh!).
I am going to try to download the AVG boot disk, but is there anything faster I can do to fix this?
Running Windows XP Professional, had automatic upgrades running, so should have been at the latest service pack.

Ann

[Advertisements]

Sorry, should have titled "Windows will NOT load"...

Ann

[AnnH]

Sorry, should have titled "Windows will NOT load"...

Ann

[Salagubang]

Hi AnnH,

Welcome to Geekstogo. My name is Salagubang and I'll be helping you with this problem.

I am still a trainee so all my posts will be checked by an Expert. It's your advantage that there are two people looking at your log but responses may be a little delayed so please be patient.

• Please read all of my response through at least once before attempting to follow the procedures described. I would recommend printing them out, if you can, as you can check off each step as you complete it. If there's anything you don't understand or isn't totally clear, please come back to me for clarification.
  
• Please do not attach any log files to your replies unless I specifically ask you. Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you
  
• English is not my first language, so please do not use slang or idioms, as this makes it difficult to understand for me.

Does your computer have a recovery options available (brand and model please) or is it a custom build PC.

Lets try this first, if it doesn't work then proceed to PLAN B.

Reboot computer in Safe Mode then

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Under the Custom Scan box paste this in
  
  netsvcs
  drivers32
  /md5start
  winlogon.exe
  explorer.exe
  userinit.exe
  svchost.exe
  wininit.exe
  /md5stop
  %SYSTEMDRIVE%\*.*
  %systemroot%\*. /mp /s
  CREATERESTOREPOINT
  %systemroot%\System32\config\*.sav
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them if you need to start a new topic.

PLAN B

On the clean computer.

Creating a bootable USB using xPUD

• Please download the following files and save it to the desktop
  
  • Unetbootin.exe
  • xPUD latest version is xpud-0.9.2.iso
• Insert the USB device to make bootable to the computer. (Make sure that no other USB's are inserted)
• Double-click on unetbootin.exe to run
• Select Disk Image, ISO and in the space provided, enter the path location of xpud-0.9.2.iso (ex. C:\Documents and Settings\yourusername\Desktop\xpud-0.9.2.iso)
• Select USB Drive type and the drive letter assigned to your USB stick.
• Click "OK" and wait until the program finishes. You now have a bootable xPUD.
• Download the following tool and save it inside the bootable USB
  
  • rst.sh

Please note: if you prefer to create a bootable CD using xPUD, you may download the ISO image found here and burn it to a CD.



On the infected computer.

• Reboot your system using the xPUD bootable USB you just created.
  Note : If you do not know how to set your computer to boot from USB follow the steps here
• Your system should now display a xPUD desktop.
• Select on the File icon; on the right pane click on the "mnt" folder and highlight "sdb1" - this is your USB device.
  
  sda1,2...usually corresponds to your HDD
  sdb1 is likely your USB
• Click on the "Tool" menu and select Open Terminal
  
• In the open terminal window, type in the following:
  
  bash rst.sh
  
• Press "Enter" and let it run uninterrupted.
  (The program lists available Restore Points and will save a report enum.log located in the USB drive.)
• The program is finished when it say's "Done".
• Type "Exit" to close the terminal window.
• Please attached the enum.log file in your reply. (You may remove your USB drive when transferring log to a clean computer).

Please note: If you have an ethernet connection you can access the internet by way of xPUD (Firefox). You can perform all these steps on your sick computer. When you download the download will reside in the Download folder. It can be found under the File tab also. You can similarly access our thread by way of this OS too so you can send the logs that way.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.