Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

MS Removal Tool Virus - Can't get into Safe Mode / Disabled screen


  • This topic is locked This topic is locked

#1
bianca_e

bianca_e

    New Member

  • Member
  • Pip
  • 1 posts
Hello,

First of all I have Windows XP, HP computer, and Samsung SyncMaster 931bw monitor.

Today I discovered I was infected with the MS Removal Tool virus. I researched how to remove it, and began the suggested route of restarting the computer in Safe Mode.

I turned my computer off, restarted, the HP screen came up with the below options of <esc = boot menu> <f1 = setup> <f10 = system recovery>
I pressed F8 continuously to load Safe Mode.

A black screen with a cursor appeared for a second or two, then my screen switched to a floating message that slowly bounces around the screen (like a screensaver, etc) that says:
"Not Optimum Mode
Recommended Mode :
1440 x 900 60Hz
[?]
____
Analog"

It appears to me that the virus has somehow affected the screen drivers or something like that (I don't really know, just guessing). However, during my search on MS virus, no-one seemed to have this screen issue.

I rebooted again, and tried to get into Safe Mode over and over, to no avail.

I am able to get into <esc = boot menu> by pressing esc... but I'm not sure what to do from there?

I can also get into BIOS (Phoenix - AwardBIOS CMOS Setup Utility)
and have selected the first Boot Device as CD-ROM Group.

So basically, my screen WORKS, in that it's not broken, BUT it's just when trying to get into Windows either in Safe Mode or normal mode, it doesn't work and switches to the floating error screen.

What I'd like to know if there's any way to get to a System Restore point via BIOS?

I am going to do your unbootable system tutorial now and will post my results....

Thanks for reading.
  • 0

Advertisements


#2
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Hi, :)

:unsure:

Lets give this a try throughout an External Environment, which simply means you will need to burn a boot CD with especial tools. You will also need a flash drive to move information from the troubled computer to a working computer. It is the only way we can see the progress of our actions. Save these instructions in your flash drive as a text file (use notepad) so you can have access to these while in an external environment (PE).

Here is what you need to do.
  • Download OTLPEStd.exe to your desktop. NOTE: This file is 93.5MB in size so it may take some time to download.
  • Once downloaded, insert a blank CD in your burner and click on OTLPEStd.exe.The executable includes the OTLPE_New_Std.iso and a copy of imgburn, a program to burn .iso files. When executed, the application will extract both and start the burning process automatically.
  • Once the CD is burned, boot the Non working computer using the boot CD you just created.
  • In order to do so, the computer must be set to boot from the CD first
    Note : For information click here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to All
    • Change Standard Registry to All
    • Under the Custom Scan box paste this in


      /md5start
      UXTHEME.DLL
      eventlog.dll
      scecli.dll
      netlogon.dll
      cngaudit.dll
      sceclt.dll
      ntelogon.dll
      logevent.dll
      iaStor.sys
      nvstor.sys
      atapi.sys
      IdeChnDr.sys
      viasraid.sys
      AGP440.sys
      vaxscsi.sys
      nvatabus.sys
      viamraid.sys
      nvata.sys
      nvgts.sys
      iastorv.sys
      ViPrt.sys
      eNetHook.dll
      ahcix86.sys
      KR10N.sys
      nvstor32.sys
      ahcix86s.sys
      nvrd32.sys
      userinit.exe
      explorer.exe
      winlogon.exe
      ntoskrnl.exe
      volsnap.sys
      /md5stop

  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive.
  • Please post the contents of the C:\OTL.txt file in your reply.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP