[jvincent90]

Hey, I have a toshiba laptop that still has vista. I had a couple bugs before on my computer but it wasn't really a big deal but now my computer repeatedly and randomly restarts and/or crashes. I am lucky to last this long to write this. I live in Queens, ny. What should I do or where should I go?

[Advertisements]

Hi and welcome to Geeks to Go.

Which exact version of Vista do you have, 32 Bit or 64 Bit ?

If unsure, click on Start(Vista Orb) >> right click on Computer >> Properties >> Look under the heading System and next to System type it will say either:-

32-bit Operating System

or

64-bit Operating System

[Dakeyras]

Hi and welcome to Geeks to Go.

Which exact version of Vista do you have, 32 Bit or 64 Bit ?

If unsure, click on Start(Vista Orb) >> right click on Computer >> Properties >> Look under the heading System and next to System type it will say either:-

32-bit Operating System

or

64-bit Operating System

[jvincent90]

32 bit

[Dakeyras]

Hi.

32 bit

Thank you for the clarification, lets check if the following will reveal anything as follows...

Scan with Farbar Recovery Scan Tool:

Please download and save Farbar Recovery Scan Tool to a Flash/USB drive.

Then insert the Flash/USB drive into your machine....

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Select US as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:


Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe and press Enter[/list] Note: Replace letter e with the drive letter of your flash drive.

• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please copy and paste the contents of the aforementioned notepad file in your next reply.

[jvincent90]

the log, as well as an image of what i see when my computer starts up. It shows up every time my computer turns on but i don't know what it means.

Attached Thumbnails

• 

Attached Files

•  FRST.txt   27.68KB   180 downloads

[Dakeyras]

Hi,

I have bad news I'm afraid.

One or more of the identified infections is the extremely severe Zero Access Rootkit plus undoubtedly other comprising malware!

OK since we are dealing with the aforementioned infection(s) I would be providing your good self with a disservice if I did not make you aware of the ramifications below:

This allows hackers to remotely control your computer, steal critical system information and Download and Execute files.

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Although an attempt could be made to clean this machine, it could never be considered to be truly clean, secure, or trustworthy. We could not say definitively that unknown and unseen malware will have been removed, nor will your system be restored to its pre-infection state. We cannot remedy unknown changes the malware may likely have made in order to allow itself access, nor can we repair the damage it may possibly have caused to vital system files. Additionally, it is quite possible that changes made to the system by the malware may impact negatively on your computer during the removal process. In short, your system may never regain its former stability or its full functionality without a reformat. Therefore, your best and safest course of action is a reformat and reinstallation of the Windows Operating System, and that is the course we strongly recommend.

Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

When Should I Format, How Should I Reinstall

I can attempt to clean this machine(anything I try may not be successful) but I can't guarantee that it will be at all secure afterwords.

Should you have any questions, please feel free to ask.

Please let myself know what you have decided to do in your next post.

[jvincent90]

if you recommend reformatting, I will do that. How should I go about it. Should I get windows 8?

[Dakeyras]

Hi.

Should I get windows 8?

I do not think your machine could fully support Windows 8, though you could check once it is stable again by clicking here and once on the web-page click on Download Upgrade Assistant.

Though in all probability your machine would be better suited with upgrading to Windows 7, which can be checked via the Windows 7 Upgrade Advisor.

Next:

if you recommend reformatting, I will do that. How should I go about it

Fair play, it appears your machine has what is known as a Recovery Partition which in turn can be invoked and which is defacto a a reformat and reinstallation of the Windows Operating System. So basically once this has been done your machine will back to as it was the first time your booted it up.

I will however need to know which exact modal of what appears to be a Toshiba machine you do have so I can in turn provide the correct advice/instructions etc.

[jvincent90]

I have a toshiba satilette L 305. Also I am compatible for windows 8.

[Dakeyras]

Hi.

Also I am compatible for windows 8.

Very good, then that is a viable option if you wish to upgrade your machines Operating System etc..

I have a toshiba satilette L 305

Thank you for the clarification, to invoke the Recovery Partition as follows:-

• Ensure your machine is powered down(not booted up)...Power up the machine and depress the Zero key until the Toshiba Recovery Wizard is loaded.
• Select the option Recovery of Factory Default Software >> Next> to begin the recovery
• Once complete, a message displays that the Hard-Drive has been recovered.
• Depress any key on the keyboard to restart the computer.
• Online PDF manual for the machine can be viewed/downloaded here.

Next:

Most new machines when shipped by the vendors tend to come with all kinds of dross pre-installed and if the inbuilt Recovery Partition is invoked like you just did with the Toshiba, basically it is back as was when first booted up etc.

So this application here is worth both downloading and running.

--------------

Install all critical updates and relevant service packs via Windows Update. For Vista the latest is SP2.

I would also ensure Internet Explorer is up-to date also. For Vista based machines it is IE9. Reason being even if you opt not to use IE as your main browser having a out of date version installed can leave any one machine vulnerable to malware.

The aforementioned should be available via Windows Update, if not can be downloaded from here.

Once the machine is updated and fully patched, I do advise visiting Windows Update periodically as Microsoft releases patches for Windows and other products regularly.

Plus check Automatic Updates is enabled.

--------------

Then install a Anti-Virus software solution, only ever have one of such installed and active in system memory at any one time.

Either of the below will suffice:-

• Avast! Free Antivirus.
• Microsoft Security Essentials.

Which ever of the above you choose to install, automatically checks for updates and downloads/installs them with every system reboot and or periodically if the machine is left running providing a internet connection is active.

I advise you also run a complete scan with this at least once per week.

--------------

Installing a specific Anti-Spyware application would be prudent, myself I recommend:-

Malwarebyte's Anti-Malware

During the installation process you will be offered the Malwarebytes' Anti-Malware Trial. Your choice to enable or not...

After installing, I advise check for updates and run a scan at least once per week.

--------------

Emergency Recovery Utility NT. I advice you consider installing this, as a means to keep a complete backup of your registry and restore it when needed. Instructions can be read here.

Myself I would actually create a new back up once per week as this along with System Restore may prove to be invaluable if something unforeseen occurs!

--------------

A custom Host-File is a further layer of protection whilst browsing online.

Either of the below will suffice:-

• MVPS Hosts File
• hpHosts

Only use one of the above!

--------------

Consider installing WinPatrol. This application alerts you about possible system hijacks, malware attacks and critical changes made to your computer without your permission.

Download it from here.

You can find information about how WinPatrol works here.

--------------

Finally, periodically visit the Secunia Online Software Inspector to ensure all third party software is up-to date. As many such as Adobe and Java related applications for example if out of date can be exploited by malware.

Or alternatively download/install and use FileHippo Update Checker...

[Dakeyras]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

[Dakeyras]

Topic re-opened...

--------------

Hi, sorry for the late reply.

Not a problem.

I couldn't start my comp without it restarting until recently. I tried what you said but when i press zero nothing happens but a noise . I used f8 to go to the recovery wizard but it says I need a cd

OK try this...

• Ensure your machine is powered down(not booted up)...Power up the machine and depress the Zero key, when the machine starts beeping release the Zero key.
• The Toshiba Recovery Wizard should now load.
• Select the option Recovery of Factory Default Software >> Next> to begin the recovery
• Once complete, a message displays that the Hard-Drive has been recovered.
• Depress any key on the keyboard to restart the computer.

[jvincent90]

Just to clarify depress means hold?

[Dakeyras]

Correct.

[Dakeyras]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.