Windows startup damaged by virus (blue screen)

[MuOfAries]

Hi all!

I'm sorry about the OTL LOG scan... but I can do no scans... always blue screens.

My problem isn't exactly the virus infection at the moment.
I cleaned it.
My problem is that Windows startup is damaged.

I cleaned the infection through the Kaspersky Rescue Disc...
But Windows still was getting blocked with the fake Police page every time I started it.

So I rebooted in command prompt mode and did system restore.

Since that moment, always blue screens.

Then I did another system restore using the advanced recovery tools... and it did it and rebooted and with CHKDSK it found TONS of errors in EACH kind of category test...

It solved all the errors, but now always happens what I wrote above, in the Current issues and Symptoms window.

No more startup: every time I turn the computer ON it doesn't startup...
Neither in normal mode, nor in Safe mode nor in Command prompt mode!!
Every time a Blue screen happens!
but very fast (I can't read the blue screen error codes).

If I use the windows advanced recovery menu, I can run the System Restore but it is UNABLE to restore any precedent point.

 

[Fiery]

Hi and welcome to MalwareTips!

I'm Fiery and I would gladly assist you in removing the malware on your computer.

PLEASE NOTE: The first 3 posts of ALL new members require approval by mods/admins. Please be patient if you don't see your post immediately after submitting it.

Before we start:

• Note that the removal process is not immediate. Depending on the severity of your infection, it could take a long time.
• Malware removal can be dangerous. I cannot guarantee the safety of your system as malware can be unpredictable. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system. Therefore, I would advise you to backup all your important files before we start.
• Please be patient and stay with me until I give you the green lights and inform you that your PC is clean.
• Some tools may be flagged by your antivirus as harmful. Rest assure that ALL the tools we use are safe, the detections are false positives.
• The absence of symptoms does not mean your PC is fully disinfected.
• If you are unclear about the instructions, please stop and ask. Following the steps in the order that I post them in is vital.
• Lastly, if you have requested help on other sites, that will delay and hinder the removal process. Please only stick to one site.

<hr>
Download Farbar Recovery Scan Tool from the below link:
<ul><li>For 32 bit systems download <a title="External link" href="http://download.bleepingcomputer.com/farbar/FRST.exe" rel="nofollow external"><>Farbar Recovery Scan Tool</></a> and save it to a USB/flash drive.
</li>

<li>Plug the flashdrive into the infected PC.</li>

<li>Enter <>System Recovery Options</>.</li>

<>To enter System Recovery Options from the Advanced Boot Options:</>
<ul>
<li>Restart the computer.</li>
<li>As soon as the BIOS is loaded begin tapping the<> F8</> key until Advanced Boot Options appears.</li>
<li>Use the arrow keys to select the <>Repair your computer</> menu item.</li>
<li>Select <>US</> as the keyboard language settings, and then click <>Next</>.</li>
<li>Select the operating system you want to repair, and then click <>Next</>.</li>
<li>Select your user account an click <>Next</>.</li>
</ul>

<li>On the System Recovery Options menu you will get the following options:</span>
<pre>Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt</pre>
<ol>
<li>Select <>Command Prompt</></li>
<li>In the command window type in <>notepad</> and press <>Enter</>.</li>
<li>The notepad opens. Under File menu select <>Open</>.</li>
<li>Select "Computer" and find your flash drive letter and close the notepad.</li>
<li>In the command window type <><span style="color: #ff0000;">e</span>:\frst.exe</> and press <>Enter</>
<>Note:</><span style="color: #ff0000;"> Replace letter <>e</> with the drive letter of your flash drive.</span></li>
<li>The tool will start to run.</li>
<li>When the tool opens click <>Yes</> to disclaimer.</li>
<li>Press <>Scan</> button.</li>
<li><>FRST</> will let you know when the scan is complete and has written the <>FRST.txt</> to file, close the message.
<li>Type exit</li>
<li>Please copy and paste FRST.txt in your next reply</li></li>
</ol>
</ul>

 

[MuOfAries]

Dear Fiery,
thank you very much.
I see that you master very well this problems!
I am sorry for my delay, but I have a heavy exam in a few days... and I'm studying, I had no time to put my hands on the computer.
So a friend of mine came and fixed it, nor I know how did he do!

Anyway, when I'll be free from this exam, if you think that this is the case, I could run the scan and paste the log anyway to check if it is really clean.
What do you think?
Thanks a lot.

 

[Fiery]

Hi,

Take your time, no hurries . Your PC is probably still infected. THe Farbar scan won't delete anything unless I tell it to. It is more of a diagnostic tool.