Windows 7 - Repair Install does nothing??

I have a 5 yr/old HP laptop (an upgraded zv6130us) with win 7 pro x86 and Microsoft Security Essentials. Somehow got a ie google redirect virus. Used malwarebytes to clean it and other trojan malware off. It no longer redirects, but it was buggy. It no longer recognized any usb devices & niether command prompt nor ctrl-alt-delete worked.

So I begin to try to repair it. I power it off, unplug the battery etc - nope. I reinstall the chipset drivers - nope. No restore points available. I pop in the win 7 disc and select repair your computer then use command prompt. Can't run sfc /scannow (recieved a message to reboot), chkdsk was normal, startup repair can't repair anything.

So I then try a repair install. It is successful, but upon first boot I recieve a message indicating NET framework version 4 was damaged, and setup was repairing it. Minutes and a reboot later, I launch the OS.

1. my desktop background is gone unlike the other repair installs I've ever done

2. usb devices are still not recognized: "unknown device"

3. command prompt still does not open

4. ctrl-alt-delete also still doesn't work

I wanted to keep my programs, data and settings. I will not trust MSE anymore for anyone.

What's next here???

Malwarebytes' Anti-Malware 1.46
Malwarebytes

Database version: 4181

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

6/8/2010 4:56:50 PM
mbam-log-2010-06-08 (16-56-50).txt

Scan type: Full scan (C:\|F:\|)
Objects scanned: 181685
Time elapsed: 1 hour(s), 17 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Windows\System32\ddhcpcsvc.dll (Trojan.BHO) -> Delete on reboot.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{6e1a356c-0f17-4008-44c2-0c0b2fc77e79} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6e1a356c-0f17-4008-44c2-0c0b2fc77e79} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6e1a356c-0f17-4008-44c2-0c0b2fc77e79} (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\System32\ddhcpcsvc.dll (Trojan.BHO) -> Delete on reboot.
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010 00B.wid (Trojan.Vundo) -> Delete on reboot.

Want to see if there are any more infected files or hidden bugs on the system there?

Having seen one system lately hit with a bug that actually locked the owner out by creating a totally new admin account where even a boot in safe mode was ??? pointless except for creating a desktop someone suggested something quite a bit more thorough then most protections out there but runs as a stand alone tool to perform a complete system scan and removal of anything with a malicious code found.

The Vipre Rescue Program simply creates a new temp folder to unpack files into and run out of with a command prompt type dos gui where you can watch as it goes through an entire drive in a few minutes. You might want to give this one a try to see what else is tucked away on the system there. VIPRE Rescue - VIPRE Computer Recovery Solution from Sunbelt Software

I am completely confused...

Frustrated last night, I left the laptop on all night. At one point it went into stand by then hibernation. Resumed it this afternoon so I could reboot into safe mode.

I connected my ipod to it to charge it only to find out that it was recognized by the computer. Confused, I connected a flash drive to it. It was also recognized.

At a whim, I pressed ctrl-alt-delete and it worked. So I tried command prompt. Nope, it did not work.

So I booted it into safe mode and ran combofix out of curiosity. As combofix loaded, wierd things began happening. The screen turned blue but did not bsod, flashed on/off a few times, then I saw what looked like command prompt pop up as combofix loaded. Combofix itself could not run since the version I had was old.

So, out of curiosity, I tried opening command prompt. It did, but in full screen mode. Had to type exit to close it.

I am rather confused here.

I am still going to run VIPRE just in case anything is still left on the laptop, then I'll reboot and install Norton IS.

I suggest a clean install if the problems persist. It sounds like maybe the virus still has remnants.

I would zero the HD before clean reinstall. Any data pulled off should be scanned on it's disk or stick before reimporting. Scan the Windows 7 DVD too.

Boot Windows 7 DVD REpair console, click through to Recovery TOols list, open a Command Line , type:

DISKPART
LIST DISK
SELECT DISK # (replace # with Windows 7 target HD #)
CLEAN ALL
Exit

Now reboot into Windows 7 installer to Custom install using Drive Options to Create New partition and format.

From what I've seen the Vipre is quite thorough at detection of any infected files as well as things hidden in downloads along some freewares. The restore points should be wiped by turning off the system restore feature and later back to see new ones created.

As for total nuking a drive of everything with no chance of recovering data you should a good security tool like Eraser. Eraser That one repeatedly writes patterns while others continuously write binary 0s in order to insure no traces of anything are left.

First let's see how well things go since wiping a drive is generally a last not first resort to consider.

Okay I learned my lesson

After another broken repair install. CMD still doesn't work and now no wireless. Niether Malwarebytes nor Norton find anything. BTW: trying to install 7 sp1 failed & told me to a repair install.

So I am going to reformat and do a clean install on this laptop. Too bad I can't rep on such an old thread.

It sounded all too well like you were running into all this from something being corrupted in the registry or missing system files even possible bad ram.

While you are at it you may want to run memtest or another stress tester just to rule out any possibiliy of a bad dimm being present. Bad ram is known for all kinds of headaches.

On one old old case being looked over for a few days only 512mb had been available until getting in there and reseating the pair of dimms where it now shows 1gb in System. Something you generally wouldn't look at can often be the source of numerous problems until found.

Be sure to wipe the HD first in case you have infection.

After install, install lean mean free Microsoft Security Essentials instead of the more bloated Norton, then use the Windows Firewall. This can improve performance greatly.