White screen

Page 3 of 6 FirstFirst 12345 ... LastLast

  1. Posts : 143
    32 bit
       #21

    No he will not be able to boot into safemode with networking.Shell value has been hooked.

    Copy this tool to flash drive

    Emsisoft Emergency Kit Download

    Insert the flash drive,boot into command prompt.From command window launch this tool by navigating to flash drive

    Finish the scan,remove the infections,reboot the system.
      My Computer


  2. Posts : 16
    windows 7
    Thread Starter
       #22

    I was able to download both of those program and I am running the scans now. The hitman is finished and there are 3 trojans and 1 suspicious called iefram.dll and the path is C:\\Windows\System32\. The rest of the items are ignore and tracking cookies.
      My Computer


  3. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #23

       Note
    You will need a USB Flash Drive for this


    Download Farbar Recovery Scan Tool from the below link:
    For x32 (x86) bit systems download http://download.bleepingcomputer.com/farbar/FRST.exe Farbar Recovery Scan Tool and save it to a flash drive.
    For x64 bit systems download http://download.bleepingcomputer.com/farbar/FRST64.exe Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    Restart the computer.
    As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    Use the arrow keys to select the Repair your computer menu item.
    Select US as the keyboard language settings, and then click Next.
    Select the operating system you want to repair, and then click Next.
    Select your user account an click Next.
    To enter System Recovery Options by using Windows installation disc:
    Insert the installation disc.
    Restart your computer.
    If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    Click Repair your computer.
    Select US as the keyboard language settings, and then click Next.
    Select the operating system you want to repair, and then click Next.
    Select your user account and click Next.
    On the System Recovery Options menu you will get the following options:
    Startup Repair

    System Restore

    Windows Complete PC Restore

    Windows Memory Diagnostic Tool

    Command Prompt

    Select Command Prompt
    In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
    The tool will start to run.
    When the tool opens click Yes to disclaimer.
    Press Scan button.
    FRST will let you know when the scan is complete and has written the FRST.txt to file, close out this message, then type the following into the search box:
    services.exe
    Now press the Search button
    When the search is complete, search.txt will also be written to your USB
    Type exit and reboot the computer normally
    Please copy and paste both logs in your reply.(FRST.txt and Search.txt)
      My Computer


  4. Posts : 16
    windows 7
    Thread Starter
       #24

    Should I remove the infected programs from the computer before I put in the usb?
      My Computer


  5. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #25

    Are you referring to the virus ? If not the flash drive should have the FRST file that you downloaded and placed inside the flash drive . Restart the computer to get to the command prompt and run the FRST PROGRAM.
      My Computer


  6. Posts : 16
    windows 7
    Thread Starter
       #26

    Yes, the Viruss
      My Computer


  7. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #27

    Remove it with HITMAN and then restart and launch the FRST using the tutorial I posted
      My Computer


  8. Posts : 143
    32 bit
       #28

    FRST log is not needed.You should able to access the desktop now.Run scans using tools like malwarebytes and TDSSkiller.

    FRST logs are useful only in cases where system is unbootable.
      My Computer


  9. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #29

    If the user can't get into save mode the programs you're mentioning is useless .

    The FRST will scan in recovery console mode . The virus is not loading the shell. We could fix that this way

    Open Registry inside command prompt . Type in REGEDIT and press Enter if that doesn't work type C:\Windows\System32\Regedit.exe and Navigate to
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

    In the right side of the window locate "Shell" and right click on it. Click on Modify.
       Note
    The default value data is Explorer.exe

    If you see something else written in this window remove it and type in Explorer.exe (you can write down whatever else was written in the value data section - this is a path of the rogue execution file) - use this information to navigate to the rogue executable and remove it.

    Restart the PC
      My Computer


  10. Posts : 16
    windows 7
    Thread Starter
       #30

    Ok, when I get to the command promt is says
    X:\Sources>
    It won't let me erase it and when I type in either prompt it says that it is
    not recognized as an internal or external command, operable program or batch file
      My Computer


 
Page 3 of 6 FirstFirst 12345 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:25.
Find Us