windows and ubuntu won't boot after bsod, possible virus

exeviss

New member
Local time
12:46 AM
Messages
33
I was browsing the internet and found this site

Hexen wads - Doomworld Forumshexen-wads/

when I used my mouse wheel to scroll down the page I noticed the screen lagging before completely freezing. I hit restart only to be greeted by a blue screen. I have a dual boot system with windows 7 and ubuntu 14.04. I can get into grub but I cant boot windows or linux now. Just windows in safe mode which gives me hope. I also checked for restore points but there aren't any. I thought they were automatic. I'm really worried so I'm going to post this now before I go to bed. I'll get any additional details you guys need in the morning. I just hope I dont have to move all my files in safemode to an external hdd and reinstall everything from scratch.
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
exevass mate have you looked for restore points from further back see my pic to see how to get them.

You need to go to Contro Panel > Back up and Restore and open system restore and when you get to the screen in the pic tick it and Enter / OK
 

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
I don't have the option available to show more restore points. Mine doesn't even show a single point.

edit: Here's the debug file requested in the BSOD posting instructions.

edit #2: Apparently I have a trojan called vbcrypt. It just showed up in an avg scan.
 
Last edited:

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
Leo I haven't set up debugging stuff yet sop cannot comment yet but the system which would be nice to have in System specs bottom left makes life a lot easier for us.

Having said that I can see from some of the info you sent the system is a pretty good set up and why you have got this option is strange being a system feature.

Though I did not have a restore et up point on this machine until I set one to go . http://www.sevenforums.com/tutorials/648-restore-backup-user-system-files.html

Now you could run these for starters
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
http://www.sevenforums.com/tutorials/433-disk-check.html < if necessary include the /f and /r in the command line as per Option2
 

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
I think vbcrypt is causing the problem. Do you have any advice on dealing with it?
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit

My Computer My Computer

At a glance

Windows 7 Home Premium 64 bitAMD A45 GBIntegrated Radeon
Computer type
PC/Desktop
Computer Manufacturer/Model Number
HP
OS
Windows 7 Home Premium 64 bit
CPU
AMD A4
Memory
5 GB
Graphics Card(s)
Integrated Radeon
Hard Drives
500 gb WD
Antivirus
360 TS
Browser
IE
Are you sure this is the correct course of action? It makes no mention of not being able to boot unless in safe mode.
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
Just my opinion, and I am just writing my thoughts, but, it does not appear as if the system is infected. Another thread was started in System Security:
http://www.sevenforums.com/system-security/356822-vbcrypt-trojan-cant-boot-windows-7-linux-2.html

Not sure what a Rescue disk would do. I would be hesitant to use it at this point.

The dual boot pc boots into W7 Safe Mode, but not to Ubuntu.

Would first try to get the PC to boot into Windows 7...perhaps there is something scrambled in the Safe Mode Boot code.

Presume that Windows 7 was installed on the PC, and Ubuntu was added later, however, if I understand correctly, the Windows 7 partition was not resized, and Ubuntu was installed on a separate drive. If this is not the case, please correct!

IMO, whatever is wrong has to be looked at by someone who has knowledge of dual booting Windows 7 and the Ubuntu grub, etc...
 
Last edited:

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Your correct I installed ubuntu after windows on a separate HDD. Maybe the problem is from the improper shutdown? Whenever I boot into safe mode it says recovered from an improper shutdown. My computer completely froze so I thought restarting it would be the correct course of action. AVG did find vbcrypt in safe mode though.

Edit: Ok I'm pretty sure this problem is related to the improper shutdown. I'll post the dump file if necessary. I looked at the Event Viewer, I wouldn't know how to spot any suspicious stuff in there but There were critical errors relating to improper shutdown.

vbcrypt definitely popped up in that AVG scan I ran a while back but I don't know if that trojan could cause problems like this. Should I try to run FRST from safe made to see if it makes any difference?
 
Last edited:

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
Should I try to run FRST from safe made to see if it makes any difference?

Yes!! Good idea.

When you run it, please, also tick these boxes:
ListBCD
Addition.txt

Since perhaps there is something scrambled in the Boot code, let's see what shows.

Thanks!
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Hope these help.
Thanks
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
exeviss,

FRST shows: Could not access BCD
(Boot Configuration Data)

Asking for help on this issue. Looks like EasyBCD may be a player here.

In the meantime, will check the FRST report further to rule out malware.

Your patience is appreciated.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
Let's see if the following works to find out Boot Manager and Loader info...

Please run a Command Prompt as Administrator:

Start Menu > All Programs > Accessories > Command prompt (right-click and select: Run as administrator)

Next, please type in the following command, and press: Enter

bcdedit /enum /v


To post the data, left-click the upper left small icon, and select: Edit > Select all
Then: Edit > Copy

Open Notepad, and Paste the data.

Close out of the command prompt by typing in: exit

Please post the Windows Boot Manager and Loader info from Notepad in your reply.


Thanks!
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
I'll get right on it and edit my post when I get the info.

edit:bcdedit /enum /v doesnt find anything. results below
 
Last edited:

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
Thank you, Greg!

exeviss,

When you get to:

2. Try booting into Safe Mode with Networking to install, update and run a full scan with Malwarebytes.

Please post the results of Malwarebytes Anti-Malware (MBAM) before you proceed.

I am leery of using Windows Defender Offline (Item #3 on the list) in some failure to boot (possible BCD type) situations. So, before you proceed to that, let's see what MBAM shows.


Thanks.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
Computer type
PC/Desktop
Computer Manufacturer/Model Number
An ol' eMachines
OS
Windows 7 Home Premium
Internet Speed
Fine for me...I'm retired!
MBAM came up clean and safe mode works fine so I don't think we'll need to use windows defender.

Should I proceed to step 5?

5. Once the System is clean if it won't start boot into System Recovery Options via the F8 menu or disk as shown in tutorial, run Startup Repair repeatedly up to 3 separate times with reboots in between each - no matter what it reports.
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bit
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
Did you try the Kaspersky rescue disk mate I can not see if you have unless it is buried somewhere ??
 

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
Back
Top