Solved BSOD 00000001E Crashes after entering Password

[webgal318]

. . . and will not go to desktop.

I have done the following:

Allowed the PC Repair Utility to run in an effort to repair any problems: No luck

Boot to Safe Mode with Networking in a effort to look for driver updates: goes to Blue Screen

I am running WDO full scan and will report results as soon as finished.

Thanks
-Sylvia

 

[x BlueRobot]

Welcome to the forums webgal318,

Since you are not able to access your files and desktop, then I would suggest following these steps:

• http://www.sevenforums.com/tutorials/220165-troubleshooting-steps-windows-7-a.html

We could also try using a Linux Live CD to rescue your files and data.

 

[webgal318]

WDO has been running for 90+ minutes and is still scanning. Preliminary results show malware (as seen in the program's message area) has been detected. Will repost again later.

 

[x BlueRobot]

Thanks for the update, make sure this malware is removed from your system. You may also post the names of the malware here if you like.

 

[webgal318]

Malware found with WDO are as follows:
VirTool Win 32/obfuscator.ACP;
Exploit:Java/CVE-2013-0422
Exploit:Java/CVE-2013-0422.C
Adware: Win32/Arcade Web
Exploit:Java/CVE-2013-1723

I hit the "remove all" button before closing, restarted, got only as far as "repair," ran repair, restarted PC, and finally attempted to start windows normally.
At this point the PC is running the Startup Repair again.

If this fails, I will shut PC down and try to enter Safe Mode with Networking.

 

[VistaKing]

Hi Webgal318

Can you run this for me please

Download DDS


Download



Click on the Save button. Save it to your desktop .
double-click on the DDS.com
On the Windows Security window Click on the Run button
On the DDS settings
put a check mark in attach.txt and then click on the Start button
Attach Both of the logs with your reply

ADDED:

You would also want to download Microsoft Safety Scanner to remove Adware: Win32/Arcade Web

Download

 

[webgal318]

Windows won't start

I tried to enter safe mode with networking without any luck. I am running the startup repair again while keeping fingers crossed.

 

[VistaKing]

Webgal318

Do you have a USB FLASH DRIVE?

 

[webgal318]

USB flash drive

Yes, I do.

Thanks for your help.

 

[VistaKing]

Farbar Tool

Download Farbar Recovery Scan Tool from below on a non infected PC
For 32-bit (x86) systems
Download


Farbar Recovery Scan Tool and save it to a flash drive.
For 64-bit (x64) systems
Download


Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

:ar: To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

:ar: To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

:ar: On the System Recovery Options menu you will get the following options:
Startup Repair

System Restore

Windows Complete PC Restore

Windows Memory Diagnostic Tool

Command Prompt

Select Command Prompt

In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

   Note

Replace letter e with the drive letter of your flash drive.

   Tip

Type the commands below to see what your letter is for the USB drive and press ENTER after each command

Diskpart
List volume

The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file, close out this message, then type the following into the search box:
services.exe
Now press the Search button
When the search is complete, search.txt will also be written to your USB
Type exit and reboot the computer normally
Please copy and paste both logs in your reply.(FRST.txt and Search.txt)


Added:

Can you create a new thread in SYSTEM SECURITY so we could keep the BSOD and the Virus issues in different threads? You could add a link to the new thread on this thread.

 

[x BlueRobot]

You may also want to remove Java, very few programs and websites require Java now, and more importantly Java is very prone to security exploits.

If you have programs which require Java, then you can disable Java for your browser.

• How to Disable Java | PCMag.com

 

[webgal318]

Looking for files submitted

Search.txt and FRST.txt

Did this post go to Sercurity Forum? If so, please send me the link

Thanks
-Sylvia

 

[webgal318]

http://www.sevenforums.com/system-security/283190-search-txt-frst-txt.html

I think I moved this correctly to the System Security Forum.

Please let me know.

Again, thanks!
-Sylvia

 

[webgal318]

The PC still doesn't boot. I am going to direct my question to Windows Security unless you have more suggestions.
My thoughts now are to go into advanced options and redo the PC to factory settings.
One of my concerns is that this malware will stay hidden and rear its ugly head again.

http://www.sevenforums.com/system-security/283190-search-txt-frst-txt.html

 

[x BlueRobot]

The thread is within the System Security section, and have you removed Java if not needed?

Follow these steps:

• http://www.sevenforums.com/tutorials/219533-troubleshooting-windows-7-failure-boot.html

 

[webgal318]

BSOD dump file

I have already posted this file in the security forum but this is where it really needs to be.

If you need further information, please let me know.
I have documented everything I have done through this post and the one that I have started in the Windows Security forum.

 

[x BlueRobot]

It seems the Security team did a good job of cleaning your system of that malware.

Scan for any missing, modified or corrupted protected Windows files with:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Install Service Pack 1:

Microsoft Windows 7 Home Premium [COLOR="Red"]6.1.7600 Build 7600[/COLOR]

• Learn how to install Windows 7 Service Pack 1 (SP1)

Service Pack 1 has provided many security and stability updates for Windows 7, which would be highly beneficial for your system.

 

[webgal318]

Thanks I will do that. This forum has been so helpful and I appreciate that!

 

[x BlueRobot]

Your welcome!