Sudden Reboot followed by unability to run any programs

[Golden]

Hi,

OK. Finish those sfc's, then post the results.

With tdskiller.exe, rename it to abc.exe, and then run it : some malware are programmed to look for tdskiller and close it when it thinks its trying to run, so a simple rename might fool these malware.

Regards,
Golden

 

[rhub]

Hello again. Renaming tdskiller didnt work, as there is not a single non-integrated windows application that runs. not even a simple home-made .exe would run. only stuff like calculator, cmdprompt, notepad, paint etc works. as an example, the old integrated mediaplayer works but not the new mediaplayer 12. same with msn.

Anyway, I have been running the virus rescue boot disk all night and it is still only on 47%, even after 11 hours. Strangly slow for a half-empty 100gb harddrive. Ill post the results here when it has finished.

 

[Golden]

OK. Keep going with the scan. I presume the SFC scanning didn't fix much?

Regards,
Golden

 

[rhub]

as you said it fixed some files up till the fourth time I ran it, then it just gave the same results each time (but started to run really quick)

ok waiting for the scan, 48% in 12 hours. dont expect any news untill another 12 I guess. =)

btw thankyou very much for your help so far!

 

[rhub]

Hello again. Status update and a rather depressing such. The virusscan didnt found anything, except some really year old fraud/spam mails in the outlook mail archives. What alarmed me though was that the virus scan said the disk was writeprotected and coulndt remove the files in question. CHKDSK is also reporting errors that it is unable to fix due to write protection. Could this be a question of a few corrupted files in the windows core? like that hal.dll where it stalls during startup. Also some commands like CHKDSK /help gives an insta BSOD.

This afternoon i'm going to malware and virusscan the disk by putting it on another system and see if that helps. But this is still very strange, it acts like malware but I cant find any.

by the way, the initial reboot that triggerd all this was the exact kind of reboot that you get if you terminate the lsass.exe process in taskmgr. maybe that can give another clue?

edit: pressed the submit button too early.

 

[Golden]

Most bizarre. I'd be very suprised if scanning on another system will find anything, but I guess it won't hurt.....

Perhaps the disk itself is at fault here. You said you tried a chkdsk and it BSOD'ed - this is quite unusual. Perhaps its time to consider a reinstallation? The effort involved in hunting down everything and fixing it is far more than a fresh install.....

Have a think about that whilst you scan the disk on another system.

Let us know what you decide to do. We can help you with the install too.

Regards,
Golden

 

[rhub]

Yeah me to I find it really bizarre. Well one obvious reason for the scan not finding anything is maybe that it was unable to check for updates to its virusdefinitions (didnt manage to install the wifi-drivers), thats why I want to scan the drive on another system. Here is a brief line-up of the symptoms again:

* Boots up slower than before
* No programs thats not in windows at installation will run (only IE, Notepad, Paint, Calculator, CMD etc, no external .exes what so ever) they just plop up in tskmgr for a sec and then goes away.
* CHKDSK works but reports fileerrors that it cant repair due to write protection
* "CHKDSK /help" gives instant BSOD
* System restore says that any of the system-restore points cant be restored
* fixes from support.microsoft.com wount run.

diskfail or malware? We will see.

 

[mgorman87]

Can you attempt a http://www.sevenforums.com/tutorials/3413-repair-install.html?

 

[rhub]

Problem solved, Computer cured! Running kaspersky on the drive from another system worked, it found a TDS rootkit and deleted it. Computer is back to normal. Thanks everyone who helped! and too bad for the 5 months warranty I lost by opening up the laptop to get the harddrive.

 

[johnnya]

Hi Rhub. Been following your thread since my initial involvement. So glad you were able to resolve your problem. As I suspected, it was a virus/malware. Congratulations to Golden. He is like a dog with a bone, he will not let go until it is totally finished. Don't forget to hit his tip jar (rep) for his herculean efforts.
Cheers
JohnnyA

 

[Golden]

Great news Rhub!

Thanks for the comments Johnnya - dog with a bone, I like that. I think I'll use that as my title