win 7 virus caused black screen

win 7 virus caused black screen28th December 2011, 10:35 pm

My sons computer started getting the win 7 pop ups saying he had all kinds of problems, it wouldnt let me online or into norton it just popped up saying it wasnt safe to enter that site or page. now his computer wont come on at all i just get a black screen with a curser at the top. Is there anything i can do?

Re: win 7 virus caused black screen29th December 2011, 10:54 pm

Hello, Welcome to GeekPolice!

I'm Houndmom and I will be helping you get your computer cleaned up. Right On!

Please note the following information about the malware forum:
* Only Tech Officers, Global Moderators, Administrators, Malware Advisors and Tech Advisors are allowed to give advice on removing malware from your computer.
* From this point on, please do not make any more changes to your computer; such as install/uninstall programs, use special fix tools, delete files, edit the registry, etc. - unless advised by the staff I noted above.
* Please do not ask for help elsewhere (in this site or other sites). Doing so can result in system changes, which may not show up in the logs you post.
* If you have already asked for help somewhere, please post the link to the topic you were helped.
* We try our best to reply quickly, but for any reason we do not reply in two days, do one of two things:

Reply to this topic with the word BUMP, or
see this topic.

* Lastly, keep in mind that we are volunteers, so you do not have to pay for malware removal. Please stick with me in this topic until its close, and your computer is declared clean.

I am a student and need to get approval for each step. I appreciate your patience, and will return with the first step.

............................................................................................
If we have helped you, Please consider helping us, make a donation.

Helping fight malware. win 7 virus caused black screen Sac

Re: win 7 virus caused black screen30th December 2011, 12:28 am

Please download and run the following tool to help allow other programs to

Save it to your Desktop.
Double click the RKill desktop icon.
It will quickly run and launch a log. If it does not launch a log, try another download link until it does.
Please post its log in your next reply.
After it has run successfully, delete RKill.

[color=green]Note: This tool only kills the active infection, the actual infection will not be gone.

There are seven different versions. If one of them won't run then download and try to run the other one.
Vista and Windows 7 users need to right-click and choose Run as Administrator
You only need to get one of them to run, not all of them.

rkill.exe
rkill.com
rkill.scr
eXplorer.exe - This renamed copy may trigger an alert from MBAM. It can be ignored and is safe.
iExplore.exe
WiNlOgOn.exe
uSeRiNiT.exe

Once you've gotten one of them to run then try to immediately run the following:

Download OTL.exe onto your desktop
Open the program by double clicking on OTL icon.
Copy the following quote box and Paste it in the Custom Scans/Fixes box as shown below..

%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
%APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
%PROGRAMFILES%\PC-Doctor\Downloads\*.*
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
%USERPROFILE%\My Documents\*.exe
%USERPROFILE%\*.exe
%systemroot%\ADDINS\*.*
%systemroot%\assembly\*.bak2
%systemroot%\Config\*.*
%systemroot%\REPAIR\*.bak2
%systemroot%\SECURITY\Database\*.sdb /x
%systemroot%\SYSTEM\*.bak2
%systemroot%\Web\*.bak2
%systemroot%\Driver Cache\*.*
%PROGRAMFILES%\Mozilla Firefox\*.exe
%ProgramFiles%\Microsoft Common\*.*
%ProgramFiles%\TinyProxy.
%USERPROFILE%\Favorites\*.url /x
%systemroot%\system32\*.bk
%systemroot%\*.te
%systemroot%\system32\system32\*.*
%ALLUSERSPROFILE%\*.dat /x
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.sys
%systemroot%\system32\drivers\*.dll
%systemroot%\system32\drivers\*.ini
%systemroot%\system32\drivers\*.exe
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.
%appdata%\*.*
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
disk.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
usbstor.sys
/md5stop
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
Do not change any settings. Click the Run Scan button. OTL will now perform a scan, it won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These files are saved at the same location as OTL.
Please copy and paste these results into your next post.

............................................................................................
If we have helped you, Please consider helping us, make a donation.

Helping fight malware. win 7 virus caused black screen Sac

Re: win 7 virus caused black screen31st December 2011, 10:07 pm

when i turn the computer on it immediatly goes to a black screen with a _ at the top left. . . .how can i dl or anything from there??? it does sometimes show a windows icon like its going to start up but then it goes to black screen once its there any key i hit it just beeps.

Re: win 7 virus caused black screen31st December 2011, 10:09 pm

hi houndmom, thank you for helping me. . .any ideas what i can do?

Re: win 7 virus caused black screen1st January 2012, 8:13 pm

So you can't even get into safe mode? Is this correct?

To Start computer in Safe Mode

As your computer is booting from restart tap the F8 key until you get the Safe Mode menu.
Note: If the Windows Start up screen comes up, you need to try again
Use up arrows to choose Safe Mode with networking.
Click Enter
Note: If you are still are unable to get into safe mode after several tries. You can also turn off your computer as it is booting. When the computer is restarted Windows should automatically notice the computer did not start up correctly and give you the start menu.

............................................................................................
If we have helped you, Please consider helping us, make a donation.

Helping fight malware. win 7 virus caused black screen Sac

Re: win 7 virus caused black screen5th January 2012, 10:20 pm

no it wont go into safe mode, it lets you into the system info screen when you hit escape on startup thats it.

Re: win 7 virus caused black screen6th January 2012, 2:53 pm

Download the OTLPE Standard REATOGO Windows Recovery Environment.

Place a blank CD-R disc in to your CD burning drive.
Download OTLPEStd.exe and double-click on it to burn to a CD using ISO Burner.
Reboot your system using the boot CD you just created.

Note : If you do not know how to set your computer to boot from CD follow the steps here
Your system should now display a REATOGO-X-PE desktop.
Double-click on the OTLPE icon.
When asked "Do you wish to load the remote registry", select Yes
When asked "Do you wish to load remote user profile(s) for scanning", select Yes
Ensure the box "Automatically Load All Remaining Users" is checked and press OK
OTL should now start. Change the following settings
- Change Drivers to Non-Microsoft
- Press Run Scan to start the scan.
- When finished, the file will be saved in drive C:\_OTL\MovedFiles
- Copy this file to your USB drive if you do not have internet connection on this system
- Please post the contents of the OTL.txt file in your reply.

............................................................................................
If we have helped you, Please consider helping us, make a donation.

Helping fight malware. win 7 virus caused black screen Sac

win 7 virus caused black screen

description win 7 virus caused black screen28th December 2011, 10:35 pm

descriptionRe: win 7 virus caused black screen29th December 2011, 10:54 pm

descriptionRe: win 7 virus caused black screen30th December 2011, 12:28 am

descriptionRe: win 7 virus caused black screen31st December 2011, 10:07 pm

descriptionRe: win 7 virus caused black screen31st December 2011, 10:09 pm

descriptionRe: win 7 virus caused black screen1st January 2012, 8:13 pm

descriptionRe: win 7 virus caused black screen5th January 2012, 10:20 pm

descriptionRe: win 7 virus caused black screen6th January 2012, 2:53 pm

descriptionRe: win 7 virus caused black screen