Re: Got virus - now have to boot "last known good" every time

Asking someone if they know how to turn off the computer is an insult if they
had a serious virus or spyware infection and got rid of it!

I am having the same issue, with last known good configuration, and imagine
my disappointment when I read through this whole post hoping for a solution,
only to find that it was bogged down with someone suggesting another way to
turn off the computer.

The reason I cant boot up is because a driver error is giving me the blue
screen, but it wont uninstall, and replacing a .sys file from the XP Pro CD
didnt fix it either. It is the microsoft kernel dls syntehsizer in sounds
and audio devices, and another category simply saying unknown, that keeps
reappearing with yellow question mark after uninstall.

This started happening only after I ran Ad-Aware in safe mode and rebooted.
Before that I had run combo fix with another issue that resolved. Malware is
what got rid of the vundo virus originally as I have since checked it with
vundofix.exe and it came out clean.

Do you have the solution so I dont have to run repair/reinstall?

"Gene E. Bloch" wrote:

Here's what awabbit@xxxxxxxxxxx wrote on 8/15/09:
On Aug 11, 11:19šam, Robert <Rob...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Well. šI would think that all the technical details in my post would
indicate I know how to turn off the computer. š

"Curious" wrote:
How do you normally shutdown your computer? šIf you use the on/off switch
then your system settings are not being saved on shutdown.
"Robert" <Rob...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:064B88C7-AD26-4E1C-B7B2-2D0B0E3C11D1@xxxxxxxxxxxxxxxx
š š When I turn on the computer it gets to the XP screen then freezes. I
have to turn the computer on/off. The next round I get the option to go to
safe mode, normal, or last known good configuration. Selecting last known
works. When I shut down the computer I go through that again on bootup -
again I have to power on/off and then select last good. So how do I make
"last known" be the one it uses next time? I would think this would happen
automatically.

š š Yesterday I got the NASTY virus that I think a lot of people got just
after
July 4th. I download ComboFix to fix it, which it mostly did - this bootup
problem is left. šThe symptoms of the virus were it replaced my desktop
background with a message in the middle saying I was infected and to
download
something to fix it, my homepage was replaced with a message that my
current
security settings restricted the site (the correct URL was shown, and
other
pages worked), and a fake anti-virus program called MSA.exe was running.)
It
also disabled opening the task manager and regedit.
What I've done:
š š sfc /scannow completed successfully (w/error for the 5 or so know
files
in the MS knowledgebase that aren't needed for Media Center, and errors
for
missing Windows Media Player files - I hadn't reinstalled the player which
I
uninstalled recently for a different reason - these files are listed in
the
event viewer). There were, however, a couple of windows icons named file
protection... at the bottom of the screen I couldn't maximize/open, and
there
was the hourglass cursor while at the bottom of the screen. I had to
ctr-alt-del then stop explorer.exe and then start explorer again. That
cleared it up.
š šI have also ran AVG (which was installed and running at the time of the
infection - so I replaced that with Antivir - which found many viruses
(mostly webpage gen something) and a couple trojans than AVG missed.
Hello Robert: On these boards, we are all attempting to help one another.
The suggestion that was made was in the positive spirit of these Boards.
Yes, he posted something that was obvious to you, but many times posts
that may seem obvious may just be the answer to solving the posted
problems.
He should be thanked, not cut down.

My 2 1/2 cents. Aaron

My 2 cents too - Gino.

I am a very experienced programmer. On occasion when I have been unable
to spot a problem I created, I would ask my cohort in the next cube to
look at my code. You'd be amazed at how obvious - on a number of
occasions - the error was that I couldn't find.

I was never insulted even it the obvious suggestion wasn't the
solution, because I know how stupid I can be, at least for a short time
:-)

Well, maybe not so much stupid as caught up in a cognitive loop.

<SNIP>

--
Gene Bloch 650.366.4267 lettersatblochg.com



.

Loading