Got virus - now have to boot "last known good" every time

Discussion in 'Windows Media Center' started by Robert, Aug 11, 2009.

  1. Robert

    Robert Guest

    When I turn on the computer it gets to the XP screen then freezes. I
    have to turn the computer on/off. The next round I get the option to go to
    safe mode, normal, or last known good configuration. Selecting last known
    works. When I shut down the computer I go through that again on bootup -
    again I have to power on/off and then select last good. So how do I make
    "last known" be the one it uses next time? I would think this would happen
    automatically.

    Yesterday I got the NASTY virus that I think a lot of people got just
    after
    July 4th. I download ComboFix to fix it, which it mostly did - this bootup
    problem is left. The symptoms of the virus were it replaced my desktop
    background with a message in the middle saying I was infected and to download
    something to fix it, my homepage was replaced with a message that my current
    security settings restricted the site (the correct URL was shown, and other
    pages worked), and a fake anti-virus program called MSA.exe was running.) It
    also disabled opening the task manager and regedit.

    What I've done:
    sfc /scannow completed successfully (w/error for the 5 or so know files
    in the MS knowledgebase that aren't needed for Media Center, and errors for
    missing Windows Media Player files - I hadn't reinstalled the player which I
    uninstalled recently for a different reason - these files are listed in the
    event viewer). There were, however, a couple of windows icons named file
    protection... at the bottom of the screen I couldn't maximize/open, and there
    was the hourglass cursor while at the bottom of the screen. I had to
    ctr-alt-del then stop explorer.exe and then start explorer again. That
    cleared it up.
    I have also ran AVG (which was installed and running at the time of the
    infection - so I replaced that with Antivir - which found many viruses
    (mostly webpage gen something) and a couple trojans than AVG missed.

    Additional bootup symptoms:
    I tried Safe Mode, and I get a loop where it gets back to the same
    bootup selection window again (safe mode, norma. last know good). I don't
    know if that's what this computer did before the current problem.)
    Combofix had me install the windows recovery console. The bootup goes
    through that so fast I don't know if I could select it. Also, I'm getting the
    XP bootup screen, not the XP Media Center bootup screen (when you get to
    loading with the bar moving back and forth. Media Center is loading, however,
    and TV plays fine. I see something about Media Center (black/white text at
    that bootup point) and then more text and then the three options (safe,
    normal, last known).
     
    Robert, Aug 11, 2009
    #1
    1. Advertisements

  2. Robert

    David B. Guest

    Your question is not related to Windows Media Center functionality which is
    what this group discusses, I suggest reposting to a more relevant group such
    as the xp.general group
     
    David B., Aug 11, 2009
    #2
    1. Advertisements

  3. Robert

    Curious Guest

    How do you normally shutdown your computer? If you use the on/off switch
    then your system settings are not being saved on shutdown.
     
    Curious, Aug 11, 2009
    #3
  4. Robert

    Robert Guest

    Well. I would think that all the technical details in my post would indicate
    I know how to turn off the computer.
     
    Robert, Aug 11, 2009
    #4
  5. Robert

    Robert Guest

    I have read MS Knowledge base articles that are specific to the Media Center
    edition of XP, that relate to boot-up, using sfc.exe, etc. I thought that by
    posting this here someone might know an issue specific to this edition.
     
    Robert, Aug 11, 2009
    #5
  6. Robert

    Curious Guest

    My response was a long shot since you said that after shutting down from
    loading the last know good configuration that on the next boot that was not
    what booted when Normal Mode was not selected as the boot mode. Often we
    find that even very knowledgeable technical users are not aware of some of
    the nuances of the different OS's .
     
    Curious, Aug 11, 2009
    #6
  7. Robert

    XS11E Guest

    Try microsoft.public.windowsxp.gen, that's where most of the XP experts
    hang out.
     
    XS11E, Aug 11, 2009
    #7
  8. Here's what wrote on 8/15/09:
    My 2 cents too - Gino.

    I am a very experienced programmer. On occasion when I have been unable
    to spot a problem I created, I would ask my cohort in the next cube to
    look at my code. You'd be amazed at how obvious - on a number of
    occasions - the error was that I couldn't find.

    I was never insulted even it the obvious suggestion wasn't the
    solution, because I know how stupid I can be, at least for a short time
    :)

    Well, maybe not so much stupid as caught up in a cognitive loop.

    <SNIP>
     
    Gene E. Bloch, Aug 18, 2009
    #8
  9. Robert

    wyz Guest

    Asking someone if they know how to turn off the computer is an insult if they
    had a serious virus or spyware infection and got rid of it!

    I am having the same issue, with last known good configuration, and imagine
    my disappointment when I read through this whole post hoping for a solution,
    only to find that it was bogged down with someone suggesting another way to
    turn off the computer.

    The reason I cant boot up is because a driver error is giving me the blue
    screen, but it wont uninstall, and replacing a .sys file from the XP Pro CD
    didnt fix it either. It is the microsoft kernel dls syntehsizer in sounds
    and audio devices, and another category simply saying unknown, that keeps
    reappearing with yellow question mark after uninstall.

    This started happening only after I ran Ad-Aware in safe mode and rebooted.
    Before that I had run combo fix with another issue that resolved. Malware is
    what got rid of the vundo virus originally as I have since checked it with
    vundofix.exe and it came out clean.

    Do you have the solution so I dont have to run repair/reinstall?
     
    wyz, Oct 1, 2009
    #9
  10. You should start a new thread on this, since it's a new problem of your
    own, not part of the original thread.

    I have no expertise to help you on this problem.

     
    Gene E. Bloch, Oct 2, 2009
    #10
  11. Robert

    wyz Guest

    I am new to this board, and am still trying to determine if it could be
    useful to help solve problems. Who normally offers solutions here?
     
    wyz, Oct 2, 2009
    #11
  12. Lurk and see if you like it. But you should still not insert your
    problem into another thread. In *any* newsgroup.

    Start a thread of your own.
     
    Gene E. Bloch, Oct 2, 2009
    #12
  13. Robert

    Jaime Guest

    Are you having this error in Safe Mode or just Normal? I wouldn't think that
    driver would be part of a Safe Mode boot.

    BTW, this is a Media Center forum, your question will get More/Better help
    at a general XP newsgroup or if you think this is virus related, check some
    of the virus/malware specialty sites (like bleepingcomputer.com or
    majorgeeks.com)
     
    Jaime, Oct 2, 2009
    #13
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.