07-22-2012 03:53 PM
Yesterday I fell asleep and left my comp idle. The Same trojan started attacking my comp and norton blocked ech one. When I saw this I did a quick scan and a full scan, and found nothing. The day after I noticed a svchost useing a ton of memory. nearly 1gb. I deleted it and it came back with 100k.
This is when I did the Norton Power Eraser to see if the scans missed anything. It found a program I forget its name, it started with a P, had 2 words, second word started with a d, and had a .0 at the end, I'm not sure. It says that it could fix it, and restore it.
It deleted the file, and I reset my comp. Then it wouln't boot up, normal or in safe modes. System repair and last boot recovery wouldn't work. It says a rescent hardwere or softwere change could be the source of the problem.
I'm thinking NPE got a false positive and never restored the file. My comp dosent make it to the log in screen, it just resets itself after I go threw system repairs, normal starts, etc. The OS is upgraded to Windows 7 homePrem 64bit.
If I can get my comp to boot, then I can go into NPE and undo the last scan and that should restore the file it deleted. If anyone from Norton can get my comp booting again I would very much be thankful.
Solved! Go to Solution.
07-22-2012 05:22 PM - edited 07-22-2012 05:25 PM
You have run NPE when you are not ment to.!!!
ANY other user other than the thread starter is not to use any instructions, scripts or proceedures, The work though in cleaning a system is individual and only for that system due to a number of factors.
Please do not run any tools unless instructed to do so.
4. Cleanup (including system as a whole)
Please read every post completely before doing anything.
What is your Operating System including 32 bit or 64 bit??
07-22-2012 06:04 PM
Read Slowly and all of it.
Please download http://www.bleepingcomputer.com/download/farbar-re
Transfer it on to the Flash Drive.
Enter System Recovery Options.
To enter System Recovery Options from the Advanced Boot Options:
On the System Recovery Options menu you will get the following options:
Windows Complete PC Restore
Windows Memory Diagnostic Tool
07-22-2012 08:03 PM
You have a Bootkit (BCD) and zeroaccess, plus system restore is stuck
I am going to ask FRST for more information.
Download the script attached, needs to be the same file name as well (fixlist.txt), Copy across to flash drive
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Now please enter System Recovery Options again. Like previously