need help- dunno what

Viruses and worms
1

Yeah its me again and this time its not the same infection but something all the same is wrong with my laptop i am currently running out of safe mode with networking because i cant log into windows normally when booting it gets to the windows Xp with the loading bar beneath and then after a few seconds just freezes and then re-boots itself but the frozen boot screen is still there now whats odd is when i logged in this morning normally after about 5 re-boot’s i had a advertisement! blow through my speakers saying i won a cruise and such so i dont know if this could be software exactally or more hardware related but im currently running a avast! scan to see if i could possibly have maybe a hidden ad-ware gen or something i used to have a Vista transformation pack installed but i uninstalled that from safe-mode to see if it was causing the lock up but when i re-booted same thing so any ides?

thanks

2

Lets have a look see shall we

Please download Deckard’s System Scanner (DSS) and save it to your Desktop.
[*]Close all other windows before proceeding.
[*]Double-click on dss.exe and follow the prompts.
[*]When it has finished, dss will open two Notepads main.txt and extra.txt – please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

3

alright here you go, I had to run it in safe mode im not even going to try to boot into normal mode, im attaching the file

4

One thing I noticed was this

The following boot-start or system-start driver(s) failed to load: Aavmker4 Fips P3 TPHKDRV

Which may be causing the problem - are you able to return to a restore point at all. This will give me time to consider what I have found

5

Yeah i made sure i made a restore point before i installed the transformation pack, still dunno what caused the advertisement i ran a avast scan found nothing as well as a spybot and i cant run Rootkitbuster in safe-mode

6

Ok lets try a little sfc scan

From the Start menu, select Run.
In the Open field, type sfc /scannow (Note: There is a space between sfc and /scannow)
Select the OK button.
Follow the prompts throughout the System File Checker process.
Reboot the computer when System File Checker completes.

7

ill try to restore later I’m oddly enough somehow getting work done even though I’m in safe mode which to me is not the most enjoyable

8

Alright well system restore was successful thanks for the help any clue about the startup advertisement? that still confuses me

9

I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest AVG or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
10

Alright well the restore point last night got me into normal mode but when i tried this morning it didn’t work again and neither did safe-mode with networking only safe-mode did so i did another restore and it got me back in again so im guessing the same thing will happen tomorrow so i guess im just going to reimage the whole thing ive backed up all the important data i need

11

Sometimes, restoring is only coming to an infected restore point… So, it’s not enough.
If you have a full backup, it won’t be hard to restore all of them. To the ‘new&changed’ files, I suggest Mozy (on-line backup) to keep the last versions of your files. See my signature :wink:

12

alright thanks very much for the info