PC won't boot after boot scan

Viruses and worms
1

Hello,

A friend in the USA (I’m in UK) asked me for help with a virus that NAV reported on her PC. I recommended Avast or its boot time scan. She ran this but terminated it early accidentally (I think). This was the aswboot.txt:-

01/25/2007 11:36
Scan of all local drives
File C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Program Files\Microsoft AntiSpyware\Quarantine\6505DD30-BC7A-4FB1-A648-18FA34\64BFF3B9-5578-4981-A9BB-399B82 is infected by Win32:Adan-119 [Adw], Moved to chest
File C:\Program Files\Microsoft AntiSpyware\Quarantine\7A718240-3E73-49B7-B751-395811\919C6337-2206-47B4-B6B1-577E9E is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Program Files\Microsoft AntiSpyware\Quarantine\84DB650A-1108-4322-BB6E-965A21\00323CD9-63CE-45E7-8C58-4C3B50 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Program Files\Microsoft AntiSpyware\Quarantine\AB42565D-6B8F-4A73-B8EA-3579F0\8B563410-DE02-41C5-A5C1-58DA8B is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Program Files\quickbar\Cache\NNEZTY638.exe is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\System Volume Information_restore{FDF7E1BD-3514-4652-A0DC-09D8FF2520E1}\RP1458\A0138699.dll is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\System Volume Information_restore{FDF7E1BD-3514-4652-A0DC-09D8FF2520E1}\RP1458\A0138700.exe is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\WINDOWS\system32\msCMTsrvc.exe is infected by Win32:Trojan-gen. {VC}
Scanning aborted

Number of searched folders: 5798
Number of tested files: 94433
Number of infected files: 9

So, as you can see there was a fair amount of problems on this PC. In particular we knew msCMTsrvc.exe was running again after this scan (why doesn’t it show moved to chest above?). Anyway, because I thought she had aborted the scan early I wanted her to run it again to completion. She has done this now, and subsequently, in her words

“I turn the PC on, and it starts to boot, and then at the bottom of the black screen it says “opening windows” and the loading bar was full then my computer just turns off”

Any ideas on where to go next with this?

Thanks

imazz

2

Enable/Disable System restore on Windows ME or Windows XP. This will delete infected files that could be 'restored1 by the virus each time.

Also, clean your temporary files. You can use the Windows Advanced Care features for that.

It will be good if you download, install, update and run other trojan remover tools: a-squared, Free AVG Antispyware or SUPERantispyware (trojan removers). Some users recommend Spyware Terminator. Also use the immunization of [url=SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

If she can’t boot now, try to do as much as possible on Safe Mode.

3

Try these tips:

http://articles.techrepublic.com.com/5100-10877_11-6031733.html