After removing a virus applications doesn't start!

[Yasin Akkan]

Hello,

I installed avast home edition to one of my friend's computer.
After installation it asked me if I want to schedule a scan on boot (or
something like it).I clicked yes.And later the computer asked to restart I
clicked yes again. When it restarted bootscan appeared and it started to
scan the files in the computer.

Later it found a virus like "win32.xxx?". It asked me what to do. I choosed
"erase". The program erased it and continued to search. After it finished
searching I saw the indication that program is preparing for normal start
and starting windows.But this screen freezed and did nothing for more than 5
minutes. After that I closed the computer from the main button. When I
started it again I could see my old desktop but when I clicked the shortcuts
on it a warning appeared saying that these programs like iexplore.exe can
not be started. I tried for other programs but they were not starting also.
I could open the other files but could not start the "exe. files". I thought
this roblem maybe because the wrong installation of avast. I tried to
uninstall it but "program add and remove" application was not working too.

I opened my computer in safety mode and managed to uninstall avast but the
problem was still there. I thoughed to make a "system restore" and hardly
managed to restore it to a previously recorded time. But the problem still
there. I can not still reach any other applications like "msconfig" or
"regedit" from run command.

My friend says he also has no rescue disk to reinstall the OS.
Can I solve this problem without reinstall the os?
What could be the reason for this? The file I erased or shutting down the
computer unproperly?
And how can I solve this problem?

Thanks.
Yasin Akkan

 

[David H. Lipman]

From: "Yasin Akkan" <yasinakkan@hotmail.com>

| Hello,
|
| I installed avast home edition to one of my friend's computer.
| After installation it asked me if I want to schedule a scan on boot (or
| something like it).I clicked yes.And later the computer asked to restart I
| clicked yes again. When it restarted bootscan appeared and it started to
| scan the files in the computer.
|
| Later it found a virus like "win32.xxx?". It asked me what to do. I choosed
| "erase". The program erased it and continued to search. After it finished
| searching I saw the indication that program is preparing for normal start
| and starting windows.But this screen freezed and did nothing for more than 5
| minutes. After that I closed the computer from the main button. When I
| started it again I could see my old desktop but when I clicked the shortcuts
| on it a warning appeared saying that these programs like iexplore.exe can
| not be started. I tried for other programs but they were not starting also.
| I could open the other files but could not start the "exe. files". I thought
| this roblem maybe because the wrong installation of avast. I tried to
| uninstall it but "program add and remove" application was not working too.
|
| I opened my computer in safety mode and managed to uninstall avast but the
| problem was still there. I thoughed to make a "system restore" and hardly
| managed to restore it to a previously recorded time. But the problem still
| there. I can not still reach any other applications like "msconfig" or
| "regedit" from run command.
|
| My friend says he also has no rescue disk to reinstall the OS.
| Can I solve this problem without reinstall the os?
| What could be the reason for this? The file I erased or shutting down the
| computer unproperly?
| And how can I solve this problem?
|
| Thanks.
| Yasin Akkan
|

Without knowing the exact name of the infector and the file deemed infected, your friend is
SOL.

An excerpt of the Avast log would have helped but... you removed Avast (mistake!).

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[PA Bear [MS MVP]]

Possibly related:
http://blogs.technet.com/antimalwar...r-rootkit-virtool-winnt-sinowal-a-report.aspx

But it sounds more like one of the newer Vundo variants. In any event,
you're going to need expert assistance with this one.

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Yasin Akkan wrote:
> Hello,
>
> I installed avast home edition to one of my friend's computer.
> After installation it asked me if I want to schedule a scan on boot (or
> something like it).I clicked yes.And later the computer asked to restart I
> clicked yes again. When it restarted bootscan appeared and it started to
> scan the files in the computer.
>
> Later it found a virus like "win32.xxx?". It asked me what to do. I
> choosed
> "erase". The program erased it and continued to search. After it finished
> searching I saw the indication that program is preparing for normal start
> and starting windows.But this screen freezed and did nothing for more than
> 5
> minutes. After that I closed the computer from the main button. When I
> started it again I could see my old desktop but when I clicked the
> shortcuts
> on it a warning appeared saying that these programs like iexplore.exe can
> not be started. I tried for other programs but they were not starting
> also.
> I could open the other files but could not start the "exe. files". I
> thought
> this roblem maybe because the wrong installation of avast. I tried to
> uninstall it but "program add and remove" application was not working too.
>
> I opened my computer in safety mode and managed to uninstall avast but the
> problem was still there. I thoughed to make a "system restore" and hardly
> managed to restore it to a previously recorded time. But the problem
> still
> there. I can not still reach any other applications like "msconfig" or
> "regedit" from run command.
>
> My friend says he also has no rescue disk to reinstall the OS.
> Can I solve this problem without reinstall the os?
> What could be the reason for this? The file I erased or shutting down the
> computer unproperly?
> And how can I solve this problem?
>
> Thanks.
> Yasin Akkan