+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, windows-repair in Technical; A teacher, who islong-term sick leave, dropped her school laptop in to my home yesterday because it wouldn't boot. The ...
  1. #1


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 892 Times in 573 Posts
    Rep Power
    647

    windows-repair

    A teacher, who islong-term sick leave, dropped her school laptop in to my home yesterday because it wouldn't boot. The error message was a corrupt/missing ntfs.sys. I reinstalled XP and took myriads of crap off but a program called windows-repair keeps popping up to say there are bad drive sectors and viryally locking out the machine.

    I've run a scandisk check in safe mode and no bad sectors are reported but I can't find a way to clear this program. It comes from windows-repair.com

    The teacher has said she must have her laptop so she can send in lesson plans but I think it's more a case of running a private business from home.

  2. #2
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    616
    Thank Post
    103
    Thanked 144 Times in 125 Posts
    Rep Power
    52
    Have you tried Malware-bytes?

  3. Thanks to sister_annex from:

    laserblazer (27th March 2011)

  4. #3

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,507
    Thank Post
    1,528
    Thanked 2,632 Times in 1,823 Posts
    Rep Power
    813
    There is some info on Google about removing it - have you tried those and failed? (I find that often they don't work)

  5. Thanks to witch from:

    laserblazer (27th March 2011)

  6. #4

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,162
    Thank Post
    1,924
    Thanked 1,358 Times in 748 Posts
    Blog Entries
    3
    Rep Power
    400
    Try running Malwarebytes in safe-mode?

  7. Thanks to tech_guy from:

    laserblazer (27th March 2011)

  8. #5


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 892 Times in 573 Posts
    Rep Power
    647
    When malwarebytes gets to the end of its install I get an access denied error, even in safe mode with admin rights. I couldn't find any info when I googled it but I'll try again.

  9. #6

    featured_spectre's Avatar
    Join Date
    Nov 2008
    Posts
    12,492
    Thank Post
    1,684
    Thanked 2,047 Times in 1,490 Posts
    Blog Entries
    2
    Rep Power
    462
    Format the drive...extreme but we had a teacher with this and it spread to our network (thankfully sophos stopped it on the server), but she disabled the AV on her machine to get it installed as she thought she needed it. All data got lost in the process as it replicates much like conficker.

  10. Thanks to featured_spectre from:

    laserblazer (27th March 2011)

  11. #7

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,507
    Thank Post
    1,528
    Thanked 2,632 Times in 1,823 Posts
    Rep Power
    813
    Quote Originally Posted by laserblazer View Post
    When malwarebytes gets to the end of its install I get an access denied error, even in safe mode with admin rights. I couldn't find any info when I googled it but I'll try again.
    Other virus-type things have disabled malware bytes - what sometimes works if you save it on a stick or something and then change its name to something else - then it shoudl run

  12. Thanks to witch from:

    laserblazer (27th March 2011)

  13. #8

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    9,353
    Thank Post
    353
    Thanked 1,346 Times in 925 Posts
    Blog Entries
    4
    Rep Power
    1202
    Would it be worth having a look with this:

    Link: MyUninstaller: Alternative uninstaller to the standard Windows Add / Remove module

    [Just an idea]

  14. Thanks to DaveP from:

    laserblazer (28th March 2011)

  15. #9


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 892 Times in 573 Posts
    Rep Power
    647
    Quote Originally Posted by witch View Post
    There is some info on Google about removing it - have you tried those and failed? (I find that often they don't work)
    @witch what did you search for? I can't find anything relevant on google.

  16. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,055
    Thank Post
    232
    Thanked 923 Times in 792 Posts
    Rep Power
    308
    what about scanning the drive in another pc so its not booted from the "infected" drive that way there should be no way anything can interfere

  17. #11


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 892 Times in 573 Posts
    Rep Power
    647
    Quote Originally Posted by sted View Post
    what about scanning the drive in another pc so its not booted from the "infected" drive that way there should be no way anything can interfere
    I've managed to do a malwarebyte scan but that hasn't shifted it. System restore is also unavailable. As is task manager.

  18. #12

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,823
    Thank Post
    369
    Thanked 543 Times in 506 Posts
    Rep Power
    184
    Quote Originally Posted by laserblazer View Post
    I've managed to do a malwarebyte scan but that hasn't shifted it. System restore is also unavailable. As is task manager.
    Tried Step by Step Uninstall/remove Windows Repair virus Removal Guide | Security-Wire.com ?

    Steve

  19. #13


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 892 Times in 573 Posts
    Rep Power
    647
    It's blocked by the LEA Steve - Hacking apparently.

  20. #14

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,823
    Thank Post
    369
    Thanked 543 Times in 506 Posts
    Rep Power
    184
    Quote Originally Posted by laserblazer View Post
    It's blocked by the LEA Steve - Hacking apparently.
    Login with your proxy account, or don't you have access to one?

    Steve

  21. #15

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,823
    Thank Post
    369
    Thanked 543 Times in 506 Posts
    Rep Power
    184
    Manual Removal

    Note: If you are not proficient with computer, it’s suggested that you backup your registry before manually removing Windows Repair Rogue Anti-Spyware. And double check the entries that you are going to delete, or your computer can’t work for missing some files.

    Step 1: Processes you need to end:

    [random].exe

    Step 2: Registry entries you need to delete:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “[random].exe”

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “[random]“

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Attachments “SaveZoneInformation” = ’1?

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings “WarnonBadCertRecving” = ’0?

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System “DisableTaskMgr” = ’1?

    Step 3: Files you need to delete:

    %Documents and Settings%\All Users\Application Data\[random]

    %Documents and Settings%\All Users\Application Data\[random].exe

    %Documents and Settings%\All Users\Application Data\[random].dll
    There's automatic version too if you prefer it doing it, but guess manual is smoother

    Steve

  22. Thanks to Steve21 from:

    laserblazer (1st May 2011)



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. cannot activate windows after a repair install
    By Admiral208 in forum Windows
    Replies: 6
    Last Post: 10th January 2011, 04:48 AM
  2. Cancel Windows XP Repair Setup
    By Techie101 in forum Windows
    Replies: 1
    Last Post: 19th March 2010, 03:59 PM
  3. Windows Vista Repair - Good Job MS
    By FN-GM in forum Windows Vista
    Replies: 13
    Last Post: 30th March 2009, 07:15 PM
  4. XP Repair
    By Grommit in forum Windows
    Replies: 7
    Last Post: 28th January 2008, 12:51 AM
  5. Projectro Repair
    By onder in forum Hardware
    Replies: 5
    Last Post: 20th December 2007, 11:41 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •