+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, windows-repair in Technical; A teacher, who islong-term sick leave, dropped her school laptop in to my home yesterday because it wouldn't boot. The ...
  1. #1


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 891 Times in 572 Posts
    Rep Power
    647

    windows-repair

    A teacher, who islong-term sick leave, dropped her school laptop in to my home yesterday because it wouldn't boot. The error message was a corrupt/missing ntfs.sys. I reinstalled XP and took myriads of crap off but a program called windows-repair keeps popping up to say there are bad drive sectors and viryally locking out the machine.

    I've run a scandisk check in safe mode and no bad sectors are reported but I can't find a way to clear this program. It comes from windows-repair.com

    The teacher has said she must have her laptop so she can send in lesson plans but I think it's more a case of running a private business from home.

  2. #2
    sister_annex's Avatar
    Join Date
    Jan 2009
    Location
    Wolverhampton
    Posts
    594
    Thank Post
    100
    Thanked 136 Times in 120 Posts
    Rep Power
    49
    Have you tried Malware-bytes?

  3. Thanks to sister_annex from:

    laserblazer (27th March 2011)

  4. #3

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,048
    Thank Post
    1,424
    Thanked 2,455 Times in 1,716 Posts
    Rep Power
    717
    There is some info on Google about removing it - have you tried those and failed? (I find that often they don't work)

  5. Thanks to witch from:

    laserblazer (27th March 2011)

  6. #4

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,136
    Thank Post
    1,913
    Thanked 1,345 Times in 743 Posts
    Blog Entries
    3
    Rep Power
    395
    Try running Malwarebytes in safe-mode?

  7. Thanks to tech_guy from:

    laserblazer (27th March 2011)

  8. #5


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 891 Times in 572 Posts
    Rep Power
    647
    When malwarebytes gets to the end of its install I get an access denied error, even in safe mode with admin rights. I couldn't find any info when I googled it but I'll try again.

  9. #6

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,179
    Thank Post
    1,648
    Thanked 1,973 Times in 1,445 Posts
    Blog Entries
    2
    Rep Power
    443
    Format the drive...extreme but we had a teacher with this and it spread to our network (thankfully sophos stopped it on the server), but she disabled the AV on her machine to get it installed as she thought she needed it. All data got lost in the process as it replicates much like conficker.

  10. Thanks to nephilim from:

    laserblazer (27th March 2011)

  11. #7

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,048
    Thank Post
    1,424
    Thanked 2,455 Times in 1,716 Posts
    Rep Power
    717
    Quote Originally Posted by laserblazer View Post
    When malwarebytes gets to the end of its install I get an access denied error, even in safe mode with admin rights. I couldn't find any info when I googled it but I'll try again.
    Other virus-type things have disabled malware bytes - what sometimes works if you save it on a stick or something and then change its name to something else - then it shoudl run

  12. Thanks to witch from:

    laserblazer (27th March 2011)

  13. #8

    DaveP's Avatar
    Join Date
    Oct 2006
    Location
    Can't talk now: The mother-ship is calling!
    Posts
    9,023
    Thank Post
    352
    Thanked 1,306 Times in 895 Posts
    Blog Entries
    4
    Rep Power
    1133
    Would it be worth having a look with this:

    Link: MyUninstaller: Alternative uninstaller to the standard Windows Add / Remove module

    [Just an idea]

  14. Thanks to DaveP from:

    laserblazer (28th March 2011)

  15. #9


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 891 Times in 572 Posts
    Rep Power
    647
    Quote Originally Posted by witch View Post
    There is some info on Google about removing it - have you tried those and failed? (I find that often they don't work)
    @witch what did you search for? I can't find anything relevant on google.

  16. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,688
    Thank Post
    229
    Thanked 869 Times in 747 Posts
    Rep Power
    298
    what about scanning the drive in another pc so its not booted from the "infected" drive that way there should be no way anything can interfere

  17. #11


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 891 Times in 572 Posts
    Rep Power
    647
    Quote Originally Posted by sted View Post
    what about scanning the drive in another pc so its not booted from the "infected" drive that way there should be no way anything can interfere
    I've managed to do a malwarebyte scan but that hasn't shifted it. System restore is also unavailable. As is task manager.

  18. #12

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,705
    Thank Post
    335
    Thanked 517 Times in 485 Posts
    Rep Power
    180
    Quote Originally Posted by laserblazer View Post
    I've managed to do a malwarebyte scan but that hasn't shifted it. System restore is also unavailable. As is task manager.
    Tried Step by Step Uninstall/remove Windows Repair virus Removal Guide | Security-Wire.com ?

    Steve

  19. #13


    Join Date
    Sep 2007
    Location
    UK
    Posts
    5,463
    Thank Post
    1,462
    Thanked 891 Times in 572 Posts
    Rep Power
    647
    It's blocked by the LEA Steve - Hacking apparently.

  20. #14

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,705
    Thank Post
    335
    Thanked 517 Times in 485 Posts
    Rep Power
    180
    Quote Originally Posted by laserblazer View Post
    It's blocked by the LEA Steve - Hacking apparently.
    Login with your proxy account, or don't you have access to one?

    Steve

  21. #15

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,705
    Thank Post
    335
    Thanked 517 Times in 485 Posts
    Rep Power
    180
    Manual Removal

    Note: If you are not proficient with computer, it’s suggested that you backup your registry before manually removing Windows Repair Rogue Anti-Spyware. And double check the entries that you are going to delete, or your computer can’t work for missing some files.

    Step 1: Processes you need to end:

    [random].exe

    Step 2: Registry entries you need to delete:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “[random].exe”

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “[random]“

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Attachments “SaveZoneInformation” = ’1?

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings “WarnonBadCertRecving” = ’0?

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System “DisableTaskMgr” = ’1?

    Step 3: Files you need to delete:

    %Documents and Settings%\All Users\Application Data\[random]

    %Documents and Settings%\All Users\Application Data\[random].exe

    %Documents and Settings%\All Users\Application Data\[random].dll
    There's automatic version too if you prefer it doing it, but guess manual is smoother

    Steve

  22. Thanks to Steve21 from:

    laserblazer (1st May 2011)

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. cannot activate windows after a repair install
    By Admiral208 in forum Windows
    Replies: 6
    Last Post: 10th January 2011, 03:48 AM
  2. Cancel Windows XP Repair Setup
    By Techie101 in forum Windows
    Replies: 1
    Last Post: 19th March 2010, 02:59 PM
  3. Windows Vista Repair - Good Job MS
    By FN-GM in forum Windows Vista
    Replies: 13
    Last Post: 30th March 2009, 06:15 PM
  4. XP Repair
    By Grommit in forum Windows
    Replies: 7
    Last Post: 27th January 2008, 11:51 PM
  5. Projectro Repair
    By onder in forum Hardware
    Replies: 5
    Last Post: 20th December 2007, 10:41 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •