Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Windows Vista weird errors, possible virus?

Jun 28, 2010 2:27AM PDT

Machine is an emachines w5233, running 32-bit Windows Vista with no service packs. I am trying to fix this pc for a friend, who says that it has not worked properly for around a year. I am not sure if this is virus, spyware, etc. related, but there are a lot of weird things going on. On start up, I get one BIOS beep. I cannot boot into normal mode, it just goes to a black screen with an unmovable cursor. In safe mode, I keep getting "IE is not working" windows errors, not sure if these are related in any way. I downloaded malwarebytes to see if any of these problems are spyware/malware related, but it will not open after installation. Whenever I click on the icon, the cursor spins as if loading but soon stops. I also cannot update Mcafee virus protection; whenever I try to update the virus definitions, it gives me an error saying "One or more errors are preventing update", and then does nothing.If anyone has any input, it would be very appreciated.I don't know if all or any of these issues are related, but the fact that programs won't work and that I can only boot into safe mode is troubling. Thanks in advance!

Discussion is locked

- Collapse -
Remember that one thing.
Jun 28, 2010 2:31AM PDT

Just like many laptops you don't have a full Vista DVD so your repair options are very limited. Many forget the FIRST STEP in repairing this OS. Ready.

1. Backup the files we can't lose.

The moderators in unison -> "We only lose what we don't backup."

Ok, with that out of the way step 2 from Grif.

2. Read and do what Grif advises at http://forums.cnet.com/5208-6121_102-0.html?threadID=378815&tag=forums06;forum-threads

3. The lack of the service pack after this many years is a sign. Not a good one. After step 2, try Windows Update and let it run.

4. Be sure to set aside a few days for scans and updates.

5. Or just reload it with the factory DVDs.
Bob

- Collapse -
Rootkits
Jun 28, 2010 8:11AM PDT

Thank you for your reply. I did as instructed in the link, running malwarebytes and superantispyware from a usb under different names. Malwarebytes still wouldn't open after installing, but SAS (using the alternate start) did. It found (and deleted) rootkitagent/Gen-UACFake, browserhijacker.FakeAlert/SHCWC, rootkitagent/gen, and rogue.personalantivirus. After deleting this stuff, I rebooted and was able to boot into regular windows. I attempted to scan with malwarebytes, but it closed before completing a scan with 3 items detected. I then scanned with SAS and found Rootkit.Agent/Gen again; the "infections" are almost all registry keys relating to the UAC.After restarting, I got a startup error and ran startup repair, which couldn't fix anything. After rebooting, it started up fine, although once I booted in, a cmd window opened and read "access denied". I don't know if any of this is related.
What program should I use to remove this rootkit for good? Things seem better, i.e. Mcafee is working again, although I haven't run a full scan yet, and I was able to boot into normal mode, but I want to make sure these things don't just come right back and that I don't get an unfixable startup error. Any help is appreciated.

- Collapse -
Lather, rinse, repeat.
Jun 28, 2010 11:25AM PDT

Just like the hair shampoo I've found that repeated scans of one product after another like Grif noted slowly works the dirt out. I hope you did what Grif wrote about RKILL and no rebooting to do the next scan. Grif's word is hard won gold here.
Bob

- Collapse -
Thanks so much!
Jul 7, 2010 12:08PM PDT

A few more scans with SAS, malwarebytes, spybot, and avast, did the trick! It's working great now! Thank you for your help!-v.