Virus?! help

**bugzy** · 10-31-2005, 02:37 PM

What virus or what could cause a computer to keep rebooting?

I got a Windows 2003 server and another computer Windows XP both with same symptom's.

Basically it will get to the point with the lil bar that say its loading Windows, and then reboots. I tried booting into safe mode, and it still does it, but i forgot which part it reboots on.

Any help would be appreciated. I got a server with my email, that id like to get it work so i could pull the data from exchange.

Anyone got a clue with kinda virus or cause?

**Euro** · 10-31-2005 02:37 PM

**ncttrnl** · 10-31-2005, 02:50 PM

There is a worm spreading over AIM but that had a stealth root kit in it so I don't think it would cause your box to keep rebooting.

To be honest, it could be anything.

**bugzy** · 10-31-2005, 02:52 PM

I got a boot CD with Windows MiniPE that boots a light version of windows, its got partition magic and couple virus scanners, but im sure they got old definitions ... anyone know how i can get a newer version?

**SDSilver01** · 10-31-2005, 02:58 PM

Wasn't there that virus that hit XP a few months ago that caused similar symptoms?

**bugzy** · 10-31-2005, 03:00 PM

Originally Posted by SDSilver01

Wasn't there that virus that hit XP a few months ago that caused similar symptoms?

whats the info on that sucker

**SDSilver01** · 10-31-2005, 03:01 PM

Oooohhh. I have no idea now. I don't even remember the name of the virus. Maybe try doing a search for "Windows XP Virus"?

**oc-audica** · 10-31-2005, 03:01 PM

run repair off of the xp cd, try first to create a new master boot record

it is a trojan that tries to link system files to other worm files, damaging the system and not allowing it to boot properly... i think

**madajb** · 10-31-2005, 03:13 PM

Make yourself a UBCD disk with the latest antivirus defs to scan the pc's.
While you're doing that, add /bootlog and see where it fails on startup.

-ajb

**vwkidd77** · 10-31-2005, 03:44 PM

Been there and done this on 400 systems and 14 servers. we run trend micro on out WAN and sometimes things get by our fire wall Its a pain in the ass!

go to the run command and type in "regedit" be very careful in here!

you need to do this to both keys current_user & local_machine

go to software, then microsoft, windows, current version, run. delete everything under the run key but first compare to your processes that are running under your task manager. once you have done this go back to the run command and type in msconfig. go to the startup tab and uncheck everything thaty is not associated under c:\windows. once this is done reboot the system. once the system is back up then go into dos mode then to c:\windows\system32 the view it by details once this is done click on the date modified field and look for anything in the last week or a couple of days when you think you got this and delete anything with an exe extension but make sure they are the day or a couple of days after this started to effect you system. you can also go into documents and settings make sure you view hidden folders to do this go to tools, folder options, view and then mark the show hidden files and folders. once you have done that go back to documents and settings local settings slightly greyed out which means its a a hidden folder. delete everything under temp & temporary internet files. every thing i have had you delete is stuff that is running in startup which is where 99 % of viruses start unless its a atrojan then its a bit more complicated. if you dont try this then go to mcafee and try to find a fix for the sysmptoms you are having. Good Luck

**bugzy** · 10-31-2005, 03:47 PM

too bad i cant even get into the GUI

**vwkidd77** · 10-31-2005, 03:47 PM

what does it do after post

**bugzy** · 10-31-2005, 03:49 PM

after BIOS loading, it gets to phase where it shows Windows logo and has the bar that moves ... and then it reboots

**vwkidd77** · 10-31-2005, 03:51 PM

on the xp machine you should be able to go into safemode click on start then help and support. under pick a task choose system restore and choose a restore point before your machine was infected and see what happens. this worked and several systems for us but make sure you patch your machine if you do get it back up through microsofts web site. those security patches do wonders

**vwkidd77** · 10-31-2005, 03:52 PM

this is on the workstation and server

**bugzy** · 10-31-2005, 04:02 PM

I'd assume Windows 2003 Server has restore points, ill try this when i get home

**gest24** · 10-31-2005, 05:05 PM

Just get a Mac and ditch Windows

**cynicalgeek** · 10-31-2005, 06:55 PM

Lon - try pulling your network plug before you boot. It may help...

**Giraffe** · 11-27-2005, 09:51 PM

This happend to me and the cause was I dropped my pc a few inches and the GFX card came out of the slot. I couldn't figure it out, so I had to take it to a pc repair guy for him to tell me im an idiot.

Is the POST doing the normal One beep?