Search:

Alright. Tried it and I get BSOD:

STOP: c000021a {Fatal System Error}
The Windows Logon Process system process terminated unexpectedly with a status of 0xc0000135 (0x00000000 0x00000000).
The...

Sorry to keep you waiting. I haven't gotten around to it yet and probably will not be able to until the middle or end of the week due to schoolwork. :snorkle:

Just recovery console. But some things are still not accessible for some reason.

Hahah looking at the contents of ERDNT.CON, that's what we just did with the config folder, isn't it?

Ugh. Still getting Access is denied when I try to batch erdnt.con. I'm going to examine the contents of erdnt.con in Kubuntu and see if it's something I can do manually.

HOWEVER, it seems that somehow my sam file got deleted and moving the backup sam over seems to have fixed this as the recovery console now asks for a password. I can log in. I'm going to try what...

The computer looked like it was going to start but then restarted. I think it's still getting the BSOD but is restarting instead of showing it due to settings reset. I noticed something interesting...

Using the Windows CD? I can do that using the Kubuntu CD, but not with the Windows CD. The Windows CD takes me to Windows Setup, which is what I've been doing all this time (trying to use system...

Ok so I tried a system recovery using a SP2 cd and now I'm back to where I was with the first BSOD STOP. Same error. Maybe if I use an SP3 cd lol.

Sorry, I don't understand what you mean. :red:

Keep in mind I do have Kubuntu installed, so if needed I can manually replace files.

I'm pretty sure I had the final version of SP3, though I'm not completely 100% sure. Also, ComboFix did NOT suggest that I install recovery console. I found this strange considering the report it...

I was never prompted for my password, and when I try to run "batch erdnt.con" I get "Access Denied".

I don't think I can install it, but I can run it from the CD. Is that good enough?

Well, after messing with some bios settings, I got past the stop message :) but the XP loading screen is taking FOREVER. The bar is moving but it's been doing that for like 20 minutes now... I...

Oh yeah, if it helps, I have an installation of Kubuntu on another drive. It's got NTFS drivers so I can mess with the XP filesystem if necessary.

It would seem that Vundo is extremely contagious, or there is an epidemic going around. My laptop is now infected :[. Still working on getting Windows running. I did a recovery using a SP1 CD but...

Computer is shutting down with a STOP BSOD error:

STOP: c000021a {Fatal System Error}
The Windows Logon Process system process terminated unexpectedly with a status of 0xc0000135 (0x00000000...

Computer hung in the middle of ComboFix. Computer no longer starts. After Windows loading screen, screen goes black and nothing happens afterward. Safe mode too.

There is one small, additional problem that seems to have appeared around the time the malware did. The fonts in my Firefox browser are all bold in some areas that weren't like that before. Like...

Got it this time ComboFix Log:

ComboFix 08-10-30.09 - GameKyuubi 2008-10-31 10:50:08.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.932.81.1033.18.393 [GMT -7:00]
Running from:...

Combofix finished, but the log it produced was empty and I was unable to find Combofix.txt on the root of any of my drives..

Here is the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan...

I also cannot access the safer-networking.org website or the spybot.info forums any longer. I am using a second computer for this right now.

Please note that the problem has worsened. I can no longer reliably boot my computer without resorting to safe mode.

Here is the log:

?A?J?c?L�gd?o?i?L
�g??u???_?^ ver 1.00a
�g??u�he�ez�gV...

When I hit save, HJT closed without saving anything. I renamed HJT and tried again. Worked that time. Let me give you the first four entries since HJT makes them unreadable:
アカツキ電光戦記 (Akatsuki...

About year and a half ago, I contracted the Virtumonde/Vundo nonsense. There was very little effective information on it back then, and I managed to incapacitate it with a combination of tools,...