Solved

Blue screen of death after running combofix

Posted on 2008-06-11
3
925 Views
Last Modified: 2008-06-11
I was trying to remove Virtumonde from my pc using Combofix.
Combofix ran up to the point of saying it ws going to restart and it never did. It just froze. So I powered off the PC. Now I get the blue screen of death. It reboots to quick to read but it looks like it can't load the hive.  Is there anyway to to recover from this?

Thanks
0
Comment
Question by:whiwex
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
kadafitcd earned 500 total points
Comment Utility
Well first of all you can disable the automatically reboot after error.  To do so upon turning on computer start tapping f8 continuously over and over.  You will then see a Selective Startup screen.  Move with the arrow key to the option disable reboot upon system error(not exact but similar to that) and click enter.  Now you should be able to read the error and write it down as well as the 0x_____ code.  Then you can post it back to us and we may be able to help further.  To turn off the computer while it's in the BSOD just hold in the power button for 5 seconds.  

If you don't have the option for disabling reboot in the selective startup screen then go to safe mode in that screen.  When you're booted into safe mode you can go to Start > Control Panel > Performance and Maintanence > System > Advanced Tab > Startup and recovery settings > uncheck automatically restart under system failure and apply it.

Also while in safe mode you could try a system restore from Start > all Programs > Accessories > system tools > System restore and restore it back to before you ran the combofix.  

Then if that works you can run combofix or smitfraudfix in safe mode and they should work fine.  

Good Luck HTH.
0
 

Author Comment

by:whiwex
Comment Utility
I ended up doing a manualy recovery f te regstry and I am back to where I was before I ran Combofix.
Thanks
0
 

Author Comment

by:whiwex
Comment Utility
I ended up doing a manualy recovery of the regstry and I am back to where I was before I ran Combofix.
Thanks
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

One of the biggest challenges facing freelancers is balancing multiple projects and deadlines. Organizational skills and time management are key to keeping up with projects and staying on track. Luckily, we’ve curated seven tools to help you focus o…
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
The Bounty Board allows you to request an article or video on any technical topic, or fulfill a bounty request to earn points. Watch this video to learn how to use the Bounty Board to get the content you want, earn points, and browse submitted bount…
Where to go on the main page to find the job listings. How to apply to a job that you are interested in from the list that is featured on our Careers page.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now