Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 738
  • Last Modified:

Windows 7 64-bit BSOD 0x7B booting after Pihar and ZeroAccess removal

Dell Inspiron 1545 laptop with Windows 7 64-bit Home Prm.  Pulled hard drive for virus scan using NIS 2013 and removed ZeroAccess, Boot.Pihar, Maljava, and Trojan.Ransomlock.  Computer did successfully boot before removal, would run for a couple of minutes then BSOD.  Now during boot process - BSOD (STOP 0x7B).  

TDSS Killer doesn't find anything more than what was removed.  I have tried fixmbr and chkdsk.
0
Jason Johanknecht
Asked:
Jason Johanknecht
  • 5
  • 4
1 Solution
 
Patrick BogersDatacenter platform engineer LindowsCommented:
Hi

You need to boot with Windows 7 x64 media and do a repair install. Some viruses like to replace bootfiles explaining you BSOD on boot.
Pretty sure this will fix your problem.
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
Scanning a device with a windows OS should be done while the boot device is running as boot device to protect windows files. Win 7 x64 especially makes many engines think that a rootkit or key logger is active because of the way it tricks 32 bit programs. Check out this article:

http://www.experts-exchange.com/A_6650.html 

On malware fighting best practices by younghv.

As to your current situation, sounds like your only recourse is a repair install, unless you have a backup (the one you always do before trying to remove malware).
0
 
Jason JohanknechtIT ManagerAuthor Commented:
I have been doing virus removal this way for years, and this is the first one that didn't work and couldn't be resolved due to Windows files infected the scanner doesn't find or windows/registry settings that need to be corrected.   I am sure it is going to turn out that way, just haven't figured it out yet.  We repair atleast 200 virus infections a year using this method.  

Repair install is not possible, since you have to perform this from starting within the OS.
0
Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

 
Thomas Zucker-ScharffSystems AnalystCommented:
You can do a repair by starting the repair console from a win 7 boot cd. Try using a sardu created boot disk (see my article).
0
 
Jason JohanknechtIT ManagerAuthor Commented:
How are you doing the repair install from the DVD?  I tried and keep getting the expected you must reboot, remove the DVD and start from within Windows.  I have googled and found nothing.
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
If you download SARDU click on the win7 rescue disk and create a bootable device.
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
Datapro,

Thanks for sharing what you found - great resource.  So does that mean you got everything up and running?
0
 
Jason JohanknechtIT ManagerAuthor Commented:
Everything works perfectly now!
0
 
Jason JohanknechtIT ManagerAuthor Commented:
Worked perfectly!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now