win32 zbot caused User Profile service failure

View previous topic View next topic Go down

win32 zbot caused User Profile service failure

Post by vince on Mon May 16, 2011 5:31 pm

we ended up with a zbot(win32) . Malwarebytes couldnt find it, AVG forund 17000 incidents.
Tried to quarantine, not big enough vault.
Now comp doesnt run. Black screen for ages, then "User Profile Service" cant load message, then after a long while, "C:\Windows\System32\config\systemprofile\Desktop is not accessible. Access Denied"

Can boot in safe mode, but theres no system restore, and when try to run anything get a cant find "exe" file.
Help ( Thankyou in Advance . You guys helped me a few years ago, greatly appreciated)

vince
Novice
Novice

Posts Posts : 31
Joined Joined : 2009-04-27
Gender Gender : Male
OS OS : XP
Points Points : 27885
# Likes # Likes : 0

View user profile

Back to top Go down

Re: win32 zbot caused User Profile service failure

Post by vince on Mon May 16, 2011 5:32 pm

Forgot to mention this is on a machine running Vista 32 home edition.

vince
Novice
Novice

Posts Posts : 31
Joined Joined : 2009-04-27
Gender Gender : Male
OS OS : XP
Points Points : 27885
# Likes # Likes : 0

View user profile

Back to top Go down

Re: win32 zbot caused User Profile service failure

Post by vince on Mon May 16, 2011 7:20 pm

dont know if it makes a difference but avg is showing files infected with Win32/Zbot.G and also a generic VBS virus

vince
Novice
Novice

Posts Posts : 31
Joined Joined : 2009-04-27
Gender Gender : Male
OS OS : XP
Points Points : 27885
# Likes # Likes : 0

View user profile

Back to top Go down

Re: win32 zbot caused User Profile service failure

Post by vince on Thu May 19, 2011 7:02 pm

Bumped Help.

vince
Novice
Novice

Posts Posts : 31
Joined Joined : 2009-04-27
Gender Gender : Male
OS OS : XP
Points Points : 27885
# Likes # Likes : 0

View user profile

Back to top Go down

Re: win32 zbot caused User Profile service failure

Post by vince on Sun May 22, 2011 10:45 am

Sorry for being persistant. I can't load OTL onto bad machine,so can't paste you any info.
Any1 any ideas

vince
Novice
Novice

Posts Posts : 31
Joined Joined : 2009-04-27
Gender Gender : Male
OS OS : XP
Points Points : 27885
# Likes # Likes : 0

View user profile

Back to top Go down

Re: win32 zbot caused User Profile service failure

Post by Belahzur on Mon May 30, 2011 8:18 pm

Hello.

We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.

Download the OTLPE Standard REATOGO Windows Recovery Environment.

  • Place a blank CD-R disc in to your CD burning drive.
  • Download [You must be registered and logged in to see this link.] and double-click on it to burn to a CD using ISO Burner.
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps [You must be registered and logged in to see this link.]
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings

  • Change Drivers to Non-Microsoft
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\_OTL\MovedFiles
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum