Cannot boot to windows after using malwarebytes

[rpMasterminD]

Hey everyone,

 

I ran malwarbytes on an Acer computer and after finding over 11, 000 infections and removing them, it prompted me to restart. After the restart, it shows the windows logo and after a few seconds reboots again and went to the windows repair screen count down.

 

After the count down it scans to see if it can find problems and repair them or restore windows to an earlier time.  It asked me if I wanted to restore I hit no by accident.   I tried it again and restarted but it will no longer ask to restore it, just says it cannot fix the problem.

 

Will someone help me please?  I have tons of important documents on my computer.

[1PW]

Hello rpMasterminD and

After finding that many infections, the chances are the system is still infected and malware removal actions are not permitted in this sub-forum.

I recommend following the advice from the topic: Available Assistance for Possibly Infected Computers and have one of the Malware Removal Experts assist you with your issue.

If, as recommended, you do open a topic in Malware Removal Help, please make reference to this thread.

Thank you.

[AdvancedSetup]

Do you have access to another system running the same version of Windows and a large 4GB or larger USB thumb drive or external USB drive that you can use to try a repair?

DO NOT use this method or idea if the versions of Windows are not the same. ie.. do not use XP or Vista to fix a Windows 7 box or vice-verse

You should be able to use Robocopy to put back enough of the files to allow the system to boot again.

Assuming you have a USB drive on F: please create a folder called Windows in the root/top of the drive.

Then click on start and type in CMD.EXE and when it shows in the start menu right click over it and choose "Run as administrator" and type in the following and press the Enter key.
 

ROBOCOPY "C:\WINDOWS" "F:\Windows" /s /xo /xj *.exe *.dll *.sys /r:0 /w:0

Then start the affected computer up with the USB drive attached and issue the following command

This assumes that the USB drive is now D: from within the Recovery Console if not then adjust to the correct drive letter. You can run NOTEPAD and then try File Open to locate the drive, then close Notepad.

ROBOCOPY "D:\WINDOWS" "C:\Windows" /s /xo /xj *.exe *.dll *.sys /r:0 /w:0

Once completed try to restart the computer now in Normal Mode

 

Please let me know how that works out.

[rpMasterminD]

Yes the laptop I am on now, is a windows 7 64bit laptop

[AdvancedSetup]

Please try the above and see if that will get Windows at least working to get into Safe or Normal mode. 

 

DO NOT under any circumstances use the MBAM CLEAN removal tool. That will remove your quarantine files and we need those in order to restore your registry items.

[rpMasterminD]

Trying what you suggestednow.

[AdvancedSetup]

Great.. I'll be around.

[AdvancedSetup]

You can also try a System Restore to a previous time from within the Recovery Environment

[rpMasterminD]

So while I was robocopying the files on my working pc, it froze up and I had to power down.  Trying robocopy again now.

[rpMasterminD]

/r:0 /w:0

 

is that the number 0 or the letter o?

[Firefox]

while you wait on Ron.... the would be the # 0 (the capital letter O would look like that notice its wider)

[rpMasterminD]

ty wanted to make sure I used the right one thought maybe that's why it froze

[Firefox]

Your welcome, continue to work with Ron when he returns, I just chimed in to answer your question...

[rpMasterminD]

HeyRon,

 

I just wanted to ask does robocopying normally take a good while?  It's advancing and have been close to a hour now, just wanted to make sure I'm doing it right. I'm still at step one.

[rpMasterminD]

Alright it ended after saying there is not enough space on my 8 gig flash drive and kept going. Shows that some files were skipped, is it safe to still run the affected computer?

[rpMasterminD]

is it safe to still attached the flash to the affected computer**

 

sorry about the typo

[AdvancedSetup]

There is no concern as far as safety of the other computer unless the current one is infected. I think the issue is the C:\Windows\winsxs folder which can contain many Gigabytes of data and may for now need to be excluded if using the robocopy method. 

 

 

Is it possible to try and do a System Restore to a previous time from the Recovery Environment?  That would be a better approach if possible.
 
Please see if one of these articles can get the system running again
 
How to Do a System Restore in Windows 7

How to Run a Startup Repair in Windows 7

[AdvancedSetup]

Well as you've decided to seek help from another source I'll go ahead then and close your topic here so that we do not mess things up with different approaches.

 

http://forums.majorgeeks.com/showthread.php?t=287365

 

Thank you