This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Notebook infected with System Tool and other malware

39 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from April 14, 2011, 10:15 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

trestinc
Turns out the USB flash drive is 1st Boot Device Priority
trestinc
F12 still does nothing
trestinc
Esc method --> choose USB flash drive method still gives me aa black screen with a blinking cursor
xixo_12 MRU Master Emeritus
Wait. It's F2 or F12 that you hit?

ok, please remove the usb.
Then, remove the battery,start and hit F2 again, and make sure you able to boot into bios.

change sequence :
1. usb
2. hard drive.

make sure after that press F10 (save and exit)
next step, attach your usb, and reboot.

and if you want to reboot normally, don't attach any usb and it will use hard drive as main source.
When you configure it to be like this, everytime you boot, you're advice NOT attach any usb.

Let me know if you don't understand or still face any difficulty
trestinc
I just removed the USB flash drive, battery and then opened the notebook and entered into the bios setup utlity (F2 (f two))

I was supposed to have the usb in the notebook wasn't I?

right now i see

1st boot device [removable dev.]
2nd boot device [hdd: pmst916...]
3rd boot device [ATAPI CD-ROM]


EDIT: Never mind, the USB is supposed to be out when I change the bios setting.
xixo_12 MRU Master Emeritus
removable device should be related with usb stuff.

Let's make two experiment.
Let's attach the usb flash drive, and reboot the system.
Allow it to boot from there.

If won't work,
remove usb flash drive, and reboot the system.
boot from hdd and see if it can work.

Otherwise,
we will try and take risk to fix the mbr. Seem like not have enough choices. :(
trestinc
So for experiment one do I:

1. insert usb into powered off notebook.
2. open notebook
3. select windows xp normal mode?

If yes, the result is a black screen, no blinking underscore/cursor
If no, what do I do.
trestinc
Experiment 2:

1. open notebook
2. pull battery off
3. open notebook
4. press esc repeatedly
5. select boot from hdd.
6. select windows xp normal mode

result: black screen no cursor
trestinc
Experiment 1:

1. open notebook
2. pull battery off
3. esc, esc, esc, esc,...
4. boot from usb flash drive

result: black screen, blinking white underscore/cursor


Personal note:
Start: 9:31 PM
Elapse time: 20 minutes
End: 9:50 PM --> still same screen --> ctrl + alt + del --> choose os screen --> power button --> shut down
xixo_12 MRU Master Emeritus
Hi,

Ok let's make another weird thing :D

Try with different usb port ;)
Let me know the result

hmmm. I did that (left USB port, changed the priority) and still nothing - when it tried to boot, it's a blank screen with the blinking underscore in the upper left corner. But after I plugged in my original thumb drive into the right port (with the left one attached), it suddenly worked! Very weird, but thanks - that's much better!

Source : http://forums.auroraos.org/viewtopic.php?f=45&t=3220
trestinc
So I have a left one, and two right ones.

This is what I did:

1. Put USB in USB port.
2. Turn on computer.
3. Pull battery.
4. Turn back on and get in to screen to chose where to boot from
5. Choose the USB option
6. Not working? --> push power button and start from step 1 with different port.

Result:


Left --> black screen, blinking white cursor
Top right --> black screen, blinking white cursor
Bottom Right --> black screen, blinking white cursor
trestinc
Something interesting happens when I choose Jolicloud though.

I chose it. Hit esc once. and it says

Jolicloud. ....
Jolicloud ... (recovery mode)
Windows NT/2000/XP (on /dev/sda1)
Windows NT/2000/xp (on/dev/sda3)

"use the up and down keys to select which entry is highlighed. Press enter to boot the selected OS, '' to edit the commands before booting or 'c' for a command-line. ESC to return previous menu."

EDIT: actually this is probably useless to since you're not familiar with this OS.
trestinc
By the way, what time is it exactly where you are?
xixo_12 MRU Master Emeritus
Hi,

Now it's 3.30PM at my place. ;)
I have to get the mbr.zip

So we will keep trying unless you give up and prefer to reformat.
I will ask my colleague help in this matter. As long you will stay with us, we will try our best.

Let's check on something.

Let's plug in the usb flash drive.
1st boot device [removable dev.]
2nd boot device [hdd: pmst916...]
3rd boot device [ATAPI CD-ROM]

Watch out the bold part. Can you go through the bios, and see IF there is other devices attached different from these 3.

Just let me know.

Second question.

When you start the system.
It will go like this?

Start > Choose operating system (consist of XP, jolicloud, and Windows recovery console) > windows start.

Am I right about that?
trestinc
So entering into the BIOS to check
boot priority (with USB Flash Drive plugged in):


1st [USB: USB Flash Disk]
2nd [HDD: PM-ST916...]
3rd [ATAPI CD-ROM]


--> same as you expected
--> no parenthesis () --> not disabled
--> Only these three boot options
--> Taking out the usb and checking bios shows me removable drive as 1st and still 3 options



Upon opening the note book normally, the
OS choices:

"Please select the operating system to start:


Microsoft Windows Recovery Console
do not select this [debugger enabled]
Microsoft Windows XP Home Edition
Jolicloud

Use the up and down arrow keys to move the highlight to your choice.
Press ENTER to choose."

--> same as you expected
--> At default, jolicloud is highlighted so in about 2 seconds it goes in jolicloud.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.