Green Dot virus For a Friend

[Busymama62]

Hello everyone,  A friend of my got the Green Dot on her laptop.  She kept hitting control, alt, delete till she finally got the page to close. Then she shut down the computer.  I gave her the info of how to get to this forum and that she needed to read the two push pinned articles and follow the instructions before posting.  Well, when she tried to boot her computer it just kept switching from  a blue to a white screen.  What can we do or does it have to go in somewhere to be fixed?  Thanks!

[essexboy]

Hi what is the operating system  XP, Vista, 7 or 8
Also is it a 32 or 64bit system ?

[Busymama62]

This is what she said..."I'm not sure about the bits but its an hp notebook mini with windows 7 starter, Intel Atom inside."  Then she added "It just says hp mini."

Thank you Essexboy!

[essexboy]

OK we will work on 7 32bit

Download the following three programmes to your desktop :

 
1.  WiNTBootIc
2.  Windows 7   RC
3.  Farbar Recovery Scan Tool 

Extract wintoboot to your desktop
Insert a USB drive of at least 1GB
Run Wintoboot



Drag and drop the Windows 7 ISO to the programme in the space indicated
Tick the Format box and accept the warnings
Press Do It

You will see it progressing



It will let you know when it is done
Then copy FRST to the same USB




Insert the USB into the sick computer and start the computer.  First ensuring that the system is set to boot from USB
Note: If you are not sure how to do that follow the instructions Here

 
When you reboot you will  see this although yours will say windows 7. Click repair my computer

 
Select your operating system

 
Select Command prompt

 
At the command prompt type the following  :

notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.

Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[Busymama62]

Thank you!  Will work on getting these downloaded, then set up a time with Denise to get together and then will post results.

[Busymama62]

Well, I am unable to get it to boot from the USB.  Would the reason be that it is "Windows 7 Starter"?  If I push and hold cont, alt, delete I can get the Windows & Starter Page with these choices "lock this computer" "Log Off" "Change Password" "Start Task Manager" "Cancel" and then an shut down button with the options of  "Restart" "Sleep" "Hibernate" and "shut down". There is also an "Ease of Access" button.  At least now I can do a complete shut down, she was just putting it to sleep or in hibernate I think.  I do have the laptop at my house now so tht it will be easier to work on.    Some info from Bios that may or may not be helpful...Notebook Model HP Mini 21-=1000, Product Number WK988UA#ABA, System Board ID 3660, Processor Type Intel (R) Atom (TM) CPU N450 @ 1.66GHz, Processor Speed 1666 MHz, Memory Size 1024 MB, Bios Version F.12, Bios Vendor Insyde, Serial number CNF026086W, UUID Number 434E4630-3236-3042-3657-C80AA9D667BA, Product configuration ID 04A110000020210010300000, Factory installed OS Win 7.  The choices for Boot Type Order are "Notebook Hard Drive", USB Diskette on Key/USB Hard Disk, this is the one I chose, I used a 1G Flash Drive Stick, "USB CD?DVD Rom Drive", and "USB Floppy" and then "Network Adapter" which has an ! in front of it and the notes state that if it has a exclamation mark that the boot capability will be disabled.  Hmmm I went back to the Boot Options page and here is what it lists..."Post HotKey Delay (sec)   <0>",  "Hp QickWeb <Disabled>, "CD Rom Boot  <Enabled>",  "Floppy Boot <Enabled>",  "Internal Network Adapter boot <Disabled>", and then below that is "Boot Order" 

I am able for a few seconds at a time to see her desktop but then it flash to a white screen and usually sits there for awhile and sometimes flashes to a blue screen with a faded windows logo.

I figure I have provided a bunch of info that you don't need but hopefully there is something in the info that will help.  Thank you so much for your time and assistance!

Linda

[essexboy]

Are you able to change the BIOS boot order so that the USB is first ?

Are you able to access the safe mode menu ?  Boot the computer then press and hold F8

[Busymama62]

I thought I was changing it to boot with USB.  The USB light would flash when booting but didn't do what it was supposed to do.  Yes I can get into safe mode menu.  This is what pops up on the screen when I push F8

Repair Your Computer

Safe Mode
Safe Mode with Networking
Safe Mode with Command Prompt

Enable Boot Logging
Enable low-resolution video (640x480)
Last Known Good Configuration (advanced)
Directory Services Restore Mode
Debugging Mode
Disable automatic restart on system failure
Disable Driver Signature Enforcement

Start Windows Normally

Description:  View a list of system recovery tools you can use to repair startup problems, run diagnostics, or restore your system.

[essexboy]

Select this and let me know if you can get in Safe Mode with Networking

If so then

• Download RogueKiller  and save it on your desktop.
   
  NOTE: If using IE8 or better Smartscreen Filter will need to be disabled
  
  
• Quit all programs
• Start RogueKiller.exe.
  
• Wait until Prescan has finished ... 
•     Click on Scan

   
 

• Wait for the end of the scan. 
• The report has been created on the desktop. 
• Click on the Delete button.

     

• The report has been created on the desktop.

• Next click on the ShortcutsFix   
  
  
• The report has been created on the desktop.

Please post:    All RKreport.txt text files located on your desktop.

[Busymama62]

Well, I chose Safe Mode with Networking thought it was working because it showed all this windows stuff loading, then showed a safe mode screen then flashed to the all white screen and that is where it is staying. 

[Busymama62]

Well now every so often, it flashes to a black screen that has safe mode in all four corners

[essexboy]

Could you burn the ISO to a CD and try to boot from that

[Busymama62]

I don't think so.  The CD will not open on the desk top and I had to do most of the downloading from it because one of the programs I could not access thru the IBM Thinkpad.  I will try again though.  If I have CD burning on the thinkpad, may need to install something first.

[essexboy]

What does the think pad have on it win 7 ?

[Busymama62]

Both the desktop and Thinkpad have Windows XP, I take work back and forth from both computers so wanted the same operating system.