Look2Me-Destroyer tool killed my PC

[cluesome]

Hi there, 1st post ; go easy ...

I am trying to eliminate adware from my mum's PC and narrowed the problem of repeating infections down to Look2Me (rightly or wrongly.) I found the Look2Me-Destroyer.exe tool after reading the sticky thread on this forum.

I cannot get to the hard disk to show you the HijackThis log but it did show the 020 Winlogon Notify key entry that characterises the Look2Me infection.

I ran the tool and now receive the following error on re-boot:

STOP: c000021a {Fatal System Error}
The Windows Logon Process system process terminated unexpectedly with a status of 0xc0000005 (0x00000000 0x00000000)
The system has been shut down

I cannot boot at all, not even to Safe Mode.

Any offers?

[profdlp]

Boot from the WinXP CD and proceed as if you were doing a fresh install. When Setup finds your existing Windows installation tell it to Repair it. :)

[cluesome]

Thanks for your reply.

It is as I feared then, i.e. that I need to re-install windows? I don't have an installation disk for XP as such, just a recovery floppy that manages to somehow re-install windows, I would guess from a restoration folder on the HD.

I will try it and get back to you but I'm pretty sure it won't give me the option.

[profdlp]

What brand is the computer and what does it say on the recovery disc? I wouldn't try it just yet - many of them format your drive and you lose all your data. :(

Give us the information above and maybe we can come up with another trick or two to try. :)

[cluesome]

Thanks for getting back to me here.

It's a Packard Bell iMedia 5050 desktop PC bought from PC World in the UK. Its not the best machine in the world but it keeps mum online, which is great for her.

It comes with a "Smart Restore" recovery program on a floppy disk, which I recall overwrites the HD without a recovery option - I'm reluctant to try it except as a last resort.

Any ideas?

[cluesome]

bump

[SPIKE09]

hi Cluesome, although your Mums pc does not come with an XP CD do you have access to one, any XP cd should be able to do the repair suggested by Prof. If you were in the west coast, I would loan you one but I do not get through to Embra too often. Shame really as I graduated from napier uni. nearly 20 years ago.:beer:

[cluesome]

Unfortunately i don't have a proper copy of XP to hand. However, I borrowed a dodgy installation disk from a friend, which had a number of versions of xp on it but in each case the installer tried to start windows and encountered the same logon process problem as above.

I guess there's nothing for it but to use the recovery disk?...

@SPIKE09: greetings from the east. I did a postgrad course at Napier myself, almost as many moons ago.

[profdlp]

You could see if the Knoppix suggestion in this thread (http://www.short-media.com/forum/showthread.php?t=51216) will allow you to get your data back, then go for the recovery disc option to get the computer going. :)

[cluesome]

I'll do that. Thanks for your help.