unable to use windows after small crash

I got a quite quite unwanted present for christmas, and it came a bit too early as well... My computer was functioning flawless lately, until a few hours ago, when I started outlook express, and windows stopped responding. I had to hard-shut down the computer by pushing the power button until power was cut.

When rebooting, I got a bluescreen. Rebooting in safe-mode is no problem, and I even have network access AND outlook express also works flawless. however, I cannot go to normal mode anymore, as it either hangs at a certain point during boot when services are starting or being initialized, or it gives a bluescreen at that point.

I tried chkdsk, but it fails to /f because it cannot 'lock' the disk contents. After answering 'yes' on the question if I want to perform a checkdisk after system restart, it just does nothing unusual and does not seem to check anything. A chkdsk without /f deleted a few index entries, then said to use the /f operator.

I tried to access the recovery console, but it gives a bluescreen.

I tried to access a system-restore point from safe mode, and that works, until I select a date, press next to confirm and then pres next again to execute the system restore. Nothing happens. No disk activity. No windows shutdown (unless I should give this step more time?)

I tried to run hijack this from safemode and found nothing suspicious.
I tried to launch Malware Bytes and Spybot S&D from safe mode, but they do not initialize. Maybe the cannot be run from safemode.

I tried one tool in the McAfee security center like 'disk analyze' in the disk defragmenter, but it does not start.

I'm not sure what the next step should be?

One thing that may have interfered with outlook is the McAfee Spam Filter, which is part of the suite.

I hope someone someone can shed a bit of light is these dark time of the year...

Dell computer, running XP SP3

Koen

 

continued (some more info) - may become malware thread

I just noticed, when accessing the internet from safe mode, some sites do not work. All famous virus killer related sites won't open. I do not know if this is due to the safe mode limitations, or if there might be a malware related scent to this thread: In safe mode, McAfee disables most of it's protection features, and I just saw a winweb malware checker hijacking a browser window.

I am not sure if this is something caused by surfing from safe mode, or if this is what is causing my problem in the first place.

If you think the second option is correct, then I may need to move this thread to the malware removal forum. However, I did not notice these hijacks during my first surf sessions in XP safe mode.

 

It's a dillema,

They're quite busy in the malware forum but a key indicator is this

I'd move to malware if it was my problem.

 

I got Mbam to run, and discovered that I had an unwanted backdoor visitor named TDSS, it was removed, but my initial blue-screen problem is persistent. I will continue to try and detect if the malware is causing this bluescreen-stuff. I may have catched it after the initial problem occured. But I have a strong feeling that I'll end up referring to this thread in the malware removal forum tonight.

I'm a bit struck by the fact that McAfee seems to be stopping any clever malware at all...

 

Resolved ?

OK... this was malware related. I misjudged the situation. My windows XP SP 3 was infected by TDSS rootkit malware. It hit very hard on the McAfee drivers and services causing the blue screen, I assume (very wild guess).

I succeeded to remove it by combined forces of Spybot S&D & Malwarebytes Anti Malware. I also had the firewall from McAfees Security center lock down all in and outbound comm, to prevent the download of new threats in meanwhile. I had all these tools installed, which was really good, as the dirty **** blocks access to anti-virus sites. After the first partial cures, I succeeded in downloading recent databases from the malware fighters. To I had to copy and rename the Mbam folder and exe file, and do everything from safe mode (run as, unchecked the safety checkbox which warns to 'protect my computer and data...), because my normal Windows boot did not want to work (blue screened), as did my recovery console. This is my first normal boot and I'm able to access kaspersky Online scanner again, which is great news...

I'm skipping details and the order is not 100% correct, because this is not the right forum, I am not a malware specialist, and my system can be different from other people's. I just added this short round up to bring the good news (hopefully). If this hits me again I WILL open a thread in the proper forum. I just found it a bit silly to start a thread there referring to this one to say it was resolved I hope that's OK.

 

Probably still best to visit the Malware forum, the guys there will help make sure you are clean and no baddies are hiding.