My sis screwed up her pc again. What a surprise. And guess who has to fix it?

Can't go on safe mode for some reason. I get a blue screen that says something about BIOS and drivers and what not. I can type the whole thing down if you really need me to.

If i turn it on normally, her desktop appears. No background picture, no start bar. Icons are there. Can't use Malware bytes. Her documents folder pops up for no reason whatsoever. Then a pop up appears saying "WS4414.exe" needs to close. The whole machine is dreadfully slow. Then a pop up saying that the system will shut down appears. Can't cancel it. It restarts and the whole thing starts all over again.

Assuming this is Vista.

Please print these instructions, or read from another computer. This could get difficult.

Whenever you see the shutdown prompt (Windows will shutdown in 60 seconds), press Start - and type in the start search box shutdown -a

Do this (usually three) as many times as necessary until they stop popping up. Once you get past aborting the shutdowns, then do the following:

Please download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please reboot to Safe Mode (tap the F8 key just before Windows starts to load and select the Safe Mode option from the menu).

• Open the extracted SDFix folder and double click RunThis.bat to start the script.
  
• Type Y to begin the cleanup process.
  
• It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  
• Press any Key and it will restart the PC.
  
• When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  
• Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
  (Report.txt will also be copied to Clipboard ready for posting back on the forum).
  
• Finally paste the contents of the Report.txt back on the forum with a new HijackThis log
  

Sorry her OS is XP. Should've made that clear. Vista is my OS, which I use to go on this forum.

No big deal. Instead of doing the Start search method that I described, just press the windows flag key (next to alt) + R
to open the Run box. Quickly enter in shutdown -a - as the process states above. Ok?

Hey man I haven't forgotten about this topic, just been taking my sweet time lol. I'll try to give some time to this tomorrow.

How's this going for you? Still with us?

yeah I tried what you said once and it wasn't working. Not sure what happened. Gonna try it again.

I keep entering shutdown -a into the run bar but it still restarts. It only worked once, but the USB drive I was using to transfer the file wouldn't work so I had to restart it.

Try in Safe Mode.

everytime I try to go into safe mode I get a random blue screen of death. Then I have to restart. Want me to type what it says?

Avira AntiVir Rescue System is a Linux-based application that allows accessing computers that cannot be booted anymore.

• Download The Avira AntiVir Rescue System from Antivir.de.
  
• Just double-click on the rescue system package to burn it to a CD/DVD.
  
• Then please use that CD/DVD with Avira Rescue System to boot your computer.

You'll get a boot option to either boot from hard drive or AntiVir Rescue System.


Press the number 2 on your keyboard to boot into AntiVir Rescue System.

Please wait until drivers are loaded and Main menu shows. Then please select the second option “Scan your system with AntiVir” and hit Enter.


Under Configuration, please select Scan all files, Try to repair infected files and Rename files if they cannot be removed?.


Then please start the scan.

The Avira AntiVir Rescue System wil now

• repair a damaged system,
  
• rescue data,
  
• scan the system for virus infections.

The file doesn't download. I even went to the Avira website to find the files and they wouldn't download from there either. I left the links on for over an hour and still 0%

http://www.avira.com/en/support/support_downloads.html

In the time that I was trying to download these files I downloaded two documents, the Avira program (hoping there would be a way to make a rescue CD in the program), and a video. So I know it's not my fault.

Try this link: http://dl.antivir.de/down/vdf/rescuecd/rescuecd.iso

Scanning now. Is it ok if I delete the bad files once they are found?

Yes, OK.