Dave, as Windows won't start Trooper won't be able to do that.
Trooper 656, I also could not find any information on that file name and as the system won't complete boot up we need to run a tool that will produce a log for us to see, which may help to solve the problem.
These instructions may appear complex, just take it one step at a time and you will get there.
NOTE: Unless otherwise advised please use a clean working PC to download and copy FRST to a Flash Drive.
Use these links to download the correct version for your operating system and save it to the Flash Drive.
For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit
For x64 bit systems download Farbar Recovery Scan Tool 64-Bit
NOTE: For Windows 7 systems only: If you cannot get Option 1 to work you can make a Recovery disc to use for Option 2.
Just do this: Click on Start > Control Panel and select Backup and Restore. In the left hand pane select Create a System Recovery disc and follow the prompts. This can be done on any Windows 7 PC but it must have the same bit rate as the infected PC, i.e. 64 or 32bit.
Plug the flashdrive into the infected PC.
Enter System Recovery Options by using Option 1 or Option 2
STEP 1
Option 1
To enter the System Recovery Options from the Advanced Boot Options:
Option 2
To enter the System Recovery Options by using a Windows installation or Recovery disc:
NOTE: If you are unable to complete either Option 1 or 2 then stop and let me know. This tool will only run correctly if you are able to get to the System Recovery Options menu.
STEP 2
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Trooper 656, I also could not find any information on that file name and as the system won't complete boot up we need to run a tool that will produce a log for us to see, which may help to solve the problem.
These instructions may appear complex, just take it one step at a time and you will get there.
NOTE: Unless otherwise advised please use a clean working PC to download and copy FRST to a Flash Drive.
Use these links to download the correct version for your operating system and save it to the Flash Drive.
For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit
For x64 bit systems download Farbar Recovery Scan Tool 64-Bit
NOTE: For Windows 7 systems only: If you cannot get Option 1 to work you can make a Recovery disc to use for Option 2.
Just do this: Click on Start > Control Panel and select Backup and Restore. In the left hand pane select Create a System Recovery disc and follow the prompts. This can be done on any Windows 7 PC but it must have the same bit rate as the infected PC, i.e. 64 or 32bit.
Plug the flashdrive into the infected PC.
Enter System Recovery Options by using Option 1 or Option 2
STEP 1
Option 1
To enter the System Recovery Options from the Advanced Boot Options:
- Restart the computer.
- As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
- Use the arrow keys to select Repair your computer and hit the Enter key. If Repair your computer is not in the menu you will need to follow Option 2 below.
- Select US as the keyboard language settings, and then click Next. If you know your keyboard is for another language then select that from the list.
- The system will scan for installed operating systems. Select the operating system you want to repair, and then click Next.
- Select your user account and click Next. If there is only one user account this will go straight to the System Recovery Options.
- Now go to the instructions for STEP 2.
Option 2
To enter the System Recovery Options by using a Windows installation or Recovery disc:
- Insert the Installation or Recovery disc.
- Restart your computer.
- If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
- Click Repair your computer. NOTE: This Option will be skipped if using a Recovery disc.
- Select US as the keyboard language settings, and then click Next. If you know your keyboard is for another language then select that from the list.
- The system will scan for installed operating systems. Select the operating system you want to repair, and then click Next.
- Select your user account and click Next. If there is only one user account this will go straight to the System Recovery Options.
- Now go to the instructions for STEP 2.
NOTE: If you are unable to complete either Option 1 or 2 then stop and let me know. This tool will only run correctly if you are able to get to the System Recovery Options menu.
STEP 2
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
- Select Command Prompt
- In the command window type in notepad and press Enter.
- The Notepad opens. Click on File and select Open.
- Select Computer and find your flash drive below Devices with Removable Storage make a note of the drive letter and close Notepad.
- In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
NOTE: if you receive an error message "the system cannot find the drive specified" go back into Notepad and check the drive letter for the Flash Drive, also note the letter can change on subsequent runs. - The tool will start to run.
- When the tool opens click Yes to disclaimer. (This may not appear on all systems).
- Press the Scan button. The progress bar may freeze for a while which is normal, leave it undisturbed and it will complete the scan.
- It will make a log (FRST.txt) on the flash drive. Put the Flash drive back in a working PC, open Windows Explorer and then click on the Flash Drive. Double click on FRST.txt then Copy & Paste the log into your next reply. Please DO NOT send the log as an attachment.