Hello everyone. I hope someone can help me with a virus problem. My son got a funner.exe (I think it is also called W32.funner) virus through MSN. We have an up to date Norton AV. He attempted to remove the virus on his own (using instructions on the web, according to him), but I suspect that he did not follow the instructions precisely as now we simply cannot log into XP. Not even in Safe mode (none of the profiles, including Admin.). If I click on any profile, windows logs me off immeidately (after showing desktop briefly).
This is a laptop we got virus on, and the laptop came with the RESTORE disk(-s). I am not eager to use the RESTORE disk as it will erase 2 years worth of data that is currently on the hard drive. I spent the last 3 days trying to fix the problem, and this forum is one of my last hopes.

I read in the previous posts that people re-installed Windows and were able to log in and remove virus from Windows. - I cannot do it, because all I have is disks from laptop manufacturer with windows + all software that came originally with laptop - it will erase all the data. I have a Windows XP disk from my desktop - will it work if I install Windows from this disk on laptop? Will it affect any data? Will I need to reinstall any/all programs?

I read that some people run DOS AV - I don't know how to get to DOS prompt from the boot (I cannot log in Windows). Even if I do, I a not sure how to operate from there. I am familiar with DOS, I simply don't know how to solve this problem from DOS. I understand that I will need to change windows registry - can it be done in DOS?

One more problem worth mentioning is that there is no floppy on this laptop. If any suggestions will include using boot disk, could you please mention how/if I can burn a boot sequence on a CD and how can I use it
( I imagine the manufacturer programmed to read CD drive first since there is no floppy...)

Big thank you to a kind and patient (patient enough to read such a long message) person who will be able to provide with some advice.

Peace....

sirius

Have you tried booting with the Norton CD in?

Boot up, open the CD tray, drop in the Norton AV disk. Shut down and reboot, or:

Look below the CD tray, should be a tiny hole. Take a straightened paper clip and insert it into the hole, when you feel resistance, press firmly. The CD tray will pop open, put in the CD and boot up.

Norton CDs are bootable, they will connect to the internet and load the latest def file into RAM and run a scan.

_________________________
The internet is no longer a toy, it's a COMBAT ZONE!

Good idea Martin Crandall. Here are my two cents:

First off, you mention you cant boot into safe mode. Safe mode is used to load only system files and not any other programs, so, if your laptop is messing up when you boot into safe mode, then a system file(or files) is damaged via the virus.

It is possible to restore system files. However, it is difficult to locate which files are needed and often when overwriting a previous system file you damage the OS and render it unstable. And I personally havnt had success doing it.

I have seen in previous operating systems, an option during install that says install only the operating system and leave previous files on the computer, so you dont format, you just overwrite the whole OS. Doing this option will mean all of your old programs would need to be reinstalled. However, the documents would still be on the computer.

I am curious about the boot up, and maybe able to offer better help with some info about exactly what is happening during the startup process. Where does it crash at? Is there any error msg's? Does the screen flash blue with white text, but happens to fast to read it? At what point does the laptop reboot? And finally, does your pc beep abnormally during startup?

I had a very similar problem. I believe this is something an entirely different than a Win32.Funner virus. If it is a virus, I got it in an entirely different way than Win32.Funner is usually transmitted (not from MSN). I got the problem from attempting to log onto an unsecured neigborhood computer-to-computer network (I know I shouldn't have, but I wanted to see if my laptop's wireless was working).

Description:

Cannot boot into safe mode. In normal mode, after logging in, a blank desktop is shown - no icons, no taskbar - cannot Ctl + Alt + Del. Waited for an enternity (at least it seemed. I *guess* 3-4 minutes). Cannot use "Last known working configuration." Attempted to use a Win XP CD for recovery CD but could not access the volume since did not have the Administrators's password (corporate laptop ;) ).

Where does it crash at?

Does not crash, but hangs.

- in normal startup: fully boots, press Ctl + Alt + Del to begin, type username, type password... very quickly loads the desktop. No icons, no taskbar, Ctl + Alt + Del does not work. Pressing power button does not shut the computer down.

- in safe mode: hangs after agp440.sys which isn't saying anything because this is the last sys file loaded.

Is there any error msg's?

No.

Does the screen flash blue with white text, but happens to fast to read it?

Yes, and no. In boot.ini I have the /sos switch so it shows all the startup msgs.

Not too fast to read. Except for one screen... the one right before displaying the build 2600 SP2.

At what point does the laptop reboot?

My laptop doesn't reboot. I have to force power-off it (press pwr button continuously).

And finally, does your pc beep abnormally during startup?

No.

- fixed it:

During boot up, but after POST, press F8 for Windows boot options. Boot into Windows Debugging mode. Wait for about 2-3 minutes. Icons and taskbar should appear. Reboot into normal mode. Wait 2-3 min again. Icons and taskbar should appear.

Desktop
HP
AMD ~2000+

Laptop
Toshiba M200
Tablet PC ~1.6 GHz

Thank you everyone for your time and efforts.

Ian, I don't want to try Norton CD - my son said that when he got a message that Norton has found a virus "funner", he tried to remove it on his own and ... the problem that I have is a result of his actions. He claimed that until he deleted the files that Norton prompted him to, everything was fine (at least he was able to log in..). I think may be it is some "mutated" version and Norton did not delete something it was supposed to or did not delete/change everything it had to . In other words, I don't want to rely on Norton at this time.

Now, what the computer does:
it boots seemingly normally until the log on window - clicking on any profile seems to be loading Windows for a second (shows message " Loading your personal settings") and it then immediately logs out back to log in screen. Shows "Logging off".

Someone suggested this :

http://www.ntcompatible.com/thread31505-1.html

I tried and it did not work.

I am a bit concerned with reinstalling Windows for a couple of reasons. Everything that I have on the laptop came on 3 disks (Windows + all software). The only option I have with these disks is erase, format, reload.
I have Windows XP disk from my desktop -
I suppose I have an option of installing it on my laptop. However, all the programs will need to be reinstalled as well, and since I only have them on those 3 disks that came with the laptop, I am at the dead end again. May be I can try to reinstall Windows, save all the data that I need, and then format and use the manufacturer's 3 disks? ...

sirius