Forum Home
Press F1
 
Thread ID: 122665 2012-01-05 21:26:00 can't install windows xp/7 chumscrubber (16416) Press F1
Post ID Timestamp Content User
1252369 2012-01-07 21:57:00 I suppose your CMOS battery is O K? If so, I would look at the HDD controller port. PENTIUM (426)
1252370 2012-01-07 22:41:00 Agent_24
wainuitech

thanks a lot for ideas, i installed windows xp sp1 and it ran ok, but now it won't boot again. I'll see the computer tomorrow again, today we celebrated christmas and i had no time for computers, I'll try to remove one of two ram memories tomorrow. I really can't try other HDD I'm on vacations here, anyway thanks for help will post the results tomorrow.
p.s it doesn't look like bsod according to my friend there were no error screen like that

Might want to take a look at the HDD health too... get http://www.hdat2.com/ and check SMART status for a start, if anything pops up as warning, post here what it was.

Note: if you want to do actual tests\blanking etc above just reading SMART values, make sure you use version v4.5.3 (which is included on the latest CD ISO image if you use that) as the latest one is a 'demo' and doesn't actually run any tests.
Agent_24 (57)
1252371 2012-01-11 18:31:00 I finally isntalled windows and it works ok untill the process 13.exe begins using cpu fully. deleted it but after restarting it starts again. also tried to delete from registar but still the same. 13exe in in folder application data. also tried root kit remove tool by kaspersky but it can't find anything. the last chance i think is to use a killdisk. chumscrubber (16416)
1252372 2012-01-11 19:04:00 Is the CD you installed a legit Windows CD or has it been downloaded from somewhere.

looking up that 13.exe thats part of a virus / trojan, unless you are not giving the full name of the process ?
wainuitech (129)
1252373 2012-01-14 00:29:00 the cd is the original windows cd. the full name of the process is 13.exe nothing else chumscrubber (16416)
1252374 2012-01-14 00:44:00 www.processlibrary.com Snorkbox (15764)
1252375 2012-01-14 00:52:00 the cd is the original windows cd. the full name of the process is 13.exe nothing else

As far as I know, 13.exe is NOT a legitimate Windows executable, and there is no way it would be on a real CD.

If you can, upload the 13.exe file to www.virustotal.com and post the results page link here.

If it turns out to be a virus, then I suggest you search your CD for "13.exe" and see if it is on there (it might be inside a CAB file or such) If it is indeed there, then your "original" CD is most likely a pirate copy with virus that looks like a real CD.

If your CD is a slipstreamed Windows CD you made yourself, then the computer you did the slipstreaming on was probably infected.

Otherwise, there could be a virus in a USB drive or other hard drive or other drive connected to your computer, and it gets infected as soon as you install Windows.

It could even be on the boot sector of the HDD itself - did you try a FULL re-zero including boot sector with program such as HDAT2 or Darik's Boot-and-nuke?
Agent_24 (57)
1252376 2012-01-24 20:19:00 thanks a lot to everybody who posted here. finally fixed the problem with HDAT2 as posted Agent_24 . So i guess the virus was in boot sector.
the first virus was called 13.exe and was in app data. after couple minutes appeared 1.exe 4.exe and so on. anyway for those who might have the same problem erase hdd complitly, the only way to fix the problem i think
chumscrubber (16416)
1252377 2012-01-24 20:24:00 Good that you got it sorted, but little confused about the last comment re "erase the HDD completely".

In the original post you said
I was trying to reinstall windows xp on my friends computer, but it freezes on loading files, i erased and partitioned
wainuitech (129)
1252378 2012-01-24 20:33:00 first time i erased hdd using only partition magic, and then used hdat2 chumscrubber (16416)
1 2