Antivirus killed my pc, is there a way to fix this without reinstalling windows?

[Akos]

So I decided about a month ago to try both Bitdefender and Kaspersky, and buy the one I like more. An hour ago I installed kaspersky. The moment it was ready it already found a virus, trojan it said. I thought Bitdefender let something slip in, and clicked “disinfect and restart”. Right before my computer turned off, Ive got a popup saying something about a program (couldnt see what) is not compatible with windows, and something. I couldnt even read half of it before my pc shut down. A few seconds later, it booted up again, but it seems like my computer cannot see my keyboard or mouse. I cannot get past the windows login screen. Ive tried plugging out the cables with no success. The weird thing is that both the mouse and the keyboard has lights on. (The keyboard has the Numpad light on, and the mouse has its base one.) Can somebody help me please? Or is the only sollution a reinstall here? I have files I want to keep…

[Bastet]

Can you remember which file was infected?
Is the mouse & keyboard wired or wireless?
That would be numberlock, you should be able to disable this with a key on the keyboard, however if it isn’t working then this may not work.
Can you boot into Recovery mode by force restarting the PC 3 times? If yes then try accessing safe mode with networking.
Do you have another PC on which you can download Macrium Reflect in order to create a backup of your files?
There’s a custom install which will reinstall Windows while saving your personal files in the windows.old folder, I’ve not used this myself so would have to look up on how to do this.

[Akos]

Thanks for your reply. Unfortunately, I dont remember which file got infected. Both the mouse and the keyboard is wired, and I just mentioned the numpad indicator light to say the keyboard does receive power. I got into RE mode, but none of the options there helped. In fact, it got worse. Now I cant even boot windows, as it produces a bluescreen instantly. Also, safe mode didnt help, I still couldnt use my mouse and kb. I have access to a family member’s pc, so I can download said program. Is that custom install you mentioned a part of the Macrium Reflect software, or an entirely different thing?

[Rustys]

Can you access the system in safe mode?

https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234

You could use a live version of Linux to back up your files then preform a wipe and reinstall.

If you can access the system using @Bastet you should also be able to run the recovery keeping you file. STRONGLY suggest that any way you can access your system to BACK UP your files before preforming anything.

By the way just so you know how dangerous it it to have more than one running antivirus.

https://www.bleepingcomputer.com/forums/t/693559/running-two-avs/

Best thing you can do is wipe and reinstall there is no telling if any of your data or files are still infected and if you recover them, you are taking a chance of reinfecting the system again and being back at the same spot yo are now.

[Bastet]

Thanks for your reply. Unfortunately, I dont remember which file got infected. Both the mouse and the keyboard is wired, and I just mentioned the numpad indicator light to say the keyboard does receive power. I got into RE mode, but none of the options there helped. In fact, it got worse. Now I cant even boot windows, as it produces a bluescreen instantly. Also, safe mode didnt help, I still couldnt use my mouse and kb. I have access to a family member’s pc, so I can download said program. Is that custom install you mentioned a part of the Macrium Reflect software, or an entirely different thing?

No a custom install will require the media creation tool to create installation media for another PC.
Macrium will allow you to create an image on an external hard drive, you’ll have to create Macrium boot media on USB then use this media to boot the problem PC. Then the recovery environment will show you the drive containing Windows.
What is the error code &/or message which shows on the bluescreen?

[Akos]

The error code is CRITICAL_PROCESS_DIED

[Akos]

Can you access the system in safe mode?

https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234

You could use a live version of Linux to back up your files then preform a wipe and reinstall.

If you can access the system using @Bastet you should also be able to run the recovery keeping you file. STRONGLY suggest that any way you can access your system to BACK UP your files before preforming anything.

By the way just so you know how dangerous it it to have more than one running antivirus.

https://www.bleepingcomputer.com/forums/t/693559/running-two-avs/

Best thing you can do is wipe and reinstall there is no telling if any of your data or files are still infected and if you recover them, you are taking a chance of reinfecting the system again and being back at the same spot yo are now.

I see. I didnt run two AVs, I removed Bitdefender before I installed Kaspersky. I cannot boot into safe mode. What Im currently trying is installing a new Windows to a pendrive, using this pendrive to boot the pc, and then taking all the files needed to said pendrive. After that, I’d reinstall windows, and check my files with an AV before placing them back on my computer. Do you think this would work?

[Rustys]

You will have to use second pen drive to save files to.

[Akos]

Whats the difference between installing Win10 to pendrive A from an installer pendrive, or using Macrium to clone one to pendrive A?

[Rustys]

The programs when creating the drives wipe the data off of them.

[Akos]

And Macrium doesnt?

[Pyro]

When Windows installs a new operating system, the drive being used is completely wiped and then is partitioned with all the necessary system stuff, this is so the install can be free of any bad stuff or residual files.

Macrium copies whatever you tell it to and then will deploy it (once again) wherever you tell it to.

Rustys and Bastet know their stuff.

[Rustys]

When I use to use it and various different back up software before, I quit using them all together yes, they would wipe the drive.

[Bruce]

@Akos - any news?

[HoraceC]

A BSOD implies a Windows system file or driver has been damaged.

Have you tried repairing Windows system files using SFC from the Command Prompt in Windows Recovery Environment:

[ICODE]sfc /scannow /offbootdir=d:\ /offwindir=d:\windows [/ICODE]

Replace d: as required for your Windows/boot drive.