Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

MalwareBytes Issues


  • Please log in to reply

#16
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Administrator will work fine.
If you have never setup a admin password then all you should have to do is click Enter to continue on.
  • 0

Advertisements


#17
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
rshaffer,that's my problem I think. I have set my computer up to enter a password to log on.In Safe Mode I am not able to click on anything.
  • 0

#18
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Well that's not good as without it there is no way to get to Safe Mode then.
;) :D
  • 0

#19
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
Removed the logon p-word thinking that would allow me to log on. No dice.

I'm now wondering if my wireless keyboard and mouse is the problem. When I boot into Safe Mode they are not active. I found an old corded mouse and plugged it in but my pc would not recognize it.

I'm stumped. Couldn't find an answer on Microsoft.com yet either.
  • 0

#20
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Are you sure the mouse works?
The corded one as you say.
Do you have a corded kb to try?
  • 0

#21
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts

I chose Safe Mode. Is that correct?

Yep and if no admin password has ever been setup then you should just be able to click enter to continue on.
If you can boot into normal mode then do the following.

Go to

Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.


Download TFC by OldTimer to your desktop
  • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

  • 0

#22
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
All scans ran as suggested and removed 290mb of files.

Thank you
  • 0

#23
DonnaB

DonnaB

    Miss Congeniality

  • GeekU Moderator
  • 5,960 posts
6stringer,

Have you tried to run a full scan with MBAM again to see if that helped? Any results from chkdsk?

You mentioned that you ran SASW in one of your earlier posts. Did it find anything more than adware cookies?

Please let us know. :D
  • 0

#24
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
All I've seen is cookies from the SASW scan.

What results from chkdsk are you referring to? I ran it last night and when I checked this morning the pc had rebooted so I assumed it was supposed to do that?

I haven't tried to run a full MBAM scan but will do that now.

Thanks
  • 0

#25
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
The most important thing with chkdsk is if it found and repaired or attempted to repair anything. If it did then you would need to run it again.
There is a log created and you can find it in the Event Viewer and in the Winlogon tab.


Just to clarify, winlogon shows up in the Application section of the event viewer. Start -> Run -> type "eventvwr.msc" (no quotes) -> ENTER. Click on Application and select the most recent winlogon entry.


Please copy and paste the log in your next reply for us to take a look at it.
  • 0

Advertisements


#26
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
Results posted:


Checking file system on C:
The type of the file system is NTFS.
Volume label is HP_PAVILION.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 2175 unused index entries from index $SII of file 0x9.
Cleaning up 2175 unused index entries from index $SDH of file 0x9.
Cleaning up 2175 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x1b59cd000 for 0x10000 bytes.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

72606239 KB total disk space.
32351440 KB in 124111 files.
48300 KB in 11867 indexes.
0 KB in bad sectors.
268079 KB in use by the system.
65536 KB occupied by the log file.
39938420 KB available on disk.

4096 bytes in each allocation unit.
18151559 total allocation units on disk.
9984605 allocation units available on disk.

Internal Info:
a0 6a 02 00 33 13 02 00 e5 c1 02 00 00 00 00 00 .j..3...........
5c 30 00 00 04 00 00 00 37 0d 00 00 00 00 00 00 \0......7.......
30 06 7f 22 00 00 00 00 3e 8e 12 c1 00 00 00 00 0.."....>.......
d8 4a 0d 5c 00 00 00 00 5e e1 cd 8f 1c 00 00 00 .J.\....^.......
d6 90 e9 6a 03 00 00 00 fe 41 00 5d 21 00 00 00 ...j.....A.]!...
b0 66 1c 77 00 00 00 00 a0 39 07 00 cf e4 01 00 .f.w.....9......
00 00 00 00 00 40 93 b6 07 00 00 00 5b 2e 00 00 .....@......[...

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.

Just tried to run MBAM full and my pc restarted after 40 minutes

Edited by 6stringer, 21 November 2010 - 02:34 PM.

  • 0

#27
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Try this and let us know what happens.
Go Start and then to Run ("Start Search" in Vista),
Type in: sfc /scannow
Click OK (Enter in Vista).
Have Windows CD/DVD handy.
If System File Checker (sfc) finds any errors, it may ask you for the CD/DVD.
If sfc does not find any errors in Windows XP, it will simply quit, without any message.
In Vista you will receive the following message: "Windows resource protection did not find any integrity violations".

For Vista users ONLY: Navigate to C:\Windows\Logs\CBS folder. You'll see CBS.log file.
Usually, it's pretty big file, so upload it to Flyupload, and post download link.


If you don't have Windows CD....
This applies mostly to Windows XP, since Vista rarely requires use of its DVD while running "sfc"
Note This method will not necessarily work as well, as when using Windows CD, because not always ALL system files are backed up on your hard drive. Also, backed up files may be corrupted as well.

Go Start and then Run
type in regedit and click OK


Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

You will see various entries Values on the right hand side.

The one we want is called: SourcePath

It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD.
All we need to do is change it to: C:
Now, double click the SourcePatch setting and a new box will pop up.
Change the drive letter from your CD drive to your root drive, usually C:
Close Registry Editor.

Now restart your computer and try sfc /scannow again!


Thanks to Broni for the instructions



Revised and Simplified:


Do you have a valid XP CD?

If so, place it in your CD ROM drive and follow the instructions below:
  • Click on Start and select Run... type sfc /scannow (note the space) (Let this run undisturbed until the window with the blue progress bar goes away)

SFC
- Which stands for System File Checker,
retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.
If you want to see what was replaced, right-click My Computer and click on Manage. In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.
  • 0

#28
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
rshaffer61;

I do not have an XP CD-didn't get one when I bought this machine several years ago.
The source path is already pointing to C:

OK to go ahead and run the scan?
  • 0

#29
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts

OK to go ahead and run the scan?

Yep if it finds anything wrong it will attempt to use the current path. If it cannot find what it needs there then we will have to try a different method like maybe borrowing a XP cd of the same type you have installed.
  • 0

#30
6stringer

6stringer

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 159 posts
Finished running the scan. Is there a way to check if it found anything since I wasn't in front of the monitor?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP