I tried to do a system restore because my Avast popup would not go away when closed out, and now i can only see my mouse on the screen. Tried safe mode, same thing. tried a different monitor,same thing.
Monitor [Closed]
#1
Posted 03 May 2014 - 12:25 PM
#2
Posted 03 May 2014 - 12:30 PM
My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):
- Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
- Please do not install any new software while we are working on this system as it may hinder our process.
- Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
- Please do not try to fix anything without being ask.
- Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
- Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
- Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
- If you are confused about any instruction stop and ask. Do not keep on going.
- Do not repeat the steps if you face any problems.
- I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
- Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
- The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.
- Step #1 Scan with Farbar Recovery Scan Tool
Prerequisites:- A clean PC or an accessible user account; and
- A flash-drive with at least 1GB storage.
- Download Farbar Recovery Scan Tool(FRST) by Farbar to your Desktop of the clean PC.
Download link for 32-bit system.
Download link for 64-bit system. - Plug the flash-drive into the clean PC;
- Copy the correct version of FRST to the flash-drive
- Connect the flash-drive to the infected PC;
- Restart your PC;
- As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears;
- Use the arrow keys to select Repair your computer;
- From the language setting choose US and click Next;
- Select the operating system you want repair and click Next;
- Select your user-account and click Next;
- You will enter into the System Recovery and will be presented the following options --
- Startup Repair
- System Restore
- Windows Complete PC Restore
- Windows Memory Diagnostic Tool
- Command Prompt
- Select Command Prompt
- In the Command Prompt window type notepad and press Enter;
- When the Notepad opens, go to File>Open>My Computer and take a mental note of the flash-drive letter;
- In the Command Prompt window type e:\frst.exe(for 64-bit system type e:\frst64.exe)
- Note: Replace e with the drive letter of your flash-drive
- When the program starts, click on Scan;
- A log named frst.txt will be created after the scan and will be saved in your flash-drive;
- Copy and Paste the contents of the log in your next reply
- Required Log(s):
- Farbar Recovery Scan Tool Log(s) --
- FRST.txt
- Addition.txt
- Farbar Recovery Scan Tool Log(s) --
Valinorum
#3
Posted 03 May 2014 - 12:42 PM
I am using Windows 7. Is that 32 or 64 bit?
#4
Posted 03 May 2014 - 12:50 PM
#5
Posted 03 May 2014 - 12:55 PM
#6
Posted 03 May 2014 - 01:10 PM
#7
Posted 03 May 2014 - 01:19 PM
#8
Posted 03 May 2014 - 01:33 PM
- Step #2 Fix with FRST
This section of the fix has two parts. For the first part please peruse the following --
Make sure that you have access to a clean PC or a functioning user account and still have FRST.exe in your flash drive. If you do not have it, download the suitable version from here to your flash-drive.- Open Notepad.exe. Do not use any other text editor software;
- Copy and Paste the contents inside the code-box to your Notepad --
Start HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2544664 2014-03-21] () C:\Program Files (x86)\AVG SafeGuard toolbar Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft) Startup: C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_89743857.lnk ShortcutTarget: _uninst_89743857.lnk -> (No File) Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft) S2 vToolbarUpdater18.0.5; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.5\ToolbarUpdater.exe [1771032 2014-03-21] (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search S0 89743857; C:\Windows\System32\DRIVERS\89743857.sys [460888 2012-10-13] (Kaspersky Lab ZAO) S1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [49952 2014-03-21] (AVG Technologies) 2014-04-26 19:17 - 2014-04-26 19:17 - 00022208 _____ () C:\Users\Tom\Documents\[kickass.to]becoming.santa.2011 (2).torrent 2014-04-26 19:07 - 2014-04-26 19:07 - 00022208 _____ () C:\Users\Tom\Documents\[kickass.to]becoming.santa.2011 (1).torrent 2014-04-19 16:50 - 2014-04-19 16:50 - 00010683 _____ () C:\Users\Tom\Documents\[kickass.to]the.hobbit.the.desolation.of.smaug.2013.720p.brrip.x264.yify.torrent 2014-04-19 14:09 - 2014-04-19 14:09 - 00020697 _____ () C:\Users\Tom\Documents\[kickass.to]12.years.a.slave.2013.1080p.brrip.x264.yify.torrent 2014-04-30 17:03 - 2014-03-21 07:45 - 00000000 ____D () C:\ProgramData\AVG Secure Search 2014-04-30 17:03 - 2013-05-03 16:55 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar 2014-04-27 11:09 - 2014-04-27 11:09 - 00000000 ____D () C:\Users\Tom\AppData\Local\AVG Secure Search C:\Users\Tom\AppData\Local\Temp\i4jdel0.exe Replace: C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll C:\Windows\System32\rpcss.dll End
- Click on File > Save as...
- Inside the File Name box type fixlist.txt
- From the Save as type drop down list, choose All Files
- Copy and Paste fixlist.txt to your flash drive.
- Connect your flash drive to the infected PC;
- Enter the System Recovery Options and select Command Prompt;
- Run FRST.exe( or FRST64.exe for 64-bit machine) again as outlined in the previous post;
- Click on Fix;
- After the fix a log will be created in the flash drive named FixLog.txt;
- Copy and Paste the contents of the log in your next reply;
- Try to boot into Normal Mode.
- Required Log(s):
- FRST Fix Log
Valinorum
#9
Posted 03 May 2014 - 01:48 PM
#10
Posted 03 May 2014 - 01:54 PM
Restart good. Get a message that system restore did not complete successfully. An unspecified error occurred during system restore. (0x0000022). Do I have a virus? why did the Avast banner not go away?
Have not seen the banner yet. Since recent restart.
#11
Posted 03 May 2014 - 01:59 PM
Avast banner is back with a different message. Now about wanting to optimze. This is a recent problem with Avast. I never had this banner issue with Avast before. Avast ban
ner popup
#12
Posted 03 May 2014 - 11:01 PM
0X0000022 Error Codes are caused in one way or another by misconfigured system files in your windows operating system. Malware patched one of your system file which I replaced earlier.Restart good. Get a message that system restore did not complete successfully. An unspecified error occurred during system restore. (0x0000022). Do I have a virus? why did the Avast banner not go away?
Have not seen the banner yet. Since recent restart.
Can you post a screenshot or type the exact message?Avast banner is back with a different message. Now about wanting to optimze. This is a recent problem with Avast. I never had this banner issue with Avast before. Avast ban
ner popup
Copy FRST to your Desktop and run it in normal mode. Check all the boxes and click scan. After the scan post the logs from FRST.txt and Addition.txt.
#13
Posted 08 May 2014 - 03:37 AM
If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users