Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

BSoD C0000135 %hs error [Closed]

Started by Saliom , May 14 2014 10:03 AM
BSoD C0000135

  • This topic is locked This topic is locked

#1
Saliom
Posted 14 May 2014 - 10:03 AM

Saliom

    Member

  • Member
  • PipPip
  • 16 posts

Hi here!
 
Im today here to request you to help me in a big problem with my Windows 7 x64 Ultimate edition installed in one of my laptop's partitions. I scanned my PC with Malwarebytes Anti-Malware, it found some virus, after the cleaning, it requested to reboot the computer to finish the cleaning. But after the reboot, it bootloop, and when I disable "Disable Automatic Restart on system failure" after pressing F8 after the BIOS screen it shows me a Blue Screen of Death with this message : "STOP: c0000135 The program can't start because %hs is missing from your computer. Try reinstalling the program to fix this problem".

Since this moment, I can't access to my Windows and I can't access to the Safe Mode too (with or without connexion). But I can still access to the registry editor with the command prompt after selecting "Repair your computer" on the Recovery Console.
 
I tried some fix like this one, and this one, but no one of them worked for me. I tried as last to run a scan with Farbar Recovery Scan Tool x64 and a search on "services.exe;winsrv.*".

  • Here is my FRST.txt file after the scan :

Spoiler

  • And here is the result of the search :

Spoiler

 
That's all! I hope that you will help me to find a solution to this problem. Im running now on Ubuntu 13.10 installed on another partition, but I really need my Windows for some programs and I don't want to reinstall all of my drivers, software, etc..
 
Thanks for your future replies.


Edited by Saliom, 14 May 2014 - 10:22 AM.

  • 0

Advertisements

#2
JSntgRvr
Posted 14 May 2014 - 02:22 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts

Download the enclosed file. 

 

Save it in the same location FRST is saved.

 

Launch FRST as you did before and click on the Fix button.

 

The tool will make a log in the same location FRST is saved (Fixlog.txt), Please post it to your reply.
 
Attempt to boot in Normal Mode, and let me know the outcome.
 
In any event, Run FRST once again and post its report.

  • 0

#3
Saliom
Posted 14 May 2014 - 04:23 PM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Hi and many thanks for your reply,
 
I did what you said and now it's work well! Thaaanks! I can boot now my Windows.
 

  • Here is my logfix.txt

Spoiler

 

  • And here is the result of a new scan with FRST

Spoiler


  • 0

#4
JSntgRvr
Posted 14 May 2014 - 04:54 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts

Please move FRST to your desktop. Since the computer is bootable, we may be able to work in Normal Mode.
 
Download the enclosed file. 
 
Save it in the same location FRST is saved (desktop).
 
Launch FRST and click on the Fix button.
 
The tool will make a log in the same location FRST is saved (Fixlog.txt), Please post it to your reply.

The computer should restart, if not, please restart the computer.

Launch FRST once again.

Type the following in the edit box on FRST, after "Search:".

mswsock.dll;NLAapi.dll

It then should look like:

Search: mswsock.dll;NLAapi.dll

Click Search button and post the log (Search.txt) it makes in the same location FRST is saved, in your next reply.

Please re-scan with FRST and post the new report.


  • 0

#5
Saliom
Posted 15 May 2014 - 03:59 AM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Hi,
 
here is my fixlog.txt (the end is in french because my Windows is in french, if you need translation Im here ^^)
Spoiler


After the restart of the computer, here is the result of the search :
Spoiler


And finally, here is the last log :
Spoiler


So many thanks for your help! :)
  • 0

#6
JSntgRvr
Posted 15 May 2014 - 02:14 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts

Download the enclosed file. 
 
Save it in the same location FRST is saved (desktop).
 
Launch FRST and click on the Fix button.
 
The tool will make a log in the same location FRST is saved (Fixlog.txt), Please post it to your reply.

 

Lets scan the computer.

 

thisisujrt.gif  Please download Junkware Removal Tool to your desktop.
  •  
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
 
 
Download : ADWCleaner to your desktop.
 
NOTE: If using Internet Explorer and get an alert that stops the program downloading, click on the warning and allow the download to complete.
 
Close  all programs and click on the AdwCleaner icon.
 
scan-results.jpg
 
Click on Scan  and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.
 
The report will be saved in the C:\AdwCleaner folder. as AdwCleaner[S0].txt
 
bf_new.gif Please download Malwarebytes' Anti-Malware from Here. 
 
Double Click mbam-setup-2.0..exe to install the application. (The revision number may vary.)
  •  
  • Select the language and click OK.
  • Accept the agreement
  • Make sure a checkmark is placed next to Enable the Free Trial and Launch
  • Malwarebytes' Anti-Malware, then click on finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Scan Now".
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click on Quanrantee All,.
  • When disinfection is completed, a dialog will open and you may be prompted to Restart.(See Extra Note)
  • Upon restart, launch Malwarebytes Antimalware and select History.
  • Double click on the last scan done, then on Copy to Clipboard.
  • Right click on your next reply and select Paste.
  • Submit your reply.
 
 
Extra Note:
 
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.
 

 


  • 0

#7
Saliom
Posted 16 May 2014 - 04:27 PM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Sorry for this late reply but here is my files :) :

  • The fixlog.txt :

Spoiler

  • The JRT.txt

Spoiler

  • The AdwCleaner[S0].txt :

Spoiler

  • Malwarebytes' Anti-Malware haven't found virus or spyware !

 

  • Finally, I did a scan with FRST to be sure that is clean :

Spoiler


So many thanks for all your help :) !


Edited by Saliom, 16 May 2014 - 04:28 PM.

  • 0

#8
JSntgRvr
Posted 16 May 2014 - 05:33 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts

There are certain files and folders, mostly hidden, for which I find no information. These are:

Folder: C:\security
Folder: C:\Kernel
File: C:\Users\blood.dat
File: C:\config.dat
File: C:\Users\Update.dat
File: C:\Users\Mariage.lnk

 

Are you familiar with these?

 

Download the enclosed file.
 
Save it in the same location FRST is saved (desktop).
 
Launch FRST and click on the Fix button.
 
The tool will make a log in the same location FRST is saved (Fixlog.txt), Please post it to your reply.

 

How is the computer doing?


  • 0

#9
Saliom
Posted 20 May 2014 - 03:17 AM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Hi and sorry for this late reply, I had some problems with my Internet connection, but now It's okay :).

 

For those files, they are absolutely not familiar to me. I don't know how they are here ><.

 

Here is my fixlog.txt :

Spoiler

 

The computer is normal, there are currently no problem.Thanks for all your help :).


  • 0

#10
JSntgRvr
Posted 20 May 2014 - 02:31 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
Congratulations.

Download the enclosed file.
 
Save it in the same location FRST is saved (desktop).
 
Launch FRST and click on the Fix button.
 
The tool should remove those folders.

Lets cleanup the computer from the tools we used.

Run AdwCleaner and click on uninstall.
  • Download Delfix from here
  • Ensure Remove disinfection tools is ticked
    Also tick:
    • Create registry backup
    • Purge system restore
    delfix.jpg
  • Click Run
Manually remove any other files or folders left.

Here are some suggestions.
  • Always keep your JAVA updated. Older versions will make your computer vulnerable.
  • Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Miekiemoes.

Best wishes! icon_hello.gif
  • 0

Advertisements

#11
Saliom
Posted 22 May 2014 - 01:26 PM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Hello,

 

I noticed the last few days at each startup, an error occurs "Can not find script file "C:/kernel/r00t3r"".

 

And on the local disk C: it currently has a shortcut named "0409" which opens as an error "Can not find script file "C:/config.dat"". Here it's target "C:\Windows\System32\cmd.exe /c start WScRiPt.EXe /e:VBScRIpt.ENcOdE config.dat & C:\WINDOWS\explorer.exe 0409".

 

When I try to delete this shortcut, it automatically recreated.

I hope you can help me again this time :).


  • 0

#12
JSntgRvr
Posted 22 May 2014 - 01:51 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
Have you used a USB flash drive?

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Make sure that under Optional Scans, there is a checkmark on Addition.txt and Shortcut.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another two logs (Addition.txt and Shortcut.txt). Please attach these to your reply.

  • 0

#13
Saliom
Posted 22 May 2014 - 01:58 PM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Here is my Attached File  FRST.txt   32.08KB   339 downloads.

 

And here is my Attached File  Addition.txt   36.16KB   390 downloads :).

 

Thanks for your help.


  • 0

#14
JSntgRvr
Posted 22 May 2014 - 02:21 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
Download the enclosed file.

Save it in the same location FRST is saved (desktop).

Launch FRST and click on the Fix button.

The tool will make a log in the same location FRST is saved (Fixlog.txt), Please post it to your reply.

Restart and let me know the outcome.
  • 0

#15
Saliom
Posted 22 May 2014 - 02:44 PM

Saliom

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

I did what you told me to do and it works like a charm!

 

Now, I don't have any bad shortcut or error in the startup :D.

 

Thanks for all! I am wondering what I would have done without you ^^'.


  • 0
Back to Computer Won't Boot - Malware Related · Next Unread Topic →




Similar Topics


Also tagged with one or more of these keywords: BSoD, C0000135

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Computer Won't Boot - Malware Related

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP