Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Unable to complete removal of malware [Solved]


  • This topic is locked This topic is locked

#31
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

Well I think we may have got rid of Shopperz, but I'm now having difficulty starting the laptop normally.

 

I'm now fairly sure that, the previous time I ran FRST (ie the previous log I sent you) was not done from a boot from USB.  Although I had changed the boot order to boot from USB HDD before booting from the laptop's hard disk, I think that this didn't have any effect because Secure Boot was enabled within the BIOS.  This time, I disabled Secure Boot, and the machine booted from the USB stick, as far as I can tell.  I ran FRST, and the log is below.

 

I then tried to restart the machine.  If I restart without the USB stick inserted, I get the following text:

 

Broadcom UNDI PXE-2.1 v15.6.1

[Copyright notices]

 

CLIENT MAC ADDR: F8 A9 63 05 26 16  GUID: 7D0F8EB ADAD 11E3 8FFF F8A963052616

PXE-E53: No boot filename received

 

PXE-M0F: Exiting Broadcom PXE ROM.

No bootable device -- insert boot disk and press any key

 

 

If alternatively I start with the USB stick inserted, the laptop does start.  It asks me to choose a keyboard layout, which I do.  It then asks to choose an option, either "Troubleshoot" or "Turn off your PC".  The Troubleshoot options are "Refresh your PC", "Reset your PC" or "Advanced options".  The advanced options are "System Restore", "System Image Recovery", "Startup Repair" or "Command Prompt".  Going into Command Prompt and doing a couple of "dir" commands, I was able to establish that there is no longer a Shopperz directory within C:\Program files.  However I don't know what to do to get back into the BIOS and return the normal boot order.

 

Are we nearly there?

 

Charles

 

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-12-2014
Ran by SYSTEM at 2015-02-08 20:51:18 Run:4
Running from D:\
Boot Mode: Recovery
==============================================
 
Content of fixlist:
*****************
S2 csrcc; C:\Program Files\shopperz\csrcc.exe [1449352 2015-01-26] ()
2015-02-07 14:13 - 2015-02-07 14:13 - 00013312 _____ () C:\Windows\SysWOW64\Drivers\vdizmze5.sys
2015-02-07 14:13 - 2015-02-07 14:13 - 00007168 _____ () C:\Windows\SysWOW64\Drivers\utizmze5.sys
2015-02-07 09:40 - 2015-02-07 09:40 - 00000000 ____D () C:\Users\Franny\Desktop\avz4
2015-02-07 09:38 - 2015-02-07 09:38 - 09370136 _____ () C:\Users\Franny\Desktop\avz4.zip
2015-02-06 13:58 - 2015-02-06 13:58 - 00000000 ____D () C:\Users\Franny\AppData\Roaming\EMCO
2015-02-06 13:55 - 2015-02-06 13:55 - 39893688 _____ (EMCO Software) C:\Users\Franny\Desktop\MoveOnBootSetup.exe
2015-02-06 10:45 - 2015-02-06 10:45 - 00002118 _____ () C:\Users\Franny\Desktop\Add_Take_Ownership_with_Pause_to_context_menu.reg
2015-02-04 10:37 - 2015-02-04 10:32 - 00401920 _____ (Farbar) C:\Users\Franny\Desktop\MiniToolBox (1).exe
2015-01-30 07:20 - 2015-02-02 01:29 - 00000000 ____D () C:\Program Files\shopperz
 
*****************
 
csrcc => Service deleted successfully.
C:\Windows\SysWOW64\Drivers\vdizmze5.sys => Moved successfully.
C:\Windows\SysWOW64\Drivers\utizmze5.sys => Moved successfully.
C:\Users\Franny\Desktop\avz4 => Moved successfully.
C:\Users\Franny\Desktop\avz4.zip => Moved successfully.
C:\Users\Franny\AppData\Roaming\EMCO => Moved successfully.
C:\Users\Franny\Desktop\MoveOnBootSetup.exe => Moved successfully.
C:\Users\Franny\Desktop\Add_Take_Ownership_with_Pause_to_context_menu.reg => Moved successfully.
C:\Users\Franny\Desktop\MiniToolBox (1).exe => Moved successfully.
C:\Program Files\shopperz => Moved successfully.
 
==== End of Fixlog ====

 


  • 0

Advertisements


#32
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
From the recovery USB could you select Automatic Repair and then allow it to reboot
  • 0

#33
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

I selected Startup repair, but got the message "Startup repair couldn't repair your PC"


  • 0

#34
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
That appears to have been badly rooted into the system

Could you try system restore and go to one of the restore points set by FRST

If that fails then we are looking at a refresh http://www.gizmag.co...sh-reset/32801/
  • 0

#35
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

System Restore doesn't get me anywhere.  There is a message:

 

To use System Restore, you must specify which Windows installation to restore.  Restart this computer, select an operating system and then select System Restore.

 

Shall I have a go at a refresh?


  • 0

#36
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Aye this will retain all the personal data etc..
  • 0

#37
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

I get a message:

 

The drive where Windows is installed is locked.  Unlock the drive and try again.

 

Next move?


  • 0

#38
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Remove the USB and turn off the computer and then unplug it. Leave it for a few minutes
Then boot from the USB again and select refresh
  • 0

#39
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

I get the same message.


  • 0

#40
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK I have been checking out that error code and it looks like it may have corrupted the MBR

From the command prompt on the recovery console type the following command and press enter :

chkdsk c: /r

On completion try a normal boot
  • 0

Advertisements


#41
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

Still not booting up.  I get messages:

 

PXE-E61: Media test failure, check cable

PXE-M0F: Exiting Broadcom PXE R0M,

No bootable device -- insert boot disk and press any key


  • 0

#42
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK that means the MBR is messed, before I do the next step which is to rebuild the MBR could you let me know if you have a recovery partition on the computer as this may mess that up. If you are not sure what is the make and model of the computer
  • 0

#43
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

I'm not sure.  The computer is an Acer Aspire E1-570.


  • 0

#44
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you reboot the computer and as soon as it starts the acer splash screen Press "Alt-F10" let me know what menu appears
  • 0

#45
charles.actuary

charles.actuary

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 112 posts

Alt-f10 doesn't seem to have any effect.  I tried several times, but each time got the error messages and the "No bootable device" message.  

 

NB I assume you wanted me to try a normal boot and not one from the USB stick.  But just in case, I also tried booting from the USB stick, and got the same sequence of screens that I have had previously.

 

Charles


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP