[Ardant]

Good Afternoon,

 

Im not sure is this is system or virus related but....

 

I have been having problems over the last little bit with network connection but the fun really started this morning when I tried to boot up.

 

The system booted normally and got me to the log in screen. I typed in my password and then nothing. Black Screen.

 

I was able to get the task manager so was able to reboot into safe mode. I have been reading stuff online that stated it could be video driver related so I deleted both my drivers and still no luck.

 

In safe mode I ran malwarebytes, rkill and adwcleaner and no issues found.

 

Im at a loss for what to do next.

 

Im not sure if it will help any as I am in safe mode but I have attached Farbar scan just in case

 

Attached Files

•  FRST.txt   66.05KB   177 downloads
•  Addition.txt   474.3KB   161 downloads

[Advertisements]

Hi Ardant,

 

Question for you what was the last thing that you installed before this happened?

[KiwiProbie]

Hi Ardant,

 

Question for you what was the last thing that you installed before this happened?

[FreeBooter]

1. Boot your computer into Safe Mode

2. Press keys, type rstrui.exe, into Run dialog box and then press OK button.

3. Follow the instructions at System Restore tool to restore the Windows O/S back to a time before the issue started.

[Ardant]

After walking away from the computer for an hour in regular mode it came back. No real problems since then till today. I loaded task manager and watched. I have service host issues that consume 42% of my CPU according to Task Manager. Once it clears the computer comes up. Even now that it is running I have several Service Host lines that says Network restricted or no network.

 

The one that is causing the trouble is:

 

Service Host: Local Service (No Network) (3)

   Base Filtering Engine

   CoreMessaging

   Windows Firewall

Edited by Ardant, 13 September 2017 - 05:46 PM.

[FreeBooter]

Restart those services see that will resolve the issue.

Install latest version of network card driver.

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts. If you choose to install more than one antivirus program on your computer, then only one of them should be active in memory at a time.


I would like you to check the system integrity of your Windows OS installation.

• Please type cmd.exe into Start Menu search box.
• Please right click cmd.exe and select "Run as administrator".
• Please type the following command and press the <Enter> key: sfc /scannow (Please note that there is a space between 'sfc" and "/scannow".)
• It should take about 20 minutes to run, if there are no serious errors.
• If the System File Checker reports that some errors were fixed, but some remain; please reboot your computer and run the System File Checker from an Administrator Command Prompt, again.
• If the System File Checker again reports that some errors were fixed, but some remain, please reboot your computer and run it a third time.
• If "Resource Integrity Violations" (errors) are reported that could not be corrected, or were not corrected after a third SFC run, then please navigate to the folder: C:\Windows\Logs\CBS and copy the file "cbs.log" to your desktop immediately. I am asking you do that because that file is dynamic, so I want to be able to examine a copy that is unchanged from the time that the System File Checker was run.
• If there are errors that couldn't be corrected, let me know and I will provide you with instructions as to how to upload the file

Publish a Snapshot using Speccy, taking care to post the link of the snapshot in your next post.

Go to Piriform's website, and download the free version on the left. Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.

Once inside Speccy, it will look similar to this (with your computer's specifications, of course):

Now, at the top, click File > Publish Snapshot. You will see the following prompt:



Click Yes > then Copy to Clipboard



Now, once you are back in the forum topic you are posting in, click the Add Reply button. Right-click in the empty space of the Reply box and click Paste. Then, click Send below the Reply box.

Edited by FreeBooter, 14 September 2017 - 10:20 AM.

[Ardant]

http://speccy.pirifo...CLOmgkOeI4kSxDY

 

It would not let me copy to clipboard so I copied and pasted the link. hope it works

[FreeBooter]

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts. If you choose to install more than one antivirus program on your computer, then only one of them should be active in memory at a time.

 

 

You might want to clean dust and dirt of inside your computer also apply new thermal paste to CPU as your computer have high temperatures.

[Ardant]

Avast is supposed to be my antivirus. I use Defender for firewall only. Not sure why it is enabled

[FreeBooter]

Windows Defender is antivirus software not a Firewall software you can disable and enable Windows Defender with attached batch script don't worry Windows Firewall software will protect you.

 

 

 DisableWindowsDefender.zip   861bytes   166 downloads

[Ardant]

On the off chance this is virus related I ran Rkill. From the attached report it states Im missing alot of files. I assume they are important otherwise it would not be looking for them.

 

Rkill 2.8.4 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2017 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingc...opic308364.html

Program started at: 09/16/2017 01:27:30 PM in x64 mode.
Windows Version: Windows 10 Home

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Policies\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

 * agp440 [Missing Service]
 * DcpSvc [Missing Service]
 * gagp30kx [Missing Service]
 * IEEtwCollectorService [Missing Service]
 * IoQos [Missing Service]
 * nv_agp [Missing Service]
 * TimeBroker [Missing Service]
 * uagp35 [Missing Service]
 * uliagpkx [Missing Service]
 * WcsPlugInService [Missing Service]
 * wpcfltr [Missing Service]
 * WSService [Missing Service]

 * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
 * RetailDemo => %SystemRoot%\System32\svchost.exe -k rdxgroup [Incorrect ImagePath]
 * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

 * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
 * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 09/16/2017 01:28:00 PM
Execution time: 0 hours(s), 0 minute(s), and 29 seconds(s)

 

Also ran avast, malwarebytes and adwcleaner. No viruses
 

[FreeBooter]

I would suggest you do a repair install of Windows 10 you will not lose your personal files, settings and installed programs.

Edited by FreeBooter, 16 September 2017 - 08:12 PM.

[garioch7]

Ardant:
 
You are running an old version of RKill, by Grinler.  Please download the current version from this link and run it.  Older versions of RKill had known issues with incorrectly reporting missing Windows services in Windows 10.
 
If you have another reason to believe that your computer is infected with malware, you should post in the Virus, Spyware, Malware Removal Forum.  Please link your new topic to this post and a trained malware removal specialist will assist you.  Please follow the instructions in this topic.
 
I would recommend that you not do a repair install of Windows 10, unless you have reason to believe that the Windows 10 operating system (OS) is so corrupt that the System File Checker (SFC) and Deployment Image Servicing and Management (DISM) programs cannot repair any possible OS corruption.  I can provide you with instructions if you need help to run those programs.
 
Thank you and have a great day.
 
Regards,
-Phil