[glcippo]

Hello everyone! I'm new to Geeks to go and it seems like I'm having a common problem as of late!

I know each post is specific to the user and that's why I'm creating a new post.

Everything was fine on my last shutdown and I return to boot up only to be taken to the Startup Repair screen and endlessly failing after numerous attempts.

I tried starting up in safe mode and all other modes and I only get to the Startup Repair screen again.

The only accessible option I have is through the command prompt....

X:\windows\system32>

Ive read about the flash drive method and running FRST.exe with text files to the desktop and such. I'm sure this method will work fine for me but I am not very familiar with running programs through the command prompt.

I'll need a walkthrough please!

Thank you so much for whoever saves my day!

[Advertisements]

Welcome.

 

Lets give it a try.

 

In the Command Prompt:

• Type in the following and press Enter.
  .
  

  bcdedit | find "osdevice"

• Note the osdevice partition letter, then type.
  
  

  CHKDSK X: /R

• Where X is the osdevice letter, and press Enter

The tool will start to run.

Upon finished, type exit and press Enter. Restart the computer

Let us know if that helps.

[JSntgRvr]

Welcome.

 

Lets give it a try.

 

In the Command Prompt:

• Type in the following and press Enter.
  .
  

  bcdedit | find "osdevice"

• Note the osdevice partition letter, then type.
  
  

  CHKDSK X: /R

• Where X is the osdevice letter, and press Enter

The tool will start to run.

Upon finished, type exit and press Enter. Restart the computer

Let us know if that helps.

[glcippo]

It would be great if i could actually try this.

Ive ran into a diff set of problems now....

Im getting a blackscreen with...

BOOTMGR is missing

And also my mouse and keyboard are not being detected through the USB which means i cant get even get into the BIOS.

I feel as tho its the end of my computer :/

[glcippo]

Update*

Mouse and keyboard are back and working again.

Still having BOOTMGR is missing.

Trying now to use Flash Drive and select the correct partition with purchased software just to get back to screen which has recovery options and the command promt.

[glcippo]

Update*

Found my Windows 7 disc and got to the command prompt from there.

Running the scan now....

[JSntgRvr]

Let me know the outcome.

[glcippo]

Took awhile to complete scan.

Nothing new has changed.

Still receiving BOOTMGR is missing without the Windows 7 disc loading up

[glcippo]

Update*

I selected Startup Repair after loading Windows 7 disc and it seems to have fixed the BOOTMGR is missing issue.

Now i believe we back to the root of the post...

mbamswissarmy.sys is corrupt

[JSntgRvr]

Please download Farbar Recovery Scan Tool and save it to a flash drive.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flash drive into the infected PC.

• Boot to WinRE
• From the options choose Command Prompt.
  
  Once in the Command Prompt:
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
  Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

 

 

[glcippo]

Post was too long to reply so I attached the .txt file to this post

 

hope that's ok!

Attached Files

•  FRST.txt   675.11KB   803 downloads

[JSntgRvr]

Download the enclosed file.   Save it in the same location FRST64 is saved in the flash drive. Insert the flash drive in the affected computer. Open FRST64 as you did before and click on the Fix button. A Fixlog.txt will be produced in the flash dire. Post it in your next reply.

 

Attempt to boot and let me know the outcome.

[glcippo]

wow thank you so much!

 

I understand this is still under investigating but ide love to know when there's an update, as to what I can do to prevent this from happening again!

 

I noticed you removed 2 files from the registry

 

swissarmy and clvirtualbus01

 

where do these come from?

 

you guys rock and I cant say enough thanks for the help!

 

 

Attached Files

•  Fixlog.txt   730bytes   680 downloads

[JSntgRvr]

One belong to Malwarebytes Antimalware, which was corrupted, the other to CyberLink Virtual CDROM Bus Enumerator that was missing.

 

Lets scan the computer. I will check on you tomorrow.

 

Please download Junkware Removal Tool to your Desktop.

• Please close your security software to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete, depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
• Please post the contents of JRT.txt into your reply.

Download AdwCleaner from here. Save the file to the desktop.

NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

• XP users: Double click the AdwCleaner icon to start the program.
• Vista/7/8/10 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  You will see the following console:

• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
• Click the Clean button.
• Everything checked will be moved to Quarantine.
• When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

• On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt

 

 

Please download Zemana AntiMalware and save it to your Desktop.

• Right-click on the icon and select Run as administrator to install the program.
• Click Yes to accept the security warning.
• Once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.
  Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please re-boot your computer manually.
• Click on the Back button.
• On the top right corner click on Reports icon (the one with three bars) and double click on the latest report.
• Now click File > Save As, then choose your Desktop and click the Save button.
• Please attach the saved report in your next reply.

 

[JSntgRvr]

How is it going?

[glcippo]

Thanks for all the help and also the patience for the last couple of days as I have not been at my computer since the fix!

 

Attached to this reply are the 3 reports you requested.

 

Again, if there's any other precaution I can take to help prevent this in the future, please let me know!

 

Thanks again for all the help

Attached Files

•  JRT.txt   553bytes   661 downloads
•  AdwCleanerS1.txt   2.81KB   661 downloads
•  Zemana AntiMalware Report.txt   1.64KB   607 downloads