[JSntgRvr]

I have moved the topic to the malware removal forum, as I must use tools that otherwise are not allowed in the software forum. Continue here.

[Advertisements]

Ok, will you move it back after if it doesn't fix using the malware removal methods?

 

 

Here is what I am understanding 

Boot to recovery environment - USB MCT

From there I am to use notepad to determine which drive my USB is with FRST.exe

 

But where is my USB FRST64.exe supposed to go?  Can I boot to a 1) USB for MCT with a separate 2) usb with FRST64.exe?

Edited by netrate, 16 December 2020 - 12:54 PM.

[netrate]

Ok, will you move it back after if it doesn't fix using the malware removal methods?

 

 

Here is what I am understanding 

Boot to recovery environment - USB MCT

From there I am to use notepad to determine which drive my USB is with FRST.exe

 

But where is my USB FRST64.exe supposed to go?  Can I boot to a 1) USB for MCT with a separate 2) usb with FRST64.exe?

Edited by netrate, 16 December 2020 - 12:54 PM.

[JSntgRvr]

You can do that. You can also copy the FRST or FRST64 to your bootable drive. In any case, once at the command prompt you must identify the letter of the USB device used to run FRST(64). How are you getting into the Command Prompt?

[netrate]

Using either MR or MCT oir without usb and using advanced options from the win 10.

Edited by netrate, 16 December 2020 - 01:12 PM.

[JSntgRvr]

Ok, I didn't understand what Mct was, but it seems it is the Media Creation Tool.
 
If the drive is writeable, you can include FRST(64) in the drive. At the command prompt type Notepad ->Open, select This PC and identify the letter of the drive containing FRST(64). Return to the prompt and type the letter along with FRST(64) like:

• In the command prompt, type e:\frst.exe (for the x64 version, type e:\frst64.exe and press on Enter
• Note: Replace the letter e with the drive letter of your USB Flash Drive
• FRST will open
• Click on Yes to accept the disclaimer
• Click on the Scan button and wait for it to complete
• A log called frst.txt will be saved on your USB Flash Drive. Post it in your next reply

[netrate]

 FRST.txt   35.86KB   208 downloadsHere is the log file 

Edited by netrate, 16 December 2020 - 02:35 PM.

[JSntgRvr]

Open FRST as you did before.
 
Type the following in the edit box on FRST, after "Search:".
 
KernelBase.dll;msvcp_win.dll
 
Note that the files are separated by a semicolon
 
Click Search Files button and post the log (Search.txt) it makes on the USB drive in your next reply.

[netrate]

here it is :
 

Attached Files

•  Search.txt   6.64KB   202 downloads

[JSntgRvr]

There are no signed backups in your computer. Lets try copying these files from the Windows Creation Tool and see what happens.

• Copy the entire contents of the Quote Box below to Notepad.
• Name the file as fixlist.txt
• Change the Save as Type to All Files
• and Save it in the same location FRST64 is saved in the USB

Replace: X:\Windows\System32\KernelBase.dll C:\Windows\System32\KernelBase.dll

Replace: X:\Windows\System32\msvcp_win.dll C:\Windows\System32\msvcp_win.dll

CMD: BCDEDIT /ENUM ALL

 

 

 

Run FRST as you did before, except that this time around, click on the Fix button.

 

A log will be produced in the USB labeled Fixlog.txt. Please post its contents in a reply. If the fix is successful, restart the computer in Normal mode and let me know the outcome

[netrate]

Asked me to skip disk checking, I did not.  Said it was repairing and now a reboot.

And it went right into Advance options...

 

"Error bad system info config" or somethin with a sad face screen.

Edited by netrate, 16 December 2020 - 04:14 PM.

[JSntgRvr]

Was there a Fixlog.txt in the USB? Why are you disk checking?

[netrate]

I didn't perform any function except rebooting.  When I reboot, it said ":Performing disk check, press space to stop"

 

Fixlog says this :

 

==== End of Fixlog 17:11:41 ====

[JSntgRvr]

That is very strange. Try the fix again.  Post the new Fixlog.txt

 

This time, here is the fixlist.txt.   Save it next to FRST64.  Run FRST64 and click on Fix.

[netrate]

Ok, I took your text file, ran FRST64 and then ran the fix.

Here is a pic.

Edited by netrate, 16 December 2020 - 06:21 PM.

[JSntgRvr]

No. This time  download the file and save it next to (in the same location) as FRST64.