Black screen with cursor

Hello.

Well, looks like this problem is very common, right?

Never had any problems with Avast before. But now, when I tried to install the new client… I can’t start Windows (XP SP2 64-bit) anymore: just got a black screen with a (functional) mouse cursor on it.
Using Avast Free here. My NVIDIA drivers already updated.

When I uninstall Avast (in Windows’ Safe Mode), Windows works properly. Doesn’t look like a disk or Windows problem: it’s Avast.
Also, when I try to install Avast through the online setup, the installer freezes on “Finishing Setup” and never really finishes it. So I had to download the offline installer.

I read somewhere it could be because Avast is blocking explorer (the Windows’ file manager). Is that correct?

Well, I attached FRST.txt - as I can see, people always ask for it.

Hope you can help me.

Thanks!

I believe that there are some problems with 64bit XP’s as they are not a mainstream OS

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKLM-x32\...\Winlogon: [Userinit] userinit [X] HKLM\...\Command Processor: <======= ATTENTION HKLM-x32\...\Command Processor: <======= ATTENTION CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx [2011-09-05] EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

Hi, essexboy!

Thank you for your attention!

Here is the log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Administrator at 2014-08-20 10:51:18 Run:2
Running from C:\PHOINX\PROGRAMAS\Limpeza\Avast\Farbar Recovery Scan Tool
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Winlogon: [Userinit] userinit [X]
HKLM\...\Command Processor:  <======= ATTENTION
HKLM-x32\...\Command Processor:  <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx [2011-09-05]
EmptyTemp: 
CMD: bitsadmin /reset /allusers

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value was restored successfully.
HKLM\Software\Microsoft\Command Processor\\AutoRun => value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Command Processor\\AutoRun => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif" => Key deleted successfully.
C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx => Moved successfully.

=========  bitsadmin /reset /allusers =========

'bitsadmin' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========

EmptyTemp: => Removed 632.8 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Could you see if the same problem occurs now

It does. =[

But… Should I do this with Avast installed? If that’s the case, could only do that while in Safe Mode.
What I did was uninstall Avast, then FRST Fix and after that installed Avast again - and the problem continues.

I will need to have a little search on this to see if the xp64 was resolved

Well, I tried it both ways, with no luck.

I also tried the Avast removal tool (just to be sure): no solution using that too.

It appears that there are some unidentified problems with some XP64 bit, but as it is not all then it is proving difficult to track down the problem. As of yet I have been unable to find a solution
But I will keep looking

Could it be related to a previous installation of another anti-virus I did before?
I installed Kaspersky to give some orientation to a friend using it. But after that I uninstalled it - and used the specific removal tool and CCleaner to clear it all.

That is a possibility as there are some drivers remaining

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO) S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637784 2014-04-11] (Kaspersky Lab) R3 klim5; C:\Windows\System32\DRIVERS\klim5.sys [35632 2011-03-10] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [21520 2009-11-02] (Kaspersky Lab) 2014-07-25 13:56 - 2014-04-11 15:37 - 00637784 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys 2014-07-25 13:56 - 2012-08-30 22:26 - 00235960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klogon.dll 2014-07-25 13:56 - 2011-10-20 11:48 - 00458032 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys 2014-07-25 13:56 - 2011-10-20 11:48 - 00013616 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl2.sys 2014-07-25 13:56 - 2011-03-11 12:43 - 00035907 _____ () C:\WINDOWS\system32\Drivers\klop.dat 2014-07-25 13:56 - 2011-03-10 18:34 - 00035632 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klim5.sys 2014-07-25 13:56 - 2009-11-02 20:27 - 00021520 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

Here it is:


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Administrator at 2014-08-21 12:02:29 Run:4
Running from C:\PHOINX\PROGRAMAS\Limpeza\Avast\Farbar Recovery Scan Tool
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637784 2014-04-11] (Kaspersky Lab)
R3 klim5; C:\Windows\System32\DRIVERS\klim5.sys [35632 2011-03-10] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [21520 2009-11-02] (Kaspersky Lab)
2014-07-25 13:56 - 2014-04-11 15:37 - 00637784 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2014-07-25 13:56 - 2012-08-30 22:26 - 00235960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klogon.dll
2014-07-25 13:56 - 2011-10-20 11:48 - 00458032 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2014-07-25 13:56 - 2011-10-20 11:48 - 00013616 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl2.sys
2014-07-25 13:56 - 2011-03-11 12:43 - 00035907 _____ () C:\WINDOWS\system32\Drivers\klop.dat
2014-07-25 13:56 - 2011-03-10 18:34 - 00035632 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klim5.sys
2014-07-25 13:56 - 2009-11-02 20:27 - 00021520 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys
EmptyTemp: 
CMD: bitsadmin /reset /allusers
*****************

KL1 => Service not found.
kl2 => Service not found.
KLIF => Service not found.
klim5 => Service not found.
klmouflt => Service not found.
"C:\WINDOWS\system32\Drivers\klif.sys" => File/Directory not found.
"C:\WINDOWS\system32\klogon.dll" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\kl1.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\kl2.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klop.dat" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klim5.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klmouflt.sys" => File/Directory not found.

=========  bitsadmin /reset /allusers =========

'bitsadmin' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========

EmptyTemp: => Removed 464.2 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

As you can see, nothing found…

OK back to the drawing board