Avast is the only antivirus program on my desktop. While in the middle of working, the computer abrubtly shuts down with no warning several times a day. Grrrrrr. The message that comes up is:
"Problem Event Name: BlueScreen
OS version 6.1.7601.2.1.0.256
Local ID: 1033
Not sure how to insert Print Screen here.
When I hit the “resolve issue” button the bar progresses and appears to search but then the screen goes away without any resolution. Why is Avast not showing this issue? How can I get rid of it?
Thanks,
Robin
see instructions here https://forum.avast.com/index.php?topic=53253.0
scroll down to Farbar Recovery Scan Tool … run it and attach the two diagnostic logs
Thanks! I have downloaded and run the three programs. Logs are attached for your viewing pleasure. It does not show the list of what I attached so please let me know if you need something else. What do you think, doc? Thanks again!
Other attachments. Looks like I can only attach one at a time here.
LAST FILES. Now I see what I missed last time.
There a Option called More Attachments under the box you choose the attachment.
You can attach 4 files Maximum or 1024 KB per file and total to each post.
Thanks. I am curious if you see something that I need to do to resolve the BlueScreen problem. At this point, I have only scanned, correct?
Hey!
Can you attach your main FRST.txt log as well? It is missing. And yes, yuo’ve only scanned.
Next question: Why did you instruct aswMBR to repair your MBR? It was fine.
Sorry, forgot one thing. Your MCShield log is saved wrong.
See the attached picture and re-attach the MCShield log using that coding.
Ignore the naming. It isn’t needed. I assume you know how to get there, if not… Open MCshield log file > Save as > click then refer to this:
Hi Michael,
I hope I did not wreck havic by instructing aswMBR to repair my MBR! It seemed to be the next thing for me to select, so I did…foolishly. Two files attached, per your request. Thanks!
Essexboy has probably logged out for the day … if he dont reply in an hour, check back tomorrow after work hours european time
MCShield deleted one infected file … see log
the rest are just diagnostic logs
While Essexboy is out…
Do NOT use ANY usb stick, as any/all may be infected looking at the MCShield log… This includes yours and any other computers.
Please do not attempt any fix it yourself techniques as it may worsen the situation (AswMBR was fine, just not needed)
Can you attach a screenshot of the error? It may be related to the following file cpuz134_x64.sys.
Also, I have re-uploaded your FRST log as it was modified slightly. This includes the MCShield log, which was saved as OTLUnicode. The naming was an example for an old(er) tool that was used.
FOR ESSEX: OTLUnicode = MCShield.txt and FRST is well, FRST.
FOR ESSEX: OTLUnicode = MCShield.txt and FRST is well, FRST.i think he would understand / see that when he open the log ..... he does work with this sveral hours a day ;)
All of your errors appear to be related to Program Neighborhood Agent do you use that regularly ? If so I would recommend that you either update it or re-install it
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll => "c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll" File Not Found SearchScopes: HKU\S-1-5-21-2151513965-443352411-230531970-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119351&babsrc=SP_ss&mntrId=38269ea800000000000030469a2eb911 C:\Users\ROBIN LEWISON\DriverUpdate-setup.exe C:\Users\ROBIN LEWISON\eppx-win-4_1_6-en.exe C:\Users\ROBIN LEWISON\Evernote_5.1.1.2334.exe C:\Users\ROBIN LEWISON\Evernote_5.4.0.3698.exe C:\Users\ROBIN LEWISON\install_reader11_en_mssd_aaa_aih.exe C:\Users\ROBIN LEWISON\mp500vst64110ej.exe C:\Users\ROBIN LEWISON\mpnmp500win202ea13.exe C:\Users\ROBIN LEWISON\mypr-win-3_1_0-ea11_2.exe EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Dear E.B.
My computer continued to have problems over the past few days and in order to get it going again, I had to restore things to a previous version. Thus, things are not the same as when you last saw the readout. Therefore, I have reinstalled FRST.exe and once again run the program. For you I have attached lastest versions of the results. Before I do as you directed above, I thought it best to let you check to see if all that still needs to be done. I figure better safe than sorry. Thanks for your support, E.B.
Best,
Robin
Yep that makes sense Did you uninstall Neighborhood Agent
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll => "c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll" File Not Found SearchScopes: HKU\S-1-5-21-2151513965-443352411-230531970-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119351&babsrc=SP_ss&mntrId=38269ea800000000000030469a2eb911 FF SearchPlugin: C:\Users\ROBIN LEWISON\AppData\Roaming\Mozilla\Firefox\Profiles\k6as9ye2.default\searchplugins\delta.xml CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx [2012-11-22] CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx [2013-02-08] CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx [2012-10-16] CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22] 2014-11-23 10:09 - 2014-11-23 10:09 - 00756040 _____ () C:\Users\ROBIN LEWISON\Downloads\ReimageRepair.exe C:\Users\ROBIN LEWISON\DriverUpdate-setup.exe C:\Users\ROBIN LEWISON\eppx-win-4_1_6-en.exe C:\Users\ROBIN LEWISON\Evernote_5.1.1.2334.exe C:\Users\ROBIN LEWISON\Evernote_5.4.0.3698.exe C:\Users\ROBIN LEWISON\install_reader11_en_mssd_aaa_aih.exe C:\Users\ROBIN LEWISON\mp500vst64110ej.exe C:\Users\ROBIN LEWISON\mpnmp500win202ea13.exe C:\Users\ROBIN LEWISON\mypr-win-3_1_0-ea11_2.exe EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
I uninstalled Citrix, which I think linked me to Neighborhood Agent. The only Neighborhood Agent I fould was a “short-cut” and I deleted that. I know this is not the orthodox method, but that is all I could find in a search. Do you see it in the 2 text attachments I sent earlier today?
Did you want me to still do the other items in your directives??
Nope not seen which was why I asked. The last FRST fix and AdwCleaner run will be sufficient
Dang! It happened again. I thought for sure that we had it fixed. This was the screen upon re-starting. Do you want me to run the FRST again?
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033
Additional information about the problem:
BCCode: 116
BCP1: FFFFFA800C35C4E0
BCP2: FFFFF8800601DF60
BCP3: FFFFFFFFC000009A
BCP4: 0000000000000004
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1
Files that help describe the problem:
C:\Windows\Minidump\112914-21765-01.dmp
C:\Users\ROBIN LEWISON\AppData\Local\Temp\WER-722406-0.sysdata.xml
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
Could you go to C:\windows\minidumps
Right click the last 2 or three dumps there and select send to > compressed file
Then upload the zip to a file sharing site for me to collect