Boot Scan File Check?

a_vast · 2015-10-10T15:05:15.000Z

Hi,

My laptop opened with a black screen + no internet access today. These are the reports - Avast would not let me access the details of the boot scan

http://i1295.photobucket.com/albums/b630/r_i_c_2012/avast_bootscan_low_10.Oct.2_zpsr0svpxql.jpg

Thanks

Asyn · 2015-10-10T15:18:57.000Z

Let’s have a look…

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

DavidR · 2015-10-10T15:37:48.000Z

As far as I’m aware if there are no detections in the boot-time scan or any scan for that matter, it has no retained data for Detailed report.

Unless you change the report statistics to include OK files, etc. (and you are going to get huge data files), then the only data recorded would be what you already see in the Lower window run time, tested files (numbers, no details) tested folders, data tested and that is pretty much all you would get.

a_vast · 2015-10-10T21:03:19.000Z

Thanks David & Asyn,

The MBAM is already posted, just ran FRST. Have been on and offline all day with my router flashing red several times - it did a red on me after i ran FRST as well, I have no idea what is going on :-o

a_vast · 2015-10-10T21:04:38.000Z

This file didn’t show - I attach it again

a_vast · 2015-10-10T21:20:47.000Z

Here’s the aswMBR, first time I used this & FRST.

a_vast · 2015-10-11T00:46:54.000Z

Any ideas please - my connectivity is all over the place today, could it even be the ISP perhaps?

Thanks.

essexboy · 2015-10-11T10:14:57.000Z

Nothing readily apparent just some orphans, I will refresh your network

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION 2015-09-20 18:17 - 2015-09-20 18:17 - 00000000 ____D C:\Users\Ric\AppData\Local\{4871F821-B1D8-4C99-B6D9-418F51EAF37D} CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Announcements