Dreaded BSOD

Viruses and worms
1

My laptop has shut down with the BSOD each day for the last 3 days. I’m not sure f it is virus related. A red error notice pops up on start up
saying Avast was not able to update, I click the box to update manually and another pops up to say it is up to date.
Did a quick scan and 0 infections but the result log says several files could not be scanned because they are password protected.
I have never seen this before. Ran Malwarebytes, log attached, also 0 infections.

Ran windows check and fix, and did system restore, next time I logged on the BSOD appeared again.

Any ideas anyone? Any help would be much appreciated. I have backed up all my files/picures etc just in case but really can’t afford a new machine at the moment!

2

Please follow this guide and attach the other logs: http://forum.avast.com/index.php?topic=53253.0

Needed are OTL, ADW Cleaner and aswMBR.

When done help will arrive soon.

3

Ok thanks Steven .

4

ADW cleaner run and cleaned, log attached.

5

asw MBR completed, have not clicked ‘fix’ Log attached

6

Now the OTL Log please.

Maybe there is just something wrong with your system or an program which crashes the system.

7

OTL has run, log attached. Have not run fix. Please advise if I should fix on OTL and MBR, I still have both open. Thanks for your help.
I feared it was a problem with the hard drive :frowning:

8

There is no malware remover online now. Please check back later.

If there is no malware on there it could be a broken program which causes the crashes. Or maybe there are some
errors on your Harddrive which need to be fixed.

Just follow the instructions if an malware remover arrives. :wink:

9

Ok thanks Steven.

10

Hi, I’ll be working with you :slight_smile:

Re-run Adwcleaner, but now make sure to hit Clean button, after the scanning is complete.
Attach me that log.

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

11

ADW done, log attached will now download farbar, thank you twinheadedeagle.

12

FRST done but forgot to make sure those boxes were checked.
Shall I re-run? Sorry, it’s getting late here my brain is turning to mush! :o

13

Did a re-run, log attached. Do I need to click fix?

14

Hi,

You will need to reinstall Avast later, but let’s first do this.

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll [ ] ()
c:\progra~3\browse~1
SearchScopes: HKCU - {90ED28A7-2B53-4857-9ED7-4735CDC9AEC1} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=39AA0D1F-0F58-41F3-B989-ECBCEF5DEF9D&apn_sauid=F870B838-CDC7-4F15-87A8-63747EDDB3D4
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoWebsite&dpid=SnapdoWebsite&co=GB&userid=46c572f4-9c55-41c1-9d23-97d39ecc21da&searchtype=ds&installDate=19/08/2013&q=
FF Extension: Snap.Do  - C:\Users\grandma\AppData\Roaming\Mozilla\Firefox\Profiles\wni8eqoj.default\Extensions\{46c572f4-9c55-41c1-9d23-97d39ecc21da}
CHR DefaultSearchURL: (Delta Search) - http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A42574DE2B061BDA&affID=121240&tsp=4980
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
C:\Users\grandma\AppData\Local\Temp
cmd: ipconfig /flushdns
AlternateDataStreams: C:\ProgramData\Temp:090FB735
AlternateDataStreams: C:\ProgramData\Temp:8AB6C1D7

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

Then…

Go to Control Panel → Uninstall a Program, find Avast, click on Uninstall, and then click on Repair

http://fotkica.com/thumbs3/1_tmb_461356202_other-04_en_a7_disabled_ns_win8_setuprepair9dfd22e908284a9bde8c7f5dacf06969bde0dcf24f1616ba13b39a929e8e5b82525928c96d0d9819e611e28a165c1c894e7998790112eec4.jpg

15

I just got back to this, followed instructions, box said frst is in same place as fixlist, clicked fix and another box said No fixlist.txt found. The fixlist.txt should be made and saved in the same directory the tool is located. Confused!

16

That’s because you ran FRST from Downloads folder, and instruction said to save it on Desktop. Correct it, and the fix should work :slight_smile:

17

Ok, I saved to desktop and got the same pop up box. When I download frst do I have control over where it puts itself?
This bit is confusing me, I’m just a granny with a laptop and not very computer savvy! Would it be better to use
remote assistance? Wouldn’t normally go down that route but losing plot here? Thanks for your patience, I’m not the easiest to work with!

18

Ok, we’ll do it slowly :slight_smile:

Navigate to following folder:

C:\Users\grandma\Downloads

Here you will find FRST that you downloaded. Copy the fixlist.txt that you put on Desktop into this folder.

Then run FRST, and click Fix

19

WOOHOO…result! Log attached 8)

20

Avast repaired as instructed. Now to restart.