Hi Guys, I stupidly installed reimage after Filehippo flagged updates that were needed. I have used filehippo for years so I trusted the site when it said that there was a problem. What an idiot!!
It took over 4 hours to ‘clean and repair’ my laptop, it was running slow before and it didn’t make any difference, right after that avast removed a threat. That was a couple of days ago. Today it wouldn’t load so used safemode, uninstalled reimage and tried system restore. It failed twice, then I tried avast and discovered it was off. Tried a scan and it said there is no endpoint. It will not turn on either. I must have been unprotected since it was installed. Now Chrome and IE will not load. You guys have helped me in the past, I would be very grateful if you could hold my hand through this too :-[
Attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: https://forum.avast.com/index.php?topic=53253.0
MBAM running, will do the others too, thank you.
You’re welcome, awaiting your logs.
Having a problem attaching the MBAM log. The export button is at the bottom of the page and it is hidden by the toolbar so can’t move it to a file. Is there a way to hide the toolbar? Can’t minimize the page either and have tried to adjust settings to make them smaller! I’m sure it will be so simple, when you know how. :-\
The export button is at the bottom of the page and it is hidden by the toolbar so can't move it to a file.a toolbar at the bottom ... what toolbar?
cant you drag the log upwards?
post a screenshot se we can see
FRST is the imoprtant Log. So if you can’t get MBAM Logs, Skip it and just post FRST.
Logs and screenshot attached, phew!
Hi, after this is if you let me know what problems we still have to fix
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: SearchScopes: HKLM -> DefaultScope value is missing. SearchScopes: HKLM-x32 -> DefaultScope value is missing. Toolbar: HKU\S-1-5-21-912932479-3366536657-4187450321-1000 -> No Name - {25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} - No File 2015-01-11 19:52 - 2015-01-11 19:52 - 01513472 _____ () C:\Users\grandma\Downloads\Unconfirmed 864308.crdownload 2015-01-08 19:38 - 2015-01-08 19:38 - 10192030 _____ () C:\Users\grandma\Downloads\25772fa57f42c951d6124e2418342256 (1).zip 2015-01-08 19:35 - 2015-01-08 19:35 - 05408376 _____ () C:\Users\grandma\Downloads\c4c5f9b5463d9ab3b440a2332d33ac89 (2).zip 2015-01-06 15:32 - 2015-01-06 15:33 - 00000000 ____D () C:\Users\grandma\AppData\Local\{D12240AF-963D-4B1D-8693-34651F349F26} 2014-12-21 09:44 - 2014-12-21 09:44 - 05408376 _____ () C:\Users\grandma\Downloads\c4c5f9b5463d9ab3b440a2332d33ac89 (1).zip 2014-12-20 19:40 - 2014-12-20 19:40 - 00000000 ____D () C:\Users\grandma\AppData\Local\{1E62B15D-8BFE-45FD-BCC8-7812487EE3B4} 2014-12-18 18:33 - 2014-12-18 18:33 - 05408376 _____ () C:\Users\grandma\Downloads\c4c5f9b5463d9ab3b440a2332d33ac89.zip 2014-12-18 18:32 - 2014-12-18 18:32 - 10192030 _____ () C:\Users\grandma\Downloads\25772fa57f42c951d6124e2418342256.zip CustomCLSID: HKU\S-1-5-21-912932479-3366536657-4187450321-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\grandma\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-912932479-3366536657-4187450321-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\grandma\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-912932479-3366536657-4187450321-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\grandma\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-912932479-3366536657-4187450321-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\grandma\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File Task: {00CB5FBD-5C11-4393-A145-134B2932F098} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.2.10\SymErr.exe Task: {26171E44-424E-4CB3-AA4A-B567CAB477F8} - \DSite No Task File <==== ATTENTION Task: {7C5D0D31-134B-49C1-80E1-1BE4DFFB9DD6} - \QtraxPlayer No Task File <==== ATTENTION Task: {CB41012E-F4F5-4ED0-B294-44EF1BF733C4} - \BrowserDefendert No Task File <==== ATTENTION Task: {FE2DF74D-89B1-4FAF-A3D4-163CCDDA1CAB} - \EPUpdater No Task File <==== ATTENTION EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
The two are side by side in documents but it says there is no fixlist.txt :-\
Could you copy them both to the desktop. Do not make them shortcuts though
Thanks EB I figured that it should be in downloads not documents and completed . Now to run the ADW scan.
There are 2 documents so attached both.
We only needed S[ x ].txt :-). Also, can you please attach the fixlog for EB to see?
(Spaces add to the { x } because apperently that is BBCode -_-
Sorry I missed that step! What will the log be called?
Not a problem that gives me sufficient data 
What problems are you experiencing now ?
Got it.
OK what problems are showing now, is Avast working properly
Avast is working but chrome still not loading, should I uninstall and download again? Maybe I’ll not bother, lol.
It does sound like a corruption with in chrome … Does IE function normally ?
An uninstall/re-install may cure it