No, continue. I will be using AdwCleaner as MBAM may not get it all
kk. i will report back after confirming restarts adding a drive at a time.
so im not sure if you’re aware of the 2 supplemental drives i have, but one is a 1 TB storage drive and the other is another SSD on which i install programs i don’t use as regularly (i.e. games … the ones i would use more regularly go on my boot drive)
i plugged the SSD back in first and experienced no problems on boot. i realized that i had forgotten to install avast previously to reconnecting the drive, so i did that during this startup.
i then tried rebooting with my storage drive connected as well. although startup was successful, it was slower than before (i suppose that can be expected considering drive speeds), but then after logging in, my typical applications startup got stuck on skype, which is loaded on my boot drive. so im not sure if there’s some sort of interference or miscommunication between my drives.
okay, i wasn’t able to do anything on my system at that point. it just got stuck. so i shut down (not manually… the shut down command from start menu still worked). double checked my hardware connections. started up again. and it’s running fine. what’s next?
OK now to see what adware you have
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
how long does the scan typically take? it scanned the first few things really quickly but it’s been on “analyzing browsers…” for about 5-6 min as of now
i wonder b/c the progress bar doesn’t seem to be moving and i had believed earlier in the process (as i described in my original post) that the scan stalled on this step. according to my task manager, it looks like it is still working, though.
Stop the adwcleaner scan and run this instead
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[]Select LOP and Purity
[]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir “%systemdrive%*” /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs
is the custom scan box text very important? i jumped the gun and pressed run scan before pasting that text in =\
i tried to stop the scan and restart it as soon as i noticed but i didn’t see a way to do so without ending the process in task manager, so i let it be
i forgot to attach these to my previous post.
should i run another scan with the custom text inputted?
i decided it probably wouldnt hurt to do it. not sure why but only 1 .txt file came out of it (no extras.txt). the new otl.txt is attached.
i await your next instruction. based on the reference thread, it looks like you’ll provide me with custom code for the otl fix and then it’ll be onto combofix?
No need for combofix
On completion of this let me know of any problems
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]
:OTL
IE - HKU\S-1-5-21-1780703873-3060701200-248834442-1000\..\SearchScopes\{68A7778D-EC94-4EBA-9627-47A972823643}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468&UP=SPFB27D38C-0A37-406B-B095-8AEA64EAA8B2&SSPV=
:Commands
[resethosts]
[emptytemp]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
okay, done. here it is.
How is the computer behaving now ?
so far so good! the only thing i’ve noticed is that startup is a little slower than it used to be, but it’s consistently starting up without any problems now.
if you’ve any other suggestions, i’m happy to hear it. otherwise, i think we’re good at this point. either way, thank you so very much! you’re awesome!
Just let me know if anything untoward happens in the next few days
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article and this article.
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe
kk cool. thanks again!
well, i don’t know what set it off, but i am experiencing the exact same problem all over again after being fine for a few days.
stuck on starting windows … reboot, try safe mode → stuck on aswRvrt.sys … tried system repair restore point & got nothin.
i’ve gone ahead and attached for you my FRST.
(FYI, unfortunately, my school term has started so my correspondence will be slow.)
oh i think i might’ve realized what set it off since i just remembered your advice about java. i had to re-enable it to use a program (or so the program indicated). the program in question is pdfill tools, which i use to convert images to pdf. when i opened it, it prompted me to install java, which i did… is that the culprit? =\
OK lets run back the registry initially
Download the attached Fixlist.txt to the same location as FRST
Run FRST and press Fix
On completion a log will be generated please post that
hiya essexboy, thanks for your prompt reply. sorry i couldn’t be as rapid with mine. i just got home from class and ran the fix. log is attached. upon restart, i still got stuck on starting windows screen. tried safe mode, and same as before – stuck on aswRvrt.sys. since my laptop was being slow, i decided to run FRST scan again, so also attached is that log.