Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

%hs missing after Avast install


  • Please log in to reply
17 replies to this topic

#1 stevenmills

stevenmills

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 22 May 2012 - 07:28 PM

I downloaded Avast due to a nasty problem on my laptop. After a boot scan failed, I am getting blue screen and %hs missing. I have tried the AVG recovery disk fix, with no luck. I ran FRST.exe, and here is my FRST.txt. I am in need of a fix file for this.

Attached Files

  • Attached File  FRST.txt   28.68KB   14 downloads


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,556 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:03 PM

Posted 22 May 2012 - 08:36 PM

I have asked a Non booter specialist to look here. It may not be today.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 22 May 2012 - 08:41 PM

Thank you.

#4 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:11:03 PM

Posted 22 May 2012 - 09:49 PM

:welcome:

Wonder why the computer has a 64bit system but you booted with a 32bit Recovery CD.

Download the enclosed file.

Save it next to FRST. Run FRST as you did before, except that this time around, click on the Fix button and wait.

The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.


Attempt to boot in Normal Mode, if able to do so, get a connection and run Combofix as follows:

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
  • Please, never rename Combofix unless instructed.
  • Close any open browsers.
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    -----------------------------------------------------------

    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link or this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

      -----------------------------------------------------------

    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

    -----------------------------------------------------------

  • Double click on combofix.exe & follow the prompts.
  • Install the Recovery Console if prompted.
  • When finished, it will produce a report for you.
  • Please post the "C:\ComboFix.txt" .
**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#5 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 22 May 2012 - 09:57 PM

the system difference is because I had to make a repair disk from another computer just to even get the cmd prompt up. not good for much, but it works for that.

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,556 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:10:03 PM

Posted 22 May 2012 - 09:57 PM

Hello, just letting you know I moved this topic to Here in the Virus, Trojan, Spyware, and Malware Removal Logs forum where it will stay.

Please remember to click the Watch Topic button at the top right and select Immediate Notification so you do not miss any replies now that you were moved.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 23 May 2012 - 07:22 AM

here is the FRST fixlog and the Combofix log. I can now boot to safe mode, but normal windows 7 gives me blue screen, Windows failed to load properly last time, and restarts over and over.

Attached Files



#8 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:11:03 PM

Posted 23 May 2012 - 11:34 AM

Download the enclosed file.

Extract and save its contents on the desktop of the ailing computer. Once saved, open the folder, rightclick on the Test.bat file and select "Run as an Administrator". Post the resulting report.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#9 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 23 May 2012 - 11:56 AM

Here is the test log. I was also able to deactivate auto chkdisk, and now the computer boots normal. still slow, but past safe mode.

Attached Files



#10 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:11:03 PM

Posted 23 May 2012 - 03:00 PM

Seems clear.

Please run FRST once again and click on the Scan button. It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#11 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 23 May 2012 - 04:11 PM

Here is the new FRST log.

sorry forgot to attach it. here is the new FRST log.

Attached Files

  • Attached File  FRST.txt   21.47KB   3 downloads


#12 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:11:03 PM

Posted 23 May 2012 - 09:35 PM

There is an inconsistency in this report. You should now be able to boot to the Advanced menu, replace the copy of FRST you have in the flash drive as follows:

For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Click on Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst64 and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#13 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 23 May 2012 - 09:54 PM

Here it is, from repair disk cmd prompt.

Attached Files

  • Attached File  FRST.txt   30.32KB   4 downloads


#14 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:11:03 PM

Posted 23 May 2012 - 10:05 PM

I will attempt to restore the registry from the backups to the date it last booted to Normal Mode.

Download the enclosed file.

Save it next to FRST. Run FRST as you did before, except that this time around, click on the Fix button and wait.

The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.


If successful, attempt to boot in Normal Mode, if able to do so, run Combofix in Normal Mode.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#15 stevenmills

stevenmills
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:03 PM

Posted 23 May 2012 - 10:12 PM

didn't work. Now i am right back where I started, system will not boot and blue screen with %hs missing, please reinstall program. I was able to boot to normal mode prior to this fix.

Attached Files


Edited by stevenmills, 23 May 2012 - 10:12 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users