Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blank desktop, hidden files, Chrome tabs disappearing


  • This topic is locked This topic is locked
31 replies to this topic

#1 zombteach

zombteach

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 09:37 PM

My wife's HP laptop (specs to follow) was purchased used and given to her as a Christmas gift by a family member. Issue free until about a month or so ago when something attacked. I should add, quickly, that MS Security Essentials was the only security software being utilized at this time. Wife was streaming a video from Hulu or CBS when it froze and the Firefox window disappeared. A bunch (50-60, maybe more) of error dialog boxes began cascading across the screen. Unfortunately, neither of us remember what the messages said. After getting rid of those, she attempted to reopen Firefox and one by one, every icon on the desktop began to disappear. Finally, the picture set as the background disappeared, leaving a black screen with only the start menu. In the start menu, nearly everything was missing as well.

My next move was to call the family member who said they had run into a similar problem in recent months. They put it in safe mode, removed some processes from the startup, deleted some registry entries and then proclaimed it cured. At this point, files had been "recovered," though many, if not all, were faded (I discovered that they were marked as hidden). I immediately installed McAfee and somehow my wife doubled it up with Avast. McAfee has found nothing since day one, while Avast identifies a network threat about every 5-10 minutes. Usually it is a web address that some hidden program is trying to access. The two specific addresses I remember included coolsearchnow.com and iphonepuma.com. If I remember correctly it said the source was explorer.exe. The computer itself seems a bit slow, though running two av progs simultaneously may have a bit to do with that.

I have since removed McAfee from the computer to solely run Avast. I also downloaded and ran MalewareBytes. In a quick scan, it found 1 file: C:\Users\Sarah\Downloads\Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully. Subsequent scans showed clean. Since then, Firefox's minimize, maximize, and close buttons have ceased working and Chrome's tabs close when you try to click to them.

I have also tried restoring to factory settings, but every step I take in that process ends up at a dead end.

Specs
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Turion™ II P540 Dual-Core Processor, AMD64 Family 16 Model 6 Stepping 3
Processor Count: 2
RAM: 3834 Mb
Graphics Card: AMD M880G with ATI Mobility Radeon HD 4250, 320 Mb
Hard Drives: C: Total - 458631 MB, Free - 360550 MB; D: Total - 18003 MB, Free - 2606 MB; F: Total - 99 MB, Free - 90 MB;
Motherboard: Hewlett-Packard, 144E
Antivirus: avast! Antivirus, Updated and Enabled

Help me.

Edited by zombteach, 19 August 2012 - 09:37 PM.


BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:24 PM

Posted 19 August 2012 - 09:50 PM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#3 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 10:43 PM

I want to make sure that I am following the correct steps with TDSSkiller before I move on. First, I had to run it in safe mode because it would not download normally. Upon running, it identified a threat with the default action to cure. I clicked continue but received the message "Can't cure MBR. Write standard boot code? Yes/No?"

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:24 PM

Posted 19 August 2012 - 10:44 PM

Restart the PC and let me know

Edited by narenxp, 19 August 2012 - 11:16 PM.


#5 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 10:56 PM

Now posting from another computer.

Clicked yes, clicked reboot.

Won't boot in any manner, safe or otherwise.

Windows failed to start... Insert installation disc (which I don't have), etc.
Status: OxcOOOOOOf
Info: The boot selection failed because a required device is inaccessible.

Edited by zombteach, 19 August 2012 - 11:00 PM.


#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:24 PM

Posted 19 August 2012 - 11:03 PM

Press F10 on bootup

Under EDIT boot options let me know what you see

Also do you have your OS DVD?

#7 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 11:11 PM

Boot Options
POST Hotkey Delay (sec) <0>
HP QuickWeb <Disabled>

CD-ROM Boot <Enabled>
Floppy Boot <Disabled>
Internal Network Adapter Boot <Disabled>
>Boot Order
Notebook Hard Drive
Internal CD/DVD ROM Drive
USB Diskette on Key/USB Hard Disk
USB CD/DVD ROM Drive
! USB Floppy
! Network Adapter

I do not have the Windows DVD. Disc was not included with either of my HP laptops.

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:24 PM

Posted 19 August 2012 - 11:13 PM

Press F8 on bootup.Do you have REPAIR YOUR COMPUTER option?

What happens when you select it?

#9 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 11:24 PM

With the exception of accessing the BIOS, every other boot option (normal, F5, F8) goes straight to the error screen:

"Windows failed to start. A recent hardware or software change might be the cause. To fix the problem:
1. Insert your Windows installation disc and restart your computer.
2. Choose your language settings, and then click 'Next'
3. Click 'Repair your computer'
If you do not have this disc, contact your system administrator or computer manufacturer for assistance.
Status: OxcOOOOOOf
Info: The boot selection failed because a required device is inaccessible."

Upon pressing 'enter', it continues in Windows Boot Manager saying:

"Choose an operating system to start, or press TAB to select a tool:

Ramdisk Options [EMS Enabled] (when choosing this option, it returns back to the previous error screen)

To specify an advanced option for this choice, press F8. (also returns back to the previous error screen)

Tools:
Windows Memory Diagnostic"

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:24 PM

Posted 19 August 2012 - 11:27 PM

Let me ask a malware response team member to assist you.

good luck

#11 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 19 August 2012 - 11:29 PM

Thank you.

#12 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,750 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:24 PM

Posted 21 August 2012 - 02:20 AM

:welcome:

Lets give it a try. You will need a USB Flash drive.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Click on Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#13 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 21 August 2012 - 09:21 PM

Alright, downloaded the program onto the flash drive, booted up, but cannot get to Advanced Boot Options. In fact, it seems F8 is not an option for this machine. My options are as follows:
F1 - System Information (just specs)
F2 - System Diagnostics (hp diagnostics menu)
F9 - Boot Device Options (HD, CD/DVD, USB)
F10 - BIOS Setup
F11 - System Recovery (goes straight to error screen from previous posts)

Can't seem to get anywhere productive without running into that error.

#14 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,750 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:24 PM

Posted 21 August 2012 - 09:42 PM

The option is not visible. Just start tapping F8 at startup every other second until you have reached the advanced menu. Disregard any error sound until you reach the menu.

If still unable to do so, do you have access to another computer running Windows 7?

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#15 zombteach

zombteach
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 21 August 2012 - 09:46 PM

No luck with F8 to this point, but will keep trying.

In the meantime, yes, I am working with you through another laptop with Windows 7.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users