Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win7 Home Premium 64 won't boot(system repair attempts fail)


  • This topic is locked This topic is locked
12 replies to this topic

#1 tookerj

tookerj

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 21 February 2013 - 12:49 PM

Ran FRST64.exe as found on the forum and need assistance creating the fixlist.txt file.

 

Sorry for the screen shots.   

Attached Files


Edited by hamluis, 21 February 2013 - 01:08 PM.
Moved from Win 7 to Malware Removal Logs - Hamluis.


BC AdBot (Login to Remove)

 


#2 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 21 February 2013 - 05:47 PM

could it be the epson driver loading at startup is bad or invalid?   if so how would the fixlist.txt file read to remove that run statement at startup

ASUS laptop,  frst64.exe is running off d: data partition.



#3 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:04:42 AM

Posted 22 February 2013 - 12:23 PM

Hi tookerj,

welcome.gif to Bleeping Computer.

My name is Jason and I'll be helping you with your computer problems. You can call me by my screename jntkwx or Jason is fine.

Some things to remember while we are working together.
  • Do not run any other tool untill instructed to do so!
  • Please do not attach logs or put logs in code or quote boxes (unless explicitly asked to)
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can also help.
  • Do not run anything while running a fix.
  • If you don't understand a step, please ask for clarification before continuing with any future steps.
  • In the upper right hand corner of the topic you will see the Follow This Topic button. Click on this then choose Receive Notification Immediately and then click Follow This Topic and you will be sent an email once I have posted a response and make the cleaning process faster.

    Note to others: The instructions here are intended for the person who began this topic. If you need help, please create your own topic in the appropriate forum.

     
    Rerun FRST
  • Please download a new version Farbar Recovery Scan Tool and save it to a flash drive.

    Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

    Plug the flash drive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
    Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.
    To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html



    To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
  • On the System Recovery Options menu you will get the following options:
    Startup Repair
    System Restore
    Windows Complete PC Restore
    Windows Memory Diagnostic Tool
    Command Prompt


    Select Command Prompt

    Once in the Command Prompt:
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

Edited by jntkwx, 22 February 2013 - 12:24 PM.

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#4 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 22 February 2013 - 02:27 PM

Jason,

 

Thanks in advance for the help.

 

Jim

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-02-2013 01
Ran by SYSTEM at 22-02-2013 14:24:31
Running from F:\
Windows 7 Home Premium   (X64) OS Language: English(US)
The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [192520 2010-10-12] (Trend Micro Inc.)
HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2589992 2011-04-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-05-02] (Intel® Corporation)
HKLM-x32\...\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey [2127896 2013-01-25] (Microsoft Corp.)
HKU\pasg411\...\Run: [EPSON NX420 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCA.EXE /FU "C:\Users\pasg411\AppData\Local\Temp\E_S2C00.tmp" /EF "HKCU" [224768 2009-09-13] (SEIKO EPSON CORPORATION)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 71.250.0.12
Startup: C:\Users\pasg411\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk ->  (No File)

==================== Services (Whitelisted) ===================

2 ATKGFNEXSrv; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2009-12-15] (ASUS)
2 BingDesktopUpdate; "C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe" [166408 2013-01-25] (Microsoft Corp.)
2 IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [188760 2012-10-04] ()
2 IBUpdaterService; C:\Windows\System32\dmwu.exe [1261936 2012-10-02] ()
2 MyFunCards_5mService; C:\PROGRA~2\MyFunCards_5m\bar\1.bin\5mbarsvc.exe [42504 2012-12-17] (COMPANYVERS_NAME)
3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2012-03-21] (PC Tools)
3 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)
2 WajamUpdater; "C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe" [109064 2012-10-05] (Wajam)
3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [x]

==================== Drivers (Whitelisted) =====================

3 AiCharger; C:\Windows\System32\Drivers\AiCharger.sys [16768 2011-02-25] (ASUSTek Computer Inc.)
0 assd; C:\Windows\System32\Drivers\assd.sys [27264 2010-04-28] (ASUS Corporation)
1 ATKWMIACPIIO; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [17536 2011-05-25] (ASUS)
3 kbfiltr; C:\Windows\System32\Drivers\kbfiltr.sys [15416 2009-07-20] ( )
2 tmactmon; C:\Windows\System32\Drivers\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
2 tmcomm; C:\Windows\System32\Drivers\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
2 tmevtmgr; C:\Windows\System32\Drivers\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
1 tmtdi; C:\Windows\System32\Drivers\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)
3 BTHPORT; C:\Windows\System32\Drivers\BTHport.sys [x]
3 BTHUSB; C:\Windows\System32\Drivers\BTHUSB.sys [x]
3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [x]
3 iBtFltCoex; C:\Windows\System32\DRIVERS\iBtFltCoex.sys [x]
0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [x]
3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [x]

==================== NetSvcs (Whitelisted) ====================


==================== One Month Created Files and Folders ========

2013-02-21 11:44 - 2013-02-21 08:27 - 00909632 ____A (Farbar) C:\FRST.exe
2013-02-21 08:27 - 2013-02-21 08:27 - 00909632 ____A (Farbar) C:\Windows\FRST.exe
2013-02-13 16:47 - 2013-02-17 14:32 - 00000000 ___RD C:\Users\pasg411\Dropbox
2013-02-13 16:47 - 2013-02-13 16:47 - 00001047 ____A C:\Users\pasg411\Desktop\Dropbox.lnk
2013-02-13 16:43 - 2013-02-17 14:33 - 00000000 ____D C:\Users\pasg411\AppData\Roaming\Dropbox
2013-02-13 16:34 - 2013-02-13 16:34 - 19240752 ____A (Dropbox, Inc.) C:\Users\pasg411\Downloads\Dropbox 1.6.16(1).exe
2013-02-13 16:33 - 2013-02-13 16:33 - 19240752 ____A (Dropbox, Inc.) C:\Users\pasg411\Downloads\Dropbox 1.6.16.exe
2013-02-13 16:25 - 2013-02-13 16:25 - 00044032 __ASH C:\Users\pasg411\Downloads\Thumbs.db
2013-02-13 16:22 - 2013-02-13 16:22 - 00000000 ____D C:\Users\pasg411\AppData\Local\{B7A5BBDB-8808-41A7-90BD-076280218E7F}
2013-02-06 04:42 - 2013-02-06 04:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-01-29 14:55 - 2013-01-29 14:55 - 00018388 ____A C:\Users\pasg411\Documents\Phills  bills 01292013.xlsx
2013-01-29 05:34 - 2013-01-29 06:39 - 00017449 ____A C:\Users\pasg411\Documents\Phills  bills 5threv.xlsx
2013-01-27 15:38 - 2013-01-27 15:38 - 00017421 ____A C:\Users\pasg411\Documents\Phills  bills 4th rev.xlsx
2013-01-27 15:35 - 2013-01-27 15:35 - 00017368 ____A C:\Users\pasg411\Documents\Phills  bills rth rev..xlsx
2013-01-26 17:27 - 2013-01-26 17:27 - 00000000 ____D C:\Users\pasg411\AppData\Local\Macromedia
2013-01-26 13:26 - 2013-01-26 14:10 - 00017309 ____A C:\Users\pasg411\Documents\Phills  bills 3rd rev.xlsx
2013-01-24 11:10 - 2013-01-26 13:17 - 00017204 ____A C:\Users\pasg411\Documents\Phills bills_01192013revised 2nd time.xlsx


==================== One Month Modified Files and Folders =======

2013-02-21 11:51 - 2013-02-21 11:51 - 00000000 ____D C:\FRST
2013-02-21 08:27 - 2013-02-21 11:44 - 00909632 ____A (Farbar) C:\FRST.exe
2013-02-21 08:27 - 2013-02-21 08:27 - 00909632 ____A (Farbar) C:\Windows\FRST.exe
2013-02-17 17:55 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\MUI
2013-02-17 17:54 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\migwiz
2013-02-17 17:52 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\oobe
2013-02-17 17:50 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\Dism
2013-02-17 17:49 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\com
2013-02-17 17:43 - 2012-05-04 00:20 - 00000000 ____D C:\users\pasg411
2013-02-17 17:43 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2013-02-17 14:33 - 2013-02-13 16:43 - 00000000 ____D C:\Users\pasg411\AppData\Roaming\Dropbox
2013-02-17 14:32 - 2013-02-13 16:47 - 00000000 ___RD C:\Users\pasg411\Dropbox
2013-02-13 16:47 - 2013-02-13 16:47 - 00001047 ____A C:\Users\pasg411\Desktop\Dropbox.lnk
2013-02-13 16:34 - 2013-02-13 16:34 - 19240752 ____A (Dropbox, Inc.) C:\Users\pasg411\Downloads\Dropbox 1.6.16(1).exe
2013-02-13 16:33 - 2013-02-13 16:33 - 19240752 ____A (Dropbox, Inc.) C:\Users\pasg411\Downloads\Dropbox 1.6.16.exe
2013-02-13 16:25 - 2013-02-13 16:25 - 00044032 __ASH C:\Users\pasg411\Downloads\Thumbs.db
2013-02-13 16:22 - 2013-02-13 16:22 - 00000000 ____D C:\Users\pasg411\AppData\Local\{B7A5BBDB-8808-41A7-90BD-076280218E7F}
2013-02-13 07:51 - 2012-05-07 13:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-02-06 05:53 - 2013-01-08 16:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-02-06 04:42 - 2013-02-06 04:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-01-30 11:35 - 2012-06-19 14:08 - 00000000 ____D C:\Users\pasg411\AppData\Local\Microsoft Games
2013-01-29 14:55 - 2013-01-29 14:55 - 00018388 ____A C:\Users\pasg411\Documents\Phills  bills 01292013.xlsx
2013-01-29 06:39 - 2013-01-29 05:34 - 00017449 ____A C:\Users\pasg411\Documents\Phills  bills 5threv.xlsx
2013-01-27 15:38 - 2013-01-27 15:38 - 00017421 ____A C:\Users\pasg411\Documents\Phills  bills 4th rev.xlsx
2013-01-27 15:35 - 2013-01-27 15:35 - 00017368 ____A C:\Users\pasg411\Documents\Phills  bills rth rev..xlsx
2013-01-26 17:27 - 2013-01-26 17:27 - 00000000 ____D C:\Users\pasg411\AppData\Local\Macromedia
2013-01-26 17:16 - 2012-07-03 04:48 - 00000000 ____D C:\ProgramData\Adobe
2013-01-26 17:16 - 2012-06-14 12:51 - 00697864 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-01-26 17:16 - 2012-06-14 12:51 - 00074248 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-01-26 14:10 - 2013-01-26 13:26 - 00017309 ____A C:\Users\pasg411\Documents\Phills  bills 3rd rev.xlsx
2013-01-26 13:17 - 2013-01-24 11:10 - 00017204 ____A C:\Users\pasg411\Documents\Phills bills_01192013revised 2nd time.xlsx

==================== Known DLLs (Whitelisted) =================

C:\Windows\System32\IERTUTIL.dll IS MISSING <==== ATTENTION!
C:\Windows\SysWOW64\IERTUTIL.dll IS MISSING <==== ATTENTION!
C:\Windows\System32\URLMON.dll IS MISSING <==== ATTENTION!
C:\Windows\SysWOW64\URLMON.dll IS MISSING <==== ATTENTION!
C:\Windows\System32\WININET.dll IS MISSING <==== ATTENTION!
C:\Windows\SysWOW64\WININET.dll IS MISSING <==== ATTENTION!

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 10%
Total physical RAM: 6049.14 MB
Available physical RAM: 5385.83 MB
Total Pagefile: 6047.29 MB
Available Pagefile: 5374.32 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

==================== Partitions =============================

1 Drive c: (OS) (Fixed) (Total:238.47 GB) (Free:183.36 GB) NTFS ==>[System with boot components (obtained from reading drive)]
2 Drive d: (DATA) (Fixed) (Total:332.7 GB) (Free:332.6 GB) NTFS
4 Drive f: (ADATA UFD) (Removable) (Total:60.42 GB) (Free:47.36 GB) FAT32
5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

  Disk ###  Status         Size     Free     Dyn  Gpt
  --------  -------------  -------  -------  ---  ---
  Disk 0    Online          596 GB  1024 KB        
  Disk 1    Online           60 GB      0 B        

Partitions of Disk 0:
===============

Disk ID: AA9693FE

  Partition ###  Type              Size     Offset
  -------------  ----------------  -------  -------
  Partition 1    Primary             25 GB  1024 KB
  Partition 2    Primary            238 GB    25 GB
  Partition 0    Extended           332 GB   263 GB
  Partition 3    Logical            332 GB   263 GB

==================================================================================

Disk: 0
Partition 1
Type  : 1C
Hidden: Yes
Active: No

There is no volume associated with this partition.

=========================================================

Disk: 0
Partition 2
Type  : 07
Hidden: No
Active: Yes

  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 1     C   OS           NTFS   Partition    238 GB  Healthy           

=========================================================

Disk: 0
Partition 3
Type  : 07
Hidden: No
Active: No

  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 2     D   DATA         NTFS   Partition    332 GB  Healthy           

=========================================================

Partitions of Disk 1:
===============

Disk ID: 04DD5721

  Partition ###  Type              Size     Offset
  -------------  ----------------  -------  -------
  Partition 1    Primary             60 GB    31 KB

==================================================================================

Disk: 1
Partition 1
Type  : 0C
Hidden: No
Active: No

  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
* Volume 3     F   ADATA UFD    FAT32  Removable     60 GB  Healthy           

=========================================================

Last Boot: 2013-01-29 07:21

==================== End Of Log =============================

Attached Files

  • Attached File  FRST.txt   12.54KB   1 downloads

Edited by jntkwx, 22 February 2013 - 02:35 PM.
Including log in post (easier to read)


#5 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:04:42 AM

Posted 22 February 2013 - 02:34 PM

Jim,

 

I'm not seeing any malware in that log. What exactly happens when you try to start your computer normally?


Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#6 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 22 February 2013 - 02:39 PM

computer starts up and goes into repair mode,  which fails...   possibly because of the epson driver you see in the run cmd at startup?



#7 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:04:42 AM

Posted 22 February 2013 - 04:50 PM

I don't think that's what's causing the problem.

Rerun FRST
Searching for a file:
Boot back into System Recovery Options, as we've done previously.

Type the following in the edit box after "Search:".
IERTUTIL.dll;URLMON.dll;WININET.dll
Note: The file names should be separated by semicolon (;)

Click Search button and post the log (Search.txt) it makes to your reply.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#8 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 22 February 2013 - 11:56 PM

see attached

Attached Files



#9 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 23 February 2013 - 12:05 AM

left the t out of ier"t"util.dll,  search results attached for that dll

Attached Files



#10 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:04:42 AM

Posted 23 February 2013 - 09:07 AM

Can you boot successfully into Safe Mode? http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/#windows7

(Also, in the future, please copy and paste any logs asked for directly into a post rather than attaching them - they're easier to read that way.)
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#11 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 23 February 2013 - 01:21 PM

no,  will not boot into any of the safe modes.   the laptop goes into startup repair mode.   the drive was taken out of the unit and I ran a chkdsk\repair on it.  no issues found.


Edited by tookerj, 23 February 2013 - 01:26 PM.


#12 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:04:42 AM

Posted 23 February 2013 - 02:48 PM

Okay, since I don't see any malware in the logs, I recommend you post in the Windows 7 forum, as I don't think this problem is malware-related.


Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#13 tookerj

tookerj
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ
  • Local time:03:42 AM

Posted 23 February 2013 - 02:57 PM

Thanks Jason






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users