Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Only Boots in Safe mode...cannot connect to Internet


  • Please log in to reply
4 replies to this topic

#1 carolhuberjones

carolhuberjones

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Georgia
  • Local time:07:29 AM

Posted 18 February 2015 - 03:31 PM

When booting up normally it looks like it is going to boot....you see the Windows icon and then the screen goes black. I went to your tutorials and found out how to boot up in safe mode so that is where I am at right now. I was able to do a scan on Malwarebytes which was on the computer.....it found 7 objects which I could only Quarantine. I tried to access the internet using Google Chrome and said I was not able to connect. Then I clicked the IE icon and the page that came up said I was not able to connect and I happened to notice the address at the top was....binkland.com. I have no idea what that is. I don't know if I have viruses or what is going on. Could someone please help me?  Thank you!

 

ETA:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2/18/2015
Scan Time: 2:52:19 PM
Logfile: 7 unwanted objects.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.10.11.09
Rootkit Database: v2014.10.08.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Office Depot

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 287353
Time Elapsed: 11 min, 42 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 6
PUP.Optional.Conduit.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\klibnahbojhkanfgaglnlalfkgpcppfi, , [e491e42f0e6e1b1b8b45f81fed16a65a],
PUP.Optional.FreeCauseTB.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FREECAUSE\Toolbars, , [aacba370d0acb77fc3b1e65c0300926e],
PUP.Optional.Conduit.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\klibnahbojhkanfgaglnlalfkgpcppfi, , [b2c31102c0bc4de95081c15646bdfe02],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [096c7a9993e9f343a54ad476db28936d],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [fa7b9e75047839fd92a93928f60e6799],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [6015c64da4d83600929b3bff748f718f],

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3478319704-1755934793-1353888526-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A1C2W2Z1N1L1D0Q1N1O1D1G, , [fa7b9e75047839fd92a93928f60e6799]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)


Edited by carolhuberjones, 18 February 2015 - 03:38 PM.


BC AdBot (Login to Remove)

 


#2 mauguilar

mauguilar

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA, CA
  • Local time:03:29 AM

Posted 18 February 2015 - 04:31 PM

Within Safe mode try to do a windows system restore



#3 Bogey007

Bogey007

  • Banned Spammer
  • 1 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 19 February 2015 - 01:18 AM

ok I just fixed this issue in two different computers download autoruns from here: https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

after starting autoruns look for any instance of binkland and take the checkmark off exit program and restart windows

 

other info: if you boot normally you will see a black screen but can still see your mouse arrow, hit CTRL Shift ESC to bring up task manager end the process of explorer

then select file> New Task (Run...) type in explorer hit enter and you will see that now your windows desktop will show up as normal, but if you reboot you will still have the issue until you follow the above steps. 



#4 carolhuberjones

carolhuberjones
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Georgia
  • Local time:07:29 AM

Posted 20 February 2015 - 03:54 PM

Ok I did the steps for the windows system restore in Safe mode that Mauguilar said to do. Then I downloaded the autoruns program using a USB and unchecked everywhere I saw binkland and then restarted windows just like you said. My computer is still loading in safe mode and even when I tell it to open normally using F8 key it still opens in safe mode. I'm not able to even do the "other info" section in your post because I cannot get out of safe mode. I did an AVG AntiVirus scan and looks like files are locked and showing that they can't be scanned. I noticed many Crypto\RSA and now wonder if I have a bad virus. Not sure what I need to do next. Thank you for your help.


Edited by carolhuberjones, 20 February 2015 - 11:26 PM.


#5 Blueheel

Blueheel

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Central Illinois
  • Local time:06:29 AM

Posted 15 July 2015 - 02:08 PM

so what happened?  I had this little stinker and I found that running Adwar was supposed to be the answer so i came to bleeping computor last night and snuck in under that darn binklands skirts while it was busy trying to destroy parts of my computor and I registored on my Tower and zapped it there first ker pow take that bink monster then i switched to the lap top and put in my log in info but it looked suspicious to the fellas at Bleeping computor so I had to fill out the whole address thingy again and then we biff  Powed my laptop. and we knocked the begezus right out of old binkland again, only today I keep seeing her peeking out of emails  that keep showing out of a weird yahoo toolbar that is on the bottom of my screen  I dont think it should be there and I came back here. I reckon we should go gunnin for it again.  Just was wonderun how you ended up with yours? Blueheel






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users