Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Window 7 black blanc screen with blinking cursor


  • This topic is locked This topic is locked
8 replies to this topic

#1 Gorimaa

Gorimaa

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 26 May 2015 - 11:39 PM

Hello crew,
 
Here is my problem, after few BSOD, my computer cannot boot. I directly end up to black blank screen with blinking cursor. I cannot boot with F8 solution.... By pressing TAB on start i se that after HDD check there is not even a memory simple check anymore. With installation disk, even with no restore solution at all, i have been able to reach command prompt and runned FRST64, thanks to a previous topic, here is the result:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-05-2015
Ran by SYSTEM on MININT-BM73DIU on 27-05-2015 11:26:12
Running from f:\
Platform: WIN_7 Service Pack 1 (X64) OS Language: English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
Attention: System hive is missing.
 
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
ATTENTION: Software hive is missing.
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
 
==================== Known DLLs (Whitelisted) ================
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\wininit.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\wininit.exe IS MISSING <==== ATTENTION!.
C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.
C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!.
C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION!.
 
==================== Restore Points =========================
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 8%
Total physical RAM: 7891.98 MB
Available physical RAM: 7187.15 MB
Total Pagefile: 7890.18 MB
Available Pagefile: 7183.3 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB
 
==================== Drives ================================
 
Drive d: (ReSaves 2 + Aomei) (Fixed) (Total:1397.26 GB) (Free:346.49 GB) NTFS
Drive e: (GRMCULXFRER_EN_DVD) (CDROM) (Total:3.09 GB) (Free:0 GB) UDF
Drive f: (DUB) (Removable) (Total:1.86 GB) (Free:0.75 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Saves) (Fixed) (Total:2794.39 GB) (Free:383.01 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: 90C82F80)
 
Partition: GPT Partition Type.
 
========================================================
Disk: 1 (Size: 1397.3 GB) (Disk ID: A42B2DAC)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
 
========================================================
Disk: 2 (Size: 1.9 GB) (Disk ID: 003CB988)
Partition 1: (Active) - (Size=1.9 GB) - (Type=06)
 
==================== End of log ============================
 
 
Look like everything is missing and screwed up, what can i do?
 
thank you
 
gorimaa

Edited by hamluis, 27 May 2015 - 06:04 AM.
Moved from Win 7 to Malware Removal Logs - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 Gorimaa

Gorimaa
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 26 May 2015 - 11:52 PM

Hello Crew,
 
Look like i had just a not good connected sata cable, let me rescan again
 
cheers

Ok i finally be able to boot, but still weird things happeen, i am checking my ram now, here is the reports of FRST64, could you tell me if anymalware or problem is identified?

Attached Files


Edited by hamluis, 27 May 2015 - 06:04 AM.


#3 nasdaq

nasdaq

  • Malware Response Team
  • 38,228 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:31 PM

Posted 28 May 2015 - 08:02 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
 
start

CreateRestorePoint:
CloseProcesses:

Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
CHR Extension: (Avast Online Security) - C:\Users\gorimaa kong\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-07]
U3 akxvrtbn; C:\Windows\System32\Drivers\akxvrtbn.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\Windows\System32\Drivers\akxvrtbn.sys
AlternateDataStreams: C:\ProgramData\Microsoft:givVuKhy5BVrEPrl8FVeSlbmlT4e
AlternateDataStreams: C:\ProgramData\Microsoft:hOFfiJ5EnfFUy6LiYwdijJe
AlternateDataStreams: C:\ProgramData\Microsoft:luWUdLGU1YyV8ZdKc
AlternateDataStreams: C:\ProgramData\Microsoft:NP8rqRQkXNxCzCMsw0aPXtOr9edg
AlternateDataStreams: C:\ProgramData\Microsoft:tNILE5Cx76ZdAeis5
AlternateDataStreams: C:\Users\gorimaa kong\AppData\Local\1c3AJoEoxWb5M:bu1pXVG2F22fkUVA0gK2DX
AlternateDataStreams: C:\Users\gorimaa kong\AppData\Local\Temp:fRJfiwQAitCdxvAmc
AlternateDataStreams: C:\Users\gorimaa kong\AppData\Local\Temp:uRgNkvC7194EllxoJfJI84Q1

End
Save the files as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

How is the computer running now?

#4 Gorimaa

Gorimaa
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 28 May 2015 - 09:43 AM

Hi Nasdaq!

 

thank you so much for helping me, since two days  i am going really crazy.

 

So i end up to manage to start my computer but with a lot of problem , see the attached pictures.

 

The whocrashed picture will show you from which BSOD everything started, it is the fisrt who occured in May after nearly one month with no problem (i change my system hdd at this time)

 

So yesterday after been able to boot, everything started to mees up with few BSOD like the picture, but most of all some really big problems after the logon page, also with strange behaviour from my hdd red led , staying lighten with just stop every 2 second for few milliseconde adn again.

 

I suspect ram problem and i am trying different config with my 2x4 gigs ballistics sport, but maybe also a faulty power supply or motherboard problem too,dont have a clue in fact... Do you think i must apply first what you preconised me above, or regards to my elements, switch to something else?

 

best regards

 

gorimaa

Attached Files



#5 nasdaq

nasdaq

  • Malware Response Team
  • 38,228 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:31 PM

Posted 28 May 2015 - 12:25 PM

If at all possible run the suggested fix.
Try in normal mode, it that fails try the Save mode.
Keep in mind that the fixlist.txt file you will create must be located in the safe folder as the Farbar program.

If at all possible placed them in Desktop of the C:\ drive.

If that faiils Open your Tasks Manager (CTRL+ALT+DEL) select the Services tab.

Stop this service in bold.

U3 akxvrtbn; C:\Windows\System32\Drivers\akxvrtbn.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)

Exit.

Delete this file in bold.
C:\Windows\System32\Drivers\akxvrtbn.sys

Restart the computer normally.

If any errors please post the exact message for my review.

#6 Gorimaa

Gorimaa
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 28 May 2015 - 01:43 PM

Hello,

 

so i ran the FRST in safe mode, but nothing change... i made another report afterward in attached file. i ran also combofix and few other.

 

The strange thing is that i can run safe mode with no problem as long as i dont select safe mode with network, if i do so i end up with the same problem than in normal mode: super long time after input my password in logon screen, with the same hdd led blinking tempo style (while no hear sound from hdd tho) please look at small video i attached.. Any clue?

 

the only difference in that in the end and after waiting 10 mn, i can run safe mode with network, even every 2 time having error message (memory stuff, see attached picture too), but in normal mode i end up with a lot of slowy computer and error messages, with strange again, tiny wall and avast firstly concerned by problem, any clue again? also most of the time it end up in normal mode with the BSOD i posted the picture before error code 0x0000007E.

 

thanks for your time and your precious help, i hope we will figure out.

 

gorimaa

 

ps: my ram seems fine, at least i try to put only one barrette in each and every slots then both together in different slot, still repecting dual channel set up, and still the same.

 

Could it be a power supply problem? 

 

best regards

Attached Files



#7 Gorimaa

Gorimaa
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  

Posted 28 May 2015 - 09:32 PM

Hi Nasdaq,

 

Look like i finally find the problem, i was tweaking the WD data life guard software under safe mode (which was laways runiing smoothly as long as i didnt select it with network support), and just figure out that on top of the smart pass , there was quick and deep test, please see attached file .... a caviar black i just bought one month ago...

 

Do you think this is the real problem? why everthing ok under safe mode? when did the extended test, didnt see more than 4 or 5 bad sector, not sure tho, i felt asleep through the 4 hours test, but quick test always fail on my 2 wd hdd, only the 1.5to non sstem green caviar is able to fix bad sector, but not able on the black sstem 1to one...

 

Ans what the relationship with the network support under safe mode, and other problems that occured in normal mode?

 

in the wait for your reply

 

best regards

 

gorimaa

Attached Files



#8 nasdaq

nasdaq

  • Malware Response Team
  • 38,228 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:31 PM

Posted 29 May 2015 - 07:21 AM

Navigate to this page.
http://secunia.com/vulnerability_scanning/personal/

Download and install the Secunia PSI.

Run the application and updates all the programs/drivers that needs to be updated.

Restart the computer after each update.

===
p.s.

Secunia will start looking for new updates every time you boot the system.
This is an overkill. When all is well you can remove it using the Add/Remove programs applet.

If this fails to solve your problem I suggest you start a new topic in the Windows 7 forrum

http://www.bleepingcomputer.com/forums/f/167/windows-7/

The issue is not caused by malware and not my forte.

I will leave this topic open for 5 days if you need to return please do.

#9 nasdaq

nasdaq

  • Malware Response Team
  • 38,228 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:31 PM

Posted 04 June 2015 - 08:21 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users