I have just signed up for a Bleeping Computer account. My wife's computer had a strange problem yesterday, as follows. When turning on the computer for the first time in the day, she reported that win 7 opened directly to a black screen with a cursor, and a large print message about viruses and 3 choice; she does not remember exactly what the choices were but one was to contact something for help and a second option was to reboot. She cannot remember any other details and I was not at home. She chose to use the cursor to reboot, and (to my surprise) this worked. The computer shut down promptly and then rebooted normally. It worked for the rest of the day without any problems.
When I got home, I checked it carefully and could not find anything abnormal. Her antivurus program showed no quarantined files r other problems. I did a deep scan with the antiviurs program and a complete scan with malware bytes; neither program identified any bad files or other issues.
the next morning, the computer started up normally and appears to be working as usual. I checked the event viewer and found a string of error messages at around the time she first saw the black screen.. All of these events appeared to have the same message:
Error CAPI2 4101
Failed auto update retrieval of third party root certificate from:
<http://ctdl.windowsupdate.com/msdownload/update/v3/static/trusted/en/D69B561148FO1C77C54578C10926DF58856976AD.crt> with error: The specified server cannot perform the requested operation.
I was unable to connect to the http site, so I have no idea what microsoft might have told me I know that you have a comprehensive protocol for diagnosing this kind of issue but I have not done all of the steps in your protocol inasmuch as her computer was working well up to yesterday and has continued to work as usual once she rebooted it.
If it was not for the funny message she reported on the black screen, which really made me think of some kind of virus, bot etc, I am writing to ask if you have any thoughts about what might have caused this problem, so that if it occurs again, I can deal with it more thoroughly and submit the information you need for a thorough and proper investigation.
Thanks for any suggestions you might have.