Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus?


  • Please log in to reply
No replies to this topic

#1 mkellwhy

mkellwhy

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:12:28 AM

Posted 18 September 2016 - 05:18 PM

Mod Edit:  Split from http://www.bleepingcomputer.com/forums/t/623347/virus-recurrs-in-autochkexe-and-cannot-be-removed - Hamluis.

 

Did you ever receive a response from Lojack that resolved your problem?

 

I'm pretty certain I have the same issue-the hash of the autochk changes, autochk will not run at boot, and  it is not repairable with SFC /runnow and the CBS log says the replacement file is also corrupted. This error is stopping me from being able to make a clone image of my hard drive.

 

[l:22{11}]"autochk.exe" :

  Found: {l:32 b:3FtqoSZtmkmAnMMyDyGyn/y7VreLpNdrFK2/y9fpL8M=} Expected: {l:32 b:e8hHzmwtKcM08NFgC7veOTP/Rfa+5RhvRC5icKP57E4=}

2016-09-17 23:37:28, Info                  CSI    000003c2 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe do not match actual file [l:22{11}]"autochk.exe" :

  Found: {l:32 b:3FtqoSZtmkmAnMMyDyGyn/y7VreLpNdrFK2/y9fpL8M=} Expected: {l:32 b:e8hHzmwtKcM08NFgC7veOTP/Rfa+5RhvRC5icKP57E4=}

2016-09-17 23:37:28, Info                  CSI    000003c3 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"autochk.exe"; source file in store is also corrupted

 

One difference in circumstances is that Lojack was installed on my laptop when I worked for a company before I retired and I still have the installation disc.

I just found this thread today & will be contacting Lojack tomorrow, but it would be helpful to see how your situation resolved.


Edited by hamluis, 19 September 2016 - 08:37 AM.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users