Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 10 - its time to reach out for hel


  • Please log in to reply
5 replies to this topic

#1 AquarianJD

AquarianJD

  • Members
  • 4 posts
  • ONLINE
  •  
  • Local time:01:15 AM

Posted 11 April 2018 - 05:20 AM

Hi all, 

 

I am having a number of issues with an ACER aspire one s1003 that came with a preinstalled version of windows 10.

 

Symptoms of the problem include:

 

1. Random icons appear in the start app list, desktop and tile list that I cannot uninstall and tend to be weblinks upwards in size of 100MB to MSN, Amazon or other type sites (they are not links to this site)

2.The time is constantly disconnecting from the timeweb server - randomly jumping to the past or near future. When time is corrected app icons flicker wherever they are displayed

3. Wifi and networking devices disappear completely at random reappearing at start up. Safe mode does not recognise any network adapters when started in networking mode

4. Error messages indicating a failure to update appear for my antivirus and malware scanners (Defender and previously kapersky and Malwarebytes). The applications themselves do not indicate a problem with updates and successfully update (very quickly) - which generates another failure event. The scans are completed very quickly. 

5. Drivers are all over the place - Bluetooth seems to be constantly migrating devices and and requiring further installation even though no Bluetooth devices are attached to the device (ie. Device BTH\MS_BTHBRB\6&10b60113&0&1 requires further installation."

6. My administrative profile does not have access to change a number of basic settings unless in safe mode

7. Cmd prompt never elevates to administrative level - but displays that it is so. 

8. App lists show no installed apps. 

9. Popups are relentless when googling - often covering information without the ability to close on known sites. 

10. Data use is off the scale - idle with no apps running wireshark can indicate up to 100MB being sent in a 5 minute period with the IPs returning only generic UCP and TCP traffic

and on and on it goes. 

 

Bizarrely - items 2,3,9,10 also occur on my iPhone - and on my android with the addition of 4 and 8 but I need to focus on the laptop for now.

 

What I have done to date:

1. Scanned with Antivirus (Kaspersky first clean install - then Avast - Now defender). Same update errors in event viewer and PFRO.txt - scans rapid (under a minute) if in full scan mode and all return no issues found and database up to date

2. Ran windows offline scan - whilst running indicated 9 issues found. End result reports no issues found. Same with safety scanner

3. Reset the PC to the factory settings using the UI and recovery interface. Operating system runs smoothly until rebooted. Then all hell breaks loose.

3. Started fresh with complete data wipe using the UI and clean install in the recovery interface. Operating system runs smoothly until rebooted. Then all hell breaks loose. 

4. Tried to do a clean install of windows - this particular laptop is very particular about the USB it will boot from. Managed to boot from USB only for the file to be unrecognised.  

5. Returned the PC to the ACER to have a clean install of the image. Turns out they took two weeks to do what I had done in step 2. Back to the drawing board. 

 

Hopefully I don't sound like a madman - can someone help me out?


Edited by britechguy, 11 April 2018 - 08:00 AM.
Moved from Win10 to AII, as this has all the hallmarks of an infection of some kind.


BC AdBot (Login to Remove)

 


#2 AquarianJD

AquarianJD
  • Topic Starter

  • Members
  • 4 posts
  • ONLINE
  •  
  • Local time:01:15 AM

Posted 13 April 2018 - 07:17 AM

No takers?



#3 dmccoyks

dmccoyks

  • Members
  • 168 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:15 PM

Posted 16 April 2018 - 12:18 PM

Wow what a mess. I will see what I can do to try and help.
 
Are you know starting from Step 5 or ?

Please follow the steps below to help troubleshoot your system. Let me know if you have any questions.

Step 1:
Speccy
Download Speccy to your desktop

1. File > Save Snapshot. This will create a file called [hostname].speccy
2. File > Publish Snapshot. This saves your snapshot to their servers
3 Copy and Paste the link to your next Reply

Step 2:
Click on Start menu
Type command to start searching
Right click on command prompt in list and select Run Administrator
Copy and Paste each the commands below into the command prompt and press Enter key

1. sfc /scannow (best to run 2-3 times, rebooting after each time)

(Windows 8 or higher)
2. dism /online /cleanup-image /restorehealth

When these have completed:
Right click on the top bar command window
Left click on Edit then Select All
Right click on the top bar again
Left click on edit then copy
paste into your reply

If any Errors are found with sfc /scannow then:
Type the following command, and then press ENTER:
findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"
Upload sfcdetails.txt from your desktop

Step 3:
Download Process Explorer to your desktop

1. Right Click on the procexp64.exe or procexp.exe and Select Run As Administrator
3. In the View menu click on Select Columns
4. Check Verified Signer, Virus Total and Click OK
5. Select Options Menu and Check Verify Image Signatures, VirusTotal.com > Check Virustotal.com
6. Double Click on the CPU Column to sort by highest CPU usage.
7. (Highest CPU Processes should be at the top once sorted properly)
8. Wait approximately a minute
9. Select Save or Save As from the File menu
10. Save SystemIdleProcess.txt to Desktop
11.Upload or Paste to next reply

Step 4:
Download Event Viewer Tool to your desktop

1. Right click on Vew.exe program and select Run as Administrator
2.. Under Select log to query
3. select System
4. Under Select type to list
Select:
* Error
* Warning
Choose the Number of events as follows:
Click on number of events
Type 20 in the box (1 to 20)
Click the Run button (Notepad will open the log)
Upload files to next reply
Rename to SystemLog.txt or it will be overwritten

Run the above steps again Except at step 3.
Select Application
Rename log file to ApplicationLog.txt
Upload or Paste to next reply

Next Steps if Needed

#4 AquarianJD

AquarianJD
  • Topic Starter

  • Members
  • 4 posts
  • ONLINE
  •  
  • Local time:01:15 AM

Posted Today, 08:20 AM

my apologies for the delay- thank you for getting back to me! I have been traveling and its been a little hectic. I will be getting into these instructions toight and post the results in about an hour

 

Are you know starting from Step 5 or ?

 

 

well not so much starting from but have resigned myself to the default position of 5 and no better off than when i attempted to fix it lol

 

And I'm having a hell of time downloading speccy. So far Winpurifier abd a Trojan have come in its place (see screenshot on Trojan) This is from hitting the green download button - save, save target as. File gets scooped up as atrojan or installs this winpurifier without propmping. 

 

Trojandetails-defenderautomaticallydeletesthisfile

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aWin32%2fFuery.A!cl&threatid=2147718513

 

winpurifiers

www.winpurifier.com/1089/?utm_source=1089hp&utm_campaign=1089hp_us&utm_medium=1089_new

 

no speccy and computer is lagging like crazy


Edited by AquarianJD, Today, 08:57 AM.


#5 dmccoyks

dmccoyks

  • Members
  • 168 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:15 PM

Posted Today, 11:15 AM

It sounds like you may still have some malicious stuff in your computer. We need to make sure all of that is cleaned up first before attempting repairs. I can help but I am limited to some of the advanced tools I can use. If you prefer you can post to the malware forum. I am confused though if you are starting from Step 5 below you should have a fresh clean factory image? If this is incorrect let me know exactly where you are starting from and if you would prefer to start fresh with a clean install and work from there which is what I recommend or how you want to continue.

 

5. Returned the PC to the ACER to have a clean install of the image. Turns out they took two weeks to do what I had done in step 2. Back to the drawing board.
 

 

And I'm having a hell of time downloading speccy. So far Winpurifier abd a Trojan have come in its place (see screenshot on Trojan) This is from hitting the green download button - save, save target as. File gets scooped up as atrojan or installs this winpurifier without propmping. 

I just tested the filehippo link and have used it as well as many others for a long time without issue. Here is the direct link to the providers download. Although I recommend you download it from another computer since you are having issues.

https://www.ccleaner.com/speccy/download/portable



#6 AquarianJD

AquarianJD
  • Topic Starter

  • Members
  • 4 posts
  • ONLINE
  •  
  • Local time:01:15 AM

Posted Today, 01:15 PM

Success with speccy at last

 

http://speccy.piriform.com/results/WmgAOckgdTsAGRZbEBCtxY0






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users