Hello, I am back again... not sure if I should continue this thread or start a new one....
I am no longer getting BSOD, however, everytime I try to start computer it immediately goes into start up repair... once that has finished running... I can boot.. when I sign on.. there are 3 error messages that pop up...
There was a problem starting
c:\users\lori\appdata\roaming\qusgp.dll
C:\users\lori\appdata\roamingfxaer.dll
and
Moret.dll
Thank in advance!
All say access is denied
Try running the system file checker again, those seem like system files that may have become corrupted for some reason:
SFC.EXE /SCANNOW
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the search box, right click on the cmd.exe and select "Run as adminstrator"
In the black window that opens, type "SFC.EXE /SCANNOW" (without the quotes) and press Enter.
Let the program run and post back what it says when it's done.
ok,
I ran the command as administrator... it only ran the verification phase... (not sure if that is normal) and came back with no integrity violations...
The path c:\users\<username>\appdata\roaming\ is for the third party programs, and so beyond the scope of SFC. Those must be caused by deletion or otherwise damage of some third party program that I am not sure what it is.
To recover the start up issue, follow it:
Troubleshooting Windows 7 Failure to Start
Or, run Startup Repair with either from the installer disc or from the repair disc, for three separate times, with restarts after every single run.
Startup Repair: Run three separate times.
The automated Startup repair is not enough all the times.
Hope it will recover the boot issue. Report us if the boot issue is fixed or not. After that we will concentrate on the other issue.
EDIT:
If startup is repaired,
- Click on the Start button
- Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window with the "general" tab selected.
- Click the "startup" tab. Click "Disable all" > Apply > OK.
- Click on "services" tab. Check the "Hide all Microsoft Services"; Click "Disable all" > Apply > OK
Then try to boot again normally. Is the error still popping up?
It's unusual to see .dlls in the appdata folders. And the files are not part of Windows. Either a software application install is corrupt or these may be due to malware. A pic of your c:\users\lori\appdata\roaming folders might help. I don't recognize any of the dll names and they don't show up a system file lookup database.
Ok, I am unsure which process to do first...
I will be happy do to any and all, just specify order.
Should I post the file up for you all...
Also, these roaming errors do not appear if I log on as administrator.... Only when I log on as myself..,
Thank you all!!
Hello lshanks07 and welcome to the forums
I would highly advise against running Combofix at this stage, it is an incredibly powerful tool which no one in this thread, including me, has been trained to use. Besides, there is no indication of an infection present that would justify its use.
To speed things up a little, and to see whether a security analyst needs to remove any malware, could you run OTL for me please:
OTL
- Download OTL to your Desktop
- Double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Click Run Scan. Do not change any settings unless otherwise told to do so. The scan won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please attach these files to your next post.
Tom
Quote