Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Issues logging into Windows.

11 May 2013   #11

Windows 7 Home
 
 

Do you know how long the Prescan is supposed to run? its been checking the processes on rundll32.exe for quit a while.

My System SpecsSystem Spec
.

11 May 2013   #12

Windows 7 Home Premium
 
 

GilV37,

If RogueKiller has not finished, just cancel it out, and let's press on...

BTW, this might be the largest fixlist ever processed by this program.
There are still toolbars and other "stuff", as well as files that may be malware. However, we'll handle those after we get done with this run.

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy/paste all the text inside the quote box to Notepad (Do not copy the word 'Quote')

In Notepad, click File (at the top), and select: Save as...
In the Save as prompt, name the file fixlist.txt, and save it to the Desktop <<---Important!!

Quote:
start
HKCU\...\Run: [Gogeecni] "C:\Users\Ferreira Family\AppData\Roaming\Mufin\aluce.exe" [208896 2013-01-02] ()
HKCU\...\Run: [Dehyquu] "C:\Users\Ferreira Family\AppData\Roaming\Yrvihu\yccif.exe" [208896 2013-02-08] ()
HKCU\...\Run: [Internet Security] C:\ProgramData\amsecure.exe [830976 2013-05-07] (Apple Computer, Inc.)
HKCR\...409d6c4515e9\InprocServer32: [Default-shell32] C:\Users\FERREI~1\AppData\Local\Temp\sibwxwx\sqonbam\wow64.dll ATTENTION! ====> ZeroAccess
HKLM-x32\...\Run: [] [x]
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\soxyme.exe ()
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\acaxku.exe (DT Soft Ltd)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\soxyme.exe ()
URLSearchHook: (No Name) - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - No File
URLSearchHook: (No Name) - {f4c28532-b9d0-4950-a2df-e83f9929242b} - No File
2013-05-07 17:31 - 2013-05-07 17:31 - 00000645 ____A C:\Users\Public\Desktop\Internet Security 2013.lnk
ZeroAccess: C:\$Recycle.Bin\S-1-5-21-2451089773-2969554723-1024505751-1000\$71d7cbe246470cbaec705e091023f4e2
ZeroAccess: C:\$Recycle.Bin\S-1-5-18\$71d7cbe246470cbaec705e091023f4e2
C:\Windows\svchost.exe
ATTENTION ====> Check for partition/boot infection.C:\ProgramData\amsecure.exe
C:\ProgramData\y86I4d8e.exe
C:\ProgramData\36m6K07.dat
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At11.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At13.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At15.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At17.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At19.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At21.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At23.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At25.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At27.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At29.job
C:\Windows\Tasks\At3.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At31.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At33.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At35.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At37.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At39.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At41.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At43.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At45.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At47.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At5.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At7.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At9.job
TDL4: custom:26000022 <===== ATTENTION!
end
NOTE. It is important that FRST64 and the fixlist.txt are in the same location (Desktop) or this will not work.

Now, run FRST64 and press the Fix button, just once, and wait.

When done, the tool makes a log on the Desktop: Fixlog.txt
Please post Fixlog.txt in your reply.

Try to boot the computer into normal Windows and post back on what happens.


NOTICE: This script was written specifically for GilV37, for use on this particular computer.
Running this on another computer may cause damage to the Operating System!!
My System SpecsSystem Spec
11 May 2013   #13

Windows 7 Home
 
 

Was up and running in windows for about 30 seconds, and got the bsod again. I took a snapshot of it and going to upload the photo. also attached is the fixlog.txt file.


Attached Images
 
Attached Files
File Type: txt Fixlog.txt (4.1 KB, 5 views)
My System SpecsSystem Spec
.


11 May 2013   #14

Windows 7 Home
 
 

I think we are ok now. I goggled that other error and it said to uninstall the video drive and reinstall it. Did that and the PC has been stable now for about 10 mins.
My System SpecsSystem Spec
11 May 2013   #15

Windows 7 Home Premium
 
 

Good job, GilV37!!

Please try running RogueKiller now. Presuming you are in normal Windows.

It should not hang.

There is more to do here, but, let's go one step at a time. We do not want to return to another BSOD.

Will be back in about 30 minutes.
My System SpecsSystem Spec
11 May 2013   #16

Windows 7 Home
 
 

Ok, I Ran it, and I have attached the report file.


Attached Files
File Type: txt RKreport[1]_S_05112013_02d1949.txt (6.8 KB, 6 views)
My System SpecsSystem Spec
11 May 2013   #17

Windows 7 Home Premium
 
 

Let's press on with RogueKiller...

•Please quit all programs
•Right-click the RogueKiller file and select 'Run as Administrator'
•Wait until the Prescan finishes
•Press: Scan
•Once the scan is done, press the [Delete] button.
Please post the new RKreport (Mode: Delete) in your reply.
(It is created on the Desktop.)
My System SpecsSystem Spec
11 May 2013   #18

Windows 7 Home
 
 

Here is the newer file.


Attached Files
File Type: txt RKreport[2]_S_05112013_02d2003.txt (6.5 KB, 5 views)
My System SpecsSystem Spec
11 May 2013   #19

Windows 7 Home
 
 

Sorry I forgot the other file.


Attached Files
File Type: txt RKreport[3]_D_05112013_02d2006.txt (7.8 KB, 4 views)
My System SpecsSystem Spec
11 May 2013   #20

Windows 7 Home Premium
 
 

Presume you are still in Windows, if not, let me know.

Please go to the TDSSKiller Download
Select the .exe version
Double-click on TDSSKiller.exe to run the program.



When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


•If a suspicious object is detected by this program, the default action is Skip. Leave this action as is, and click on: Continue
•If malicious objects are found, they show in the Scan results.
Ensure Cure (the default action) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)



When done, the tool creates a log on the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_1.05.2013_15.31.43_log.txt



Please attach the TDSSKiller log in your reply.



Now, let's see if there are services damaged.


Please press on with Downloading Farbar Service Scanner

Save to the Desktop.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
    • Windows Update
    • Windows Defender
  • Press: Scan
  • FSS creates a log, FSS.txt, on the Desktop.
Please provide the FSS.txt in your reply.
My System SpecsSystem Spec
Reply

 Issues logging into Windows.





Thread Tools



Similar help and support threads for2: Issues logging into Windows.
Thread Forum
system hangs after logging off and logging back! Performance & Maintenance
System logging off after idling issues BSOD Help and Support
Windows keeps logging me off! BSOD Help and Support
Logging On to windows Installation & Setup
See what windows does at startup and while logging off General Discussion
Windows 7 RC not logging in General Discussion
Windows 7 - Logging Off when try to log in to a Domain Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:58 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33