Windows freezes after log in- no error messages/codes

[VistaKing]

Missing the AdwCleaner log

 

[Willowisatree]

That adware cleaner is just asking me to uninstall my avast. I don't want to uninstall avast as I have already installed trend micro. When I turn on my computer and enter normal mode, I am now receiving a pop up box. It says

Run dll (at top)

There was a problem starting c:\programdata\Malwarebytes\Malwarebytes'Anti-malware]cleanup.dll

The specified module could not be found.


....I uninstalled Malwarebytes and restarted but still received the same message. And it isn't on my start up list. At this point, do you know what might be causing this freezing issue?

 

[VistaKing]

You don't want to uninstall Avast and you don't want to uninstall Trend Micro ? On AdwCleaner click on the Search button and upload the log the log will have R1 in the Name .

Did you try to uncheck the items in the startup tab inside msconfig ?

 

[Willowisatree]

I have already uninstalled trend micro. Whenever I click on the adware cleaner link it just brings up a box with an option to uninstall avast.

 

[Willowisatree]

I did try unchecking some things under msconfig. It did not seem to help and the only start up things are things like the mouse and what is normally there. I don't have any extra programs opening at start up.

 

[VistaKing]

Before you run Adwcleaner . Disable the Avast realtime protection then run AdwCleaner but click on Search so I could see what its trying to delete please .

 

[Willowisatree]

I actually don't know how I would disable the real time protection. None of the shields are on now, something about the computer being in safe mode seems to disable avast shields and the windows security center.

 

[VistaKing]

Farbar Recovery Scan Tool


64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please upload both logs in your reply.(FRST.txt and Addition.txt)

:note: FRST.txt and Addition.txt will be on the Desktop ( Please don't zip the files ) :note:

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[Willowisatree]

Here are these files.

 

[VistaKing]

Open Notepad . Inside Notepad paste the highlighted text inside notepad


start
HKLM\...\Runonce: [GrpConv] - grpconv -o [x]
HKCU\...\Run: [AdobeBridge] - [x]
HKLM-x32\...\Run: [] - [x]
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKCU - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
BHO: No Name - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - No File
BHO: No Name - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - No File
BHO-x32: No Name - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - No File
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - No File
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
FF Extension: No Name - C:\Users\Willow\AppData\Roaming\Mozilla\Firefox\Profiles\kihpewci.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi
FF Extension: No Name - C:\Users\Willow\AppData\Roaming\Mozilla\Firefox\Profiles\kihpewci.default\Extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}.xpi
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] C:\Program Files\Updater By SweetPacks\Firefox
FF HKLM\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Updater By SweetPacks\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{8E9E3331-D360-4f87-8803-52DE43566502}] C:\Program Files\Updater By SweetPacks\Firefox
C:\Windows\Tasks\SA.DAT
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : Desktop

Click on the [Save] button .

Open the FRST tool again inside Safe Mode with Networking or in normal mode ( if possible) and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be on the Desktop .

 

[Willowisatree]

Here is the fixlog.

 

[VistaKing]

Run the tool below

:ar: Malwarebytes Cleanup Tool

Right click on mbam-clean.exe and select

When asked to restart please to so . See if you could start your PC in normal mode

 

[Willowisatree]

Alright, my most recent attempt at normal mode seemed to be a bit better. Nothing seemed to freeze so long as I just left it alone. I tried opening up my task manager or my browser and I got the blue loading wheel next to my cursor. It stayed there for a few seconds and then everything froze.

 

[VistaKing]

Can you run RogueKiller in normal mode ?

 

[Willowisatree]

I could run rogue killer in normal mode. Scanned and deleted. It froze again when I tried opening my browser. It doesn't seem to matter which browser I try to open.

 

[VistaKing]

What did it delete ? I wanted to see the log .

 

[Willowisatree]

Oops, I thought I had uploaded those. I've uploaded them here.

 

[VistaKing]

Download CKScanner by askey127 below

• Download link :ar: CKScanner
  
• Save it to your Desktop
  
• Right-click CKScanner.exe select
  
  
  
• Click Search For Files
  
• When the cursor hourglass disappears, click Save List To File
  
• A message box will verify the file saved
  
• Upload CKFiles.txt in your next reply

 

[VistaKing]

Open notepad . Copy and paste the code below into Notepad. To open Notepad, click on rb: . Inside

type notepad and then press <ENTER> button .

@Echo off
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
cls
echo Script finished.
pause
del %0

In Notepad, click File and then Save. Type reset.bat inside file name section . Change Save as Type to All Files, and then save the file to your desktop. After the file is saved, right click on the RESET.bat choose

. Once it's finished running, restart your computer. Check to see if your Internet connection is restored.

 

[Willowisatree]

Download CKScanner by askey127 below

• Download link :ar: CKScanner
  
• Save it to your Desktop
  
• Right-click CKScanner.exe select
  
  
  
• Click Search For Files
  
• When the cursor hourglass disappears, click Save List To File
  
• A message box will verify the file saved
  
• Upload CKFiles.txt in your next reply

Ck files.