Solved search.txt and FRST.txt

webgal318 · Mar 21, 2013

http://www.sevenforums.com/bsod-help-support/283089-bsod-00000001e-crashes-after-entering-password-2.html

I don't know if I did this correctly. If not, please advise.
I tried to copy and past the files as requested and they are too long so I have attached them.

webgal318 · Mar 21, 2013

VirTool Win 32/obfuscator.ACP

I have been posting to the BSOD forum for my initial problem.

WDO found the following:

VirTool Win 32/obfuscator.ACP;
Exploit:Java/CVE-2013-0422
Exploit:Java/CVE-2013-0422.C
Adware: Win32/Arcade Web
Exploit:Java/CVE-2013-1723

I chose "the remove all" option but the PC still will not boot.

I tried Safe Mode with networking and Startup Repair without any luck.
I have previously posted the results of running the FARBAR tool as suggested on the BSOD forum.

I am reluctant to use the Dell Restore to Factory Image utility for fear that this bug hasn't been eradicated.

Thanks for your help.

-Sylvia

VistaKing · Mar 21, 2013

Webgal

Download AdwCleaner

Download

:ar: Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
:ar: Click on Delete button.
:ar: Confirm each time with OK.
:ar: Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note

You will locate the log in C:\AdwClearner[Sn].txt

cottonball · Mar 21, 2013

Hmmmm...

...the PC still will not boot.

webgal318 · Mar 21, 2013

The PC that I am troubleshooting must be possessed!

I ran the WDO online full scan: no threats detected NEXT
I restored PC to factory defaults NEXT
I started to download Microsoft Security Essentials and the PC crashed during installation

I am now back to a desktop and I am going to try to send you a dump file.

webgal318 · Mar 22, 2013

Since my last post, I have been been able to do the following:
Install and run Microsoft Securitiy Essentials AFTER I removed the trial version of McAfee (Note: I think the McAfee trial version was the problem)
Install all Microsoft Updates
Scan with Windows Defender: (results: negative for threats)
I am now going to run the AdwCleaner as you requested.
Keep hoping I don't get another BSOD

webgal318 · Mar 22, 2013

AdvCleaner text file

Just went through TWO BSOD.
Going to try to get a dump file.

webgal318 · Mar 22, 2013

New BSOD log file

Well after three days, I finally got a dump file.
Please ananyze and let me know the results.

I am very eager to get to the bottom of this things.

Attachling link to original BSOD post

Borg 386 · Mar 22, 2013

It wouldn't hurt to run a scan for rootkits. Rootkits like to make a cloaked partition that will boot before anything else does. They won't show up on your disk management in most cases. Run this tool & see what the results are.

TDSSKiller

This forum is littered with posts relating to the problems McFubar has caused on various peoples machines. Did you use the removal tool to get rid of it?

http://www.instant-registry-fixes.org/how-to-uninstall-mcafee-security-center/

webgal318 · Mar 22, 2013

Found: Trojan:HTML Redirector

Microsoft Security Essential detected and quarantined the above mentioned Trojan four times while PC was running.
I am going to try to get the TDDS killer going

Re: McFubar: No I haven't even seen this or heard of this. What info do you have on it.

webgal318 · Mar 22, 2013

Rootkit Harbinger found

I ran the TDSS killer. It found malware called "Harbinger" after scan was complete.
I selected Quarantine because there was no Delete option.
PC restarted, scanned again, no threats found.
I would like to check with you and your team before I marked this one solved.

As you may have seen from my previous posts, this PC could not even go into the Windows splash screen when I started and it has taken many tries, scans etc. to get to this point.

One last question:What items from the "msconfig" Startup menu can I safely deselect?

Thanks for all your help.

-Sylvia

VistaKing · Mar 22, 2013

In MSconfig you may uncheck everything but the antivirus software Windows . Or better yet can we get a PrntScrn of your Startup tab from msconfig ?

webgal318 · Mar 22, 2013

MSCONFIG print screens

I had to do this in two shots because I could not expand the window.

Thanks

-Sylvia

VistaKing · Mar 22, 2013

Do you use the Intel Software to manage your WiFi or the one that is in Windows ? You may uncheck Adobe Reader along with the Adobe Acrobat , Quickset , Roxio Burn and Dell Datasafe.

webgal318 · Mar 22, 2013

Intel- I just checked.

Thanks

VistaKing · Mar 22, 2013

My preference you may uncheck everything but the Microsoft and Antivirus software . The things that are in STARTUP tab are programs that startup when the PC is booting into windows . You could launch the programs manually .

cottonball · Mar 22, 2013

webgal318,

On TDSSKiller...

Want to confirm you are OK in that area.

By default, this tool outputs its log to the system disk root folder (the disk with the Windows operating system,
normally C:\).

Logs have a name like:
C:\TDSSKiller.2.4.7_22.03.2013_15.31.43_log.txt

Would you kindly post the TDSSKiller log in your reply. It is not possible to give you appropriate guidance when operating in the blind.

Also need to know whether TDSSKiller needed a reboot.

Thanks!

Borg 386 · Mar 22, 2013

webgal318 said:
Re: McFubar: No I haven't even seen this or heard of this. What info do you have on it.

McFubar = McAfee. It causes more problems then it solves.

webgal318 · Mar 22, 2013

TDSS killer logs

I will post in a couple of days as I have a full week-end. TDSS killer did need a reboot.
Thanks so much.

cottonball said:
webgal318,

On TDSSKiller...

Want to confirm you are OK in that area.

By default, this tool outputs its log to the system disk root folder (the disk with the Windows operating system,
normally C:\).

Logs have a name like:
C:\TDSSKiller.2.4.7_22.03.2013_15.31.43_log.txt

Would you kindly post the TDSSKiller log in your reply. It is not possible to give you appropriate guidance when operating in the blind.

Also need to know whether TDSSKiller needed a reboot.

Thanks!

cottonball · Mar 22, 2013

webgal318,

Borg 386's idea to run TDSSKiller was a good one.

Rootkit.Boot.Harbinger.a is not good news. It is a type of malware that infects the Master Boot Record (MBR).

Please provide the TDSSKiller report as soon as you can.

Did you run TDSSKiller before using the Farbar Recovery Scan Tool?
If not, looks as if the FRST download link was not updated.

Solved search.txt and FRST.txt

New member

Attachments

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Retired ol' hound...

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

Attachments

My Computer My Computer

New member

Attachments

My Computer My Computer

ADHD Senior Member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

Attachments

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Retired ol' hound...

My Computer My Computer

ADHD Senior Member

My Computer My Computer

New member

My Computer My Computer

Retired ol' hound...

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer