black screen please help

[honnybee]

Two days ago I was trying to do a restore my computer to a precious point when I did it it said the restore wasn't successful since I still has my anti-virus active I turned off my computer of with power button to do the restore through safe mode instead this weird page of errors came up. I turned off my computer turned it back on it gave the option to do start up repair after it finished it fixed the original problem, but now instead of seeing my windows 7 login screen I see a black screen with only mouse arrow. I researched the Web for what this is and how to fix it, when I try safe mode it has the black screen as well. I then went on to my system recovery options that were already preinstalled and tried to restore from there, but it says there's no restore points. I just bought a windows 7 repair disk that should be coming in this week, will using a actual disk change the fact that no restore points are showing and will the startup repair from actual disk be more helpful and lastly what are my options for fixing this issue.

 

[ICIT2LOL]

Hello and welcome honnybee try running this Kaspersky Rescue Disk 10 for starters > you will need to make a bootable disk and set the BIOS boot order to boot from either the USB or optical drive depending on whether you make a disk or stick to boot from.

 

[honnybee]

Thanks for the advice checked out other forums alot of them said when the issue is this bad its usually virus related, I'm going to do what you said and hope it works.

 

[ICIT2LOL]

Yes keep us posted because it certainly sounded like a malware thing to me too. Now the rescue disk runs in a way much like Linux that doesn't involve Windows at all so it can scan the system from outside in as it were. It may take a while but worth it if it finds any rubbish.

There are other rescue disks that are good but generally speaking the Kaspersky one is the first choice at least for me.

 

[honnybee]

I'm going to install it tomorrow and try it, but they told me when it's this bad it is probably zero access virus and even if it detects it no man ware can take it out if that's the case I'm definitely going to need more help resolving this issue. I do have a couple questions I just ran startup repair and it told me the issue is boot configuration corruption and on other forum they told me to go to my task manager which I was able to do through a command prompt to do something for I file called explorer.exe but it isn't there since I'm not a techie I don't know what the significance of it and why it isn't there.

 

[ICIT2LOL]

Yes please run that rescue disk because as you can see from this it could be a malware problem Is explorer.exe safe? How to remove a explorer error?

By the way have you got all your data backed up? because this may even mean a reinstall and this is something else you can have a read through http://www.sevenforums.com/tutorials/219533-troubleshooting-windows-7-failure-boot.html

 

[honnybee]

I just used it it said it couldn't do the scan because database is corrupted.

 

[honnybee]

I tried this other application others were using frst, when I did the scan I got this

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by SYSTEM on MININT-9HARCDA (09-03-2016 23:04:51)
Running from g:\
Platform: Windows 7 Home Premium (X64) Language: English (United States)
Internet Explorer Version 10
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-12-15] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-20] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-10-24] (Sony Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-16] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-17] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$70fcdb70c5b8d46645f03adef7c0c75c\n. <==== ATTENTION
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
HKU\Default\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\Default User\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\owner\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-01-14] (Google Inc.)
HKU\owner\...\Run: [Google Update**.d<*>] => "C:\Users\owner\AppData\Local\Google\Desktop\Install\{70fcdb70-c5b8-d466-45f0-3adef7c0c75c}\❤≸⋙\Ⱒ☠⍨\*ﯹ๛\{70fcdb70-c5b8-d466-45f0-3adef7c0c75c}\GoogleUpdate.exe" > <===== ATTENTION (Value Name with invalid characters)
HKU\owner\...\Run: [Google Update] => C:\Users\owner\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-11] (Google Inc.)
HKU\owner\...\Run: [pronto] => C:\Program Files (x86)\Blackboard\Blackboard IM\blackboardim.exe [23053400 2012-07-06] ()
HKU\owner\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\TEMP\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy Software Installer.lnk [2010-01-14]
ShortcutTarget: Best Buy Software Installer.lnk -> C:\Program Files\Best Buy Software Installer\Best Buy Software Installer.exe (Best Buy®)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy Software Installer.lnk [2010-01-14]
ShortcutTarget: Best Buy Software Installer.lnk -> C:\Program Files\Best Buy Software Installer\Best Buy Software Installer.exe (Best Buy®)
Startup: C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2012-08-26]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-04-17]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * lsdelete
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-10] (AVAST Software)
S2 Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2152720 2015-04-05] (Lavasoft Limited)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.292\McCHSvc.exe [293128 2016-02-05] (McAfee, Inc.)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [257936 2010-08-12] (Sony Corporation)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
S2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [642416 2009-09-14] (Sony Corporation)
S4 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [X]
S2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{70fcdb70-c5b8-d466-45f0-3adef7c0c75c}\ \...\*ﯹ๛\{70fcdb70-c5b8-d466-45f0-3adef7c0c75c}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

 

[ICIT2LOL]

Ok well I am not sure whether the Kaspersky is saying the rescue disk database is corrupted or the data it is trying to access is corrupted. As I said it runs in a non Windows environment and should not be affected itself so I am presuming the Windows is badly corrupted.

Now I have no experience with the Farbar software so I cannot really comment onlty that from what come s up in the results you have been using two AV suites together on that machine - Lavasoft (rubbish) and Avast which can have it's problems together maybe they have trashed some of the database that is being reported as corrupt. Never a good idea to have more than one AV on a machine at any one time especially if they are run in real time.

Now there is this rescue disk you could try much the same as the Kaspersky - if it comes back with the same results it looks like a reinstall of Windows.
How to create a Bitdefender Rescue CD < to make
How to scan your computer with Bitdefender Rescue CD < to use

 

[Anak]

Hi honnybee, welcome to 7F! ........Hi ICIT2!

I would like to see if you can get to the Advanced Boot Options screen, please, do not have any disks of any type in your optical disk drive or any USB flash drives attached to your machine then,

• Turn off the computer.

• Turn on the computer and at the VAIO screen, press the F8 key. I do not know when the Vaio screen starts, you may have to start tapping the F8 function key as soon as you restart your machine.

If you can get to the advanced boot options screen, use the down arrow key to move the highlighted choice down to "Last Known Good Configuration (advanced)" then press the Enter Key and let the operating system boot, if it can.

Please post back in your next reply how that booting attempt went:

• Was it able to boot to the Desktop? Or,

• Were there problems and your machine still booted to the black screen.

• Were there any error or warning messages? Try to post them if there are any.

If your machine can boot to the Desktop you are going to have to make some choices because I can see from the Farbar report that:

• Four instances of Best Buy Software Installer is in your Startup configuration; You can safely disable these from your Startup programs list. How to Change, Add, or Remove Startup Programs in Windows 7

• Even though you have Avast listed as your anti-virus the scan is also showing, McAfee and Lavasoft\Ad-Aware, if the last two are just on-demand scanners that is okay, but if they are running in real-time you are going to have to uninstall two of them. It would help if you did uninstall McAfee and Lavasoft\Ad-Aware for testing until we get your machine straightened out.

• The last line of the scan is showing *etadpug in connection with google update, *etadpug can possibly be a trojan or rootkit.

Please; It would be very helpful if you would fill out your System Specs, you can use the tool included in the Tutorial here: System Info - See Your System Specs just read through the tutorial, use one of the downloads, and it will automagically fill them in for you if you use Internet Explorer.

A concern of mine; You mentioned you were trying suggestions from other forums. I will not allocate my time to help you if you are going to continue to do this while we are trying to help you; You are going to have to make a choice as to which forum(s) advice you are going to follow.
I would look over these other suggestions if you provided links to the other threads, but I will not advise "out of context".

 

[honnybee]

Hello Anak

I have already went through the advanced options, at this point the only way I can do anything to my computer is through either command prompt through startup options or using a bootable usb, I have ran the startup repair it says it has boot configuration corruption, kerparsky rescue disk said it couldn't scan because of database corruption, go into the task manger from command prompt shows explorer.exe doesn't show. Right now I'm real sure I have the zeroaccess virus the issue is finding the best application to tackle it because regular anti virus isn't built to tackle it and things that I found that are like the kerparsky tdsskiller I don't know how I can load it to use it tried to access through command prompts, but didn't work. As for me going to other forums the vast majority I went to for research purpose trying to narrow down whats wrong with my computer, now I have an idea I just still looking for way to fix it, I would really appreciate if I can keep you informed on whats going on and get your input.

The mcafee anti virus had since I got my computer, but isn't active, lately my avast been acting weird saying firewall been disactivated, as for lavasoft I have never installed or seen that on my computer before not sure if it was preprogrammed into my computer when I got it or if its a virus. Is there a way to unistall applications from command prompts? Is there a way I can get you the system spec info from a command prompt?

 

[Anak]

I have already went through the advanced options,

Are you saying you already tried the "Last Known Good Configuration (advanced)" [LKGC] option when you were on the advanced boot options dialog box and LKGC did not work?

If that is the case lets see if we can repair the boot corruption, follow this tutorial: http://www.sevenforums.com/tutorial...ool-how-use-windows-recovery-environment.html; It states in the beginning that you need to reach startup repair by using a DVD, but since you can already do that by using the bootable USB, use the USB.

Let us know what happened after the attempt to restart, include any error or warning messages.


We will discuss the "other" anti-virus programs later, the main concern for now is getting your machine to boot.

 

[honnybee]

I did the bootrec and I'm still locked out of my computer.

 

[honnybee]

Hello Anak and ICIT2LOL I restored my computer to factorysettings, do you have advice for post repair what anti-virus to download and any other important applications so this doesn't happen again. Lastly thanks for the help of the many forums I traveled to this is probably the most responsive.

 

[ICIT2LOL]

Nothing special honnybee if you are happy with Avast then stay with it though there are plenty of free ones you could use - of course some that I would not use myself. If you want to use another one just say and we can let you know what there is

Now I would be careful with updates if I were you there is a lot of nonsense gong on with Microsoft adamant that we should all go Windows 10.

Now if you do not want that then I suggest you run the batch file (the second one) from this to prevent an upgrade to 10 Upgrade to Windows 10 Update - Enable or Disable in Windows 7 or 8.1 - Windows 10 Forums I also run this on my desktop to get rid of a lot of the 10 related updates from Microsoft.

Make sure you set updates too to what is in my pic and do watch for update KB3035533 reappearing all the time - do not install it.

I also have this on my desktop - see pic to know what to use Ultimate Outsider - Software Downloads < only use the Control Panel

 

[Anak]

Once I saw the bootrec failure I was going to suggest either a factory reset or a clean install, it is good to hear the factory reset took hold and you're back on the road again.

As mentioned by ICIT2 if your happy with Avast you can stay with it, do you have the free or paid version? Either way there are some settings that can help or hinder performance, we can point you in the right direction or you may want to check Avast's Forums

The registry setting is helpful if you don't want to upgrade to Windows10 and like ICIT2 I also have the GWX monitor installed.

I run mbam and superantispyware, as on-demand scanning and they're both the free versions, if you go to install just watch for any free trials or added programming like open-candy, a browser-helper object [BHO]. It's easy enough to revert to the free versions if you decide to try the premium versions.

An added real-time layer that I use is spyware-blaster and there is win-patrol.

Believe it or not, the best anti-malware protector out there is your own common sense don't be quick to click on anything, "If it seems too good to be true, then in all likelihood it is". This world doesn't offer something for nothing.
I have to watch when we buy something from our nieces and nephews for school promotions, our spam doubles every time, and I scan everything I download from the internet with mbam even if I know its from a "trusted" site, it may take a few extra seconds, but it can save days if your scanner finds something bad. You should be able to do that with avast, right-click on a file and see if you have a listing for "Scan with Avast" on your context menu.


Related:

8. Practice smart surfing and emailing. Phishing campaigns still exist, but hackers have become much cleverer than that Nigerian prince who needs your money. Hover over links to see the actual email address from which the email was sent. Is it really from the person or company claiming to send them? If you’re not sure, pay attention to awkward sentence construction and formatting. If something still seems fishy, do a quick search on the Internet for the subject line. Others may have been scammed and posted about it online.

Source: 10 ways to protect against hackers | malwarebytes.org

http://Answers to common security questions - Best Practices | www.bleepingcomputer.com

   Note

I am going to be busy this week with personal matters and I may not to be able to answer for some time.

 

[honnybee]

I just made the recommend installations, so taking your guys advice in mind will that be enough to protect myself from the more serious infections out there. I'm also a bit worried with the time I was locked out of my computer important information was taken from my computer, I've read zeroaccess is used from remote users, is it possible that the individual accessed my email account reason I ask is usually when I shut down my computer I dont always logout my email. Am I being overly suspicious about this and how best can I protect my personal information.