Computer's properties window disapears

[Anak]

I could be wrong, but I believe from what I saw, any attempt to run more scans would be futile. The riskware is already gone, but the damage it caused to the registry and system files remains.

Try the CHKDSK and SFC scans to try and repair the damage.

I also believe you're looking at either one of three fixes; Samsung Recovery Solution, Repair, or Clean Install because you will spend more time trying to fix this than if you just bite the bullet and do one of those three fixes.

 

[trexiic]

Try the CHKDSK and SFC scans to try and repair the damage.

Tried that a long time ago.


I've got an idea, not long before the bug, I follow a link on the internet (I don't remainber the link) to disable useless windows services... maybe I disabled one I should not? (is there any service that could cause this type of bug if disabled?)

 

[Anak]

Yes it is possible.

Did you run the AdwCleaner program asked by Slartybart?


The only way I know of to check Services at this point is to go here: » Black Viper's Windows 7 Service Pack 1 Service Configurations, read up on the Introduction then you should be down where the service configurations for the different versions of Windows are.

Pick the version you have, go down the list and see if you need to make changes, it might be easier if you hide the versions you don't have with the Show/Hide button and then print out the list.

 

[Slartybart]

The thing is, that you don't experience the issue in Safe mode. This tells me that a service loads in normal boot that doesn't load in Safe boot.

Please run through my previous request (Adwcleaner and MGAdiag)

I will stlop until those requests have been completed.

Then folllow this: http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

 

[Slartybart]

Please also comply with Anak's request - thanks

No problem while in Safe Mode suggests there is no problem with system files.

If you click on "Afficher d'aultres points de restauration" while in System Restore, do any extra restore points appear?

 

[trexiic]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-PWB9R-4K7W4-2BT4J
Windows Product Key Hash: jlJIE69lzaXsu5B+X11cktZP6u8=
Windows Product ID: 00359-OEM-8992687-00015
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {03E2A931-7309-4340-91E2-3FF99317E05B}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130828-1532
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{03E2A931-7309-4340-91E2-3FF99317E05B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2BT4J</PKey><PID>00359-OEM-8992687-00015</PID><PIDType>2</PIDType><SID>S-1-5-21-3671347938-3974166199-4169046172</SID><SYSTEM><Manufacturer>SAMSUNG ELECTRONICS CO., LTD.</Manufacturer><Model>355V4C/355V4X/355V5C/355V5X/356V4C/356V4X/356V5C/356V5X/3445VC/3</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P02AAN</Version><SMBIOSVersion major="2" minor="7"/><Date>20120607000000.000000+000</Date></BIOS><HWID>F32C3707018400F2</HWID><UserLCID>0C0C</UserLCID><SystemLCID>040C</SystemLCID><TimeZone>Est(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>SECCSD</OEMID><OEMTableID>LH43STAR</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Version du service de licences logicielles*: 6.1.7601.17514

Nom*: Windows(R) 7, HomePremium edition
Description : Windows Operating System - Windows(R) 7, OEM_SLP channel
ID d’activation*: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
ID d’application*: 55c92734-d682-4d71-983e-d6ec3f16059f
PID étendu*: 00359-00178-926-800015-02-3084-7601.0000-3552013
Identificateur d’installation*: 016286898721432705403456699491353976408866493500477384
URL du certificat du processeur : http://go.microsoft.com/fwlink/?LinkID=88338
URL du certificat de l’ordinateur : http://go.microsoft.com/fwlink/?LinkID=88339
URL de licence d’utilisation : http://go.microsoft.com/fwlink/?LinkID=88341
URL du certificat de clé de produit*: http://go.microsoft.com/fwlink/?LinkID=88340
Clé de produit partielle*: 2BT4J
État de la licence*: avec licence
Nombre de réinitialisations de Windows restant*: 3
Heure approuvée*: 2014-01-03 14:34:37

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:24:2013 12:05
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NAAAAAEAAQABAAIAAQACAAAAAwABAAEAonZ4Vsiz4HDAymj1yLN39oqbDjcm2VqXCk2w3g==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			SECCSD		LH43STAR
  FACP			SECCSD		LH43STAR
  HPET			SECCSD		LH43STAR
  MCFG			SECCSD		LH43STAR
  FPDT			SECCSD		LH43STAR
  IFEU			SECCSD		LH43STAR
  SSDT			AMD   		POWERNOW
  SSDT			AMD   		POWERNOW
  CRAT			AMD   		AGESA   
  SLIC			SECCSD		LH43STAR

 

[trexiic]

Well... I'm trying to set my services like black viper's DEFAULT HOME PREMIUM (which is my windows version).
But his service's name are in english, mine in french, I need to translate them one by one... gonna be long.

 

[Slartybart]

Well, there are some nasties in the AdwCleaner report. But it looks as though you only scanned - you need to complete the steps and hit the clean button for it to actually remove the threats.

Rerun AdwCleaner and hit CLEAN.

I try to accomodate members who speak languages other than English. This forum is English language based - please translate all future posts, including log output

I've attached the AdwCleaner log which I translated on translate.google.com - I won't keep doing that for you.

 

[Slartybart]

Forget about Black Viper for now - your system is infected. focus on cleaning up the malware.

You said that you recently installed Windows... Let me ask this
- how would you feel about re-installing Windows. It is the gauranteed way of removing all malware. The other methodology is step-by-step and takes time and requires downloading / running additional scanners / utilties

Well... I'm trying to set my services like black viper's DEFAULT HOME PREMIUM (which is my windows version).
But his service's name are in english, mine in french, I need to translate them one by one... gonna be long.

 

[trexiic]

That's a good idea, I wont have too much things to reinstall. When I reinstalled windows 2 weeks ago, it was weird, there was many driver missing (I had to go on another computer to download drivers from samsung's site then use an usb flash drive to install them on my computer, because I wasn't able to go on the internet without some drivers...), and after reinstalling all the uptaded drivers, my pc booted faster than before (which is normal, because there was less apps, and it was clean), but the overall performance were worst...

Do you know a good way to make my computer AS SAME as when I buy it?
Thanks to every one who replied on my post, specially Slartybart and Anak.

 

[Britton30]

Check you manual, I suspect it has a Factory recovery option, but I don't recommend them. Try this instead for a perfect w7 system with no bloatware.

http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html#post1839164

 

[Slartybart]

Did you make Samsung Recover Discs when you first got the machine?

• If yes
  • you can Restore to Factory condition: How To Perform A Complete Restore Using Samsung Recovery Solution 5 : Notebooks | Samsung
• If no
  • you'll have to download Win7 Home Premium ISO, burn to DVD or USB, and install from that.
  • you'll need to create the Win7 media on an uninfected 64 bit machine

Backup any recent User data, then
:ar: The next command wipes your disk of data and configuration.
I recommend running Diskpart Clean (not Clean All): http://www.sevenforums.com/tutorials/52129-disk-clean-clean-all-diskpart-command.html
:ar: Be sure to select the correct disk

Once the disk is clean - follow this tutorial: http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html
​

 

[trexiic]

This virus (probably a virus) is getting worst and worst... Many apps I launch freeze my computer, others just don't open at all... Since 5 minute ago, every time I unplug my laptop, it shutdown automatically, even if 6 minute ago, the batterie was still very good. When I click on the batterie icon on the bottom right, it tells me: Plugged, not charging, 82%.
I still can't open computer's properties.
Other windows in the control panel does the same.
When I log in to my session, there is a black screen for 10 seconds before I see my desktop (5 minutes ago, it was all good...)

I have no choice, I'll reinstall windows, which way should I use?
How To Perform A Complete Restore Using Samsung Recovery Solution 5 : Notebooks | Samsung (I have the disc)
http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html (britton30 recommandation)

thanks again to every one.

 

[Slartybart]

Yes - that will restore your machine to factory condition.

Please edit post # 53 and remove the image of your disc. It does not show any sensitive data, but a savvy person might figure out somethng. Don't want to say too much - don't want to give anyone any ideas. Please do remove it though.

Go ahead and backup any user data createdbetween teh last install (2 weeks ago) and now

Then I still suggest the Clean command.

Finally use the Samsung Recovery disc to install.

 

[Slartybart]

As your system is infected and you have the disc, I'd go with the Samsung Recovery Media

I don't want you to create Win7 media on your machine -> your machine is infected and that might transfer to the Win7 media.

The DVD cannot be written to so it's good install media

I prefer the clean install method, but in this case it's safer to use the DVD

 

[NoelDP]

For what it's worth, there's no indications of any problems with the MGADiag report.
Everything is as and how it should be.

 

[Slartybart]

Thanks for taking a look at it Noel.

For what it's worth, there's no indications of any problems with the MGADiag report.
Everything is as and how it should be.

 

[trexiic]

I'll follow the tutorial for using the recovery disc. I deleted the picture. For the batterie, is it possible to be the virus? or it is a hardware problem? (if it is a hardware problem, I'm really unlucky!)

 

[Britton30]

Possibly it is a bad battery even though the indicator says it is good. When you unplug the charger and it shuts down, do the power indicator lights remain lit?

 

[trexiic]

Which power indicator's light? On the charger pack?