Help needed with a acrer aspire all in one Z3801 with malware problems

[marc1964]

i tried run regsvr32 vbscript.dll and got an error message vbscript.dll ''failed to load'' and something about making sure the binary is stored at a specified path or debug it to check for probs with the binary or dependant paths!, stuff i just have no idea about im afraid, any suggestions?

 

[marc1964]

Hi Marc,

The install is classified as counterfiet.

You have the Dell factory W7 Ultimate default key on your Acer computer.
The exploit used to circumvent activation has failed and MS has picked it up.
File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

You need to use the code on the OEM sticker, and it will also tell you which version,(shipped with Home premium)

Having stated its counterfiet in your case it can be caused by incorrect OS media, did you use Dell re-installation discs?
the report is also incomplete
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".
run the following
regsvr32 vbscript.dll

i would also like to see the results from this run the following command from a command Prompt window.

reg query HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32

finally did you realise your running 32bit

Roy

ok here's the CMD prompt report you asked for, see below and yes i did know it was 32 bit,

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\paul>reg query HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004
A55E8}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32
(Default) REG_SZ C:\Program Files\AVAST Software\Avast\AhAScr.dll
ThreadingModel REG_SZ Both
Default Engine REG_SZ C:\Windows\system32\vbscript.dll

 

[torchwood]

Hi Mark,
Avast should not be there, its causing the Vbs script failure and the failed to load message.
run the uninstaller from this link USE SAFE MODE please
http://files.avast.com/iavs9x/avastclear.exe

reboot

rerun the reg query post the output

Roy

 

[marc1964]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\paul>reg query HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004
A55E8}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32
(Default) REG_SZ C:\Windows\system32\vbscript.dll
ThreadingModel REG_SZ Both


C:\Users\paul>

 

[marc1964]

Hi Mark,
Avast should not be there, its causing the Vbs script failure and the failed to load message.
run the uninstaller from this link USE SAFE MODE please
http://files.avast.com/iavs9x/avastclear.exe

reboot

rerun the reg query post the output

Roy

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\paul>reg query HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004
A55E8}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32
(Default) REG_SZ C:\Windows\system32\vbscript.dll
ThreadingModel REG_SZ Both


C:\Users\paul>

hello Roy,
Is this what you asked for?,
(apologies posted the above twice.)
lastly re Avast, can that be reinstalled? or later, stay in safe mode/networking?

 

[torchwood]

Hi Marc,

that looks better,
can you run
regsvr32 vbscript.dll
then
rerun the tool copy/paste ouput.
try updating if the error below are gone,

File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".


Not sure if Avast has corrected the hiccup it was picked up a while back,
I'd like to see if we can update first, before re-installing
you can use MSE in the meantime.

Roy

 

[marc1964]

Hi Marc,

that looks better,
can you run
regsvr32 vbscript.dll
then
rerun the tool copy/paste ouput.
try updating if the error below are gone,

File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100
Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".


Not sure if Avast has corrected the hiccup it was picked up a while back,
I'd like to see if we can update first, before re-installing
you can use MSE in the meantime.

Roy

Hi Roy.
re the above, tried downloading MSE but on trying to install it the system is not allowing it to instal due to the pc repeatedly booting into safe mode, i tried f8 and booting in normal but it reverts back to safe mode, now re regsvr32 vbscript.dll, i get a box appear after with "DllRegisterServer in vbscript.dll succeeded," is this what you wanted?,

re MSE got it to instal this evening but i have noticed it "hangs" after a third of the way through updating its virus and definitions library?,
regarding the win7 version, on looking on the back at the sticker it says "Win7 home premium OA" then "Acer Group" then the product key numbers, but you notice its a Dell win7 program?

 

[torchwood]

Hi Marc,
Must be major corruption on the system if it Defaults back to safe mode every time.

Because of this your comp is running in a limited mode all the time,

I suggest a clean install.
Clean Install Windows 7

From your last post regarding the sticker and code key, DO NOT POST IT
we need to get you W7 home premium SP1 media *
(I did mention in my first post the possible Dell install media problem)

* from the link below
W7 Home premium 64bit English,
(it will be more upto date than your discs)

https://software-download.microsoft...1475787538&h=bbed5448c3c61a63854c1d60b4cff896

This link is ony valid for 24 hrs (10pm England)

You will need the key on the Acer group sticker to activate/validate.


Roy

 

[marc1964]

Hi Marc,
Must be major corruption on the system if it Defaults back to safe mode every time.

Because of this your comp is running in a limited mode all the time,

I suggest a clean install.
Clean Install Windows 7

From your last post regarding the sticker and code key, DO NOT POST IT
we need to get you W7 home premium SP1 media *
(I did mention in my first post the possible Dell install media problem)

* from the link below
W7 Home premium 64bit English,
(it will be more upto date than your discs)



https://software-download.microsoft...1475787538&h=bbed5448c3c61a63854c1d60b4cff896

This link is ony valid for 24 hrs (10pm England)

You will need the key on the Acer group sticker to activate/validate.


Roy

hi Roy,
unfortunately i have been away so not sure which day or night you sent your reply and so you link i think must be not active now?, as for booting into safe mode and a clean install reformat?, i think i know the problem now where it lies, if you remember you asked me to delete the antivirus program i had installed and either yourself or one of the other sevenforum guys gave me a link to download to get rid of it of which i followed your advice and successfully removed it, anyway i notice now on start up and by clicking F8 it brings me to a 2 start up options menu, one is win7 the other which it always seems to go to (by default maybe?) is the Avast uninstall program that's somehow on the boot menu and when it uses that it goes to safe mode, how can i remove that or don't bother if clean install? does that make sense?, so i have been pressing F8 and manually changing to win7 it then boots UP into normal win7 and not win7 safe mode ( OR avast uninstall) i will do a clean install as you suggest but that link is a problem as i dont always have time due to shift work, is it possible to get a longer time frame link or 10pm that's the deadline?