Odd - I'm not seeing the errors that I'd expect to see.
Perhaps a look at the Event Logs may show something...
Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.
Primos868,
Could you edit post# 10, select all of the text in the edit window and press the # icon on the posting menu?
Then press the save button
This will put the text in a box that has scroll bars and make the thread a little easier to read (it won't be wide)
Thanks
Thanks for the feedback re: Date & Time / Ms Fixit.
Do you have a proxy set?Please follow this tutorial to provide the current operating environment of your machine.What Anti-virus program is installed?
Speccy - Publish Snapshot of your System SpecsThe on-demand malware scanner below is very good at detecting things other AV products might miss. This is a scan only, it does not remove anything at this stage.Thanks
Download the Farbar Recovery Scan Tool (FRST) Click here
- Select the version that applies to your system: 32-bit OR 64-bit
.- Click the Save button
Default save location is your Downloads folder
If the SmartFilter bar is presented, click the Actions button and click Don't Run (saves FRST but does not run it)
.- Double-click FRST or FRST64 to launch the utility
FRST is the 32-bit version / FRST64 is the 64-bit version
- Click the Yes button to confirm UAC
.- Click the Yes button on the Warranty disclaimer window.
.- Tick [a] all Whitelist checkboxes
.- Tick [a] Addition.txt in the Optional scan list
.- Click the Scan button to begin scanning.
.- FRST creates two logs when the scan has finished, they are located in the same folder where FRST was launched
- FRST.txt and
- Addition.txt
- Attach both logs to a post on your thread and a SevenForums member will analyze the output.
See: Screenshots and Files - Upload and Post in Seven Forums
Arc does that to me too, he says "It's not magic if you know where to look" .... oh the shame, the shame!
NoelDP - Odd has definately described this problem to date :)
Logs attached. As a note, I had to choose Action > Save All Events As to get the logs saved. Let me know if it didn't come out correct.
Slartybart
Post 10 edited
No proxy
I don't use an active antivirus outside of Microsoft Security Essentials (which has been disabled as I was working on this) but do run regular Trend Micro security scans. I have run quite a few differant registry checkers, antivirus, spyware, and malware checkers recently, as well as my companies corporate antivirus on the machine as I originally thought that could be the issue. I'd rather not post the entirety of the files you requested, as there's some information in these files my company would prefer not be posted. Is there a specific section, or item you are looking for?
Thanks Primos
You might want to re-enable MSE. It's relatively light weight and not know to cause issues. I just want to stress that you should only have ONE real time AV program running. On-demand scanners are usually ok with most real time AV products.
Registry checkers? Did you clean any registry entries?
I understand the company restrictions, but I would need to look at the whole picture, go back and forth comparing data. It is near impossible to select the portions of data that will identify the cause without knowing the cause.
It's beyond the scope of forum troubleshooting to walk members through a Farbar log. It takes me a long time to determine that the log is clean or that I need to ask for more experienced help to eradicate malware discovered.
Without data to analyze, I'll step out of the thread. You're in good hands with Noel, he knows this stuff.
Bill
.
Slartybart - I'll turn MSE back on. I know I should have antivirus, just never seem to get around too it. (is it bad that one of my work responsibilities is to clean malware from user computers but don't have any antivirus myself
The registry checkers didn't come back with anything too out of the ordinary. Nothing that I acted upon anyways.
I'll dig through the Farbar logs. Haven't used the tool before, but always good to have another notch on the belt.
I appreciate all the help you've provided.
There are repeated events regarding your hosts file.
This might be due to disk corruption, try checking your C:\ drive
See: Disk Check
Follow OPTION ONE
steps 1-4, (the type of scan you should run is shown in the image under step 4, and is described in step 7)
and
steps 9-11
Your C:\ drive will be in use, so schedule the disk check and restart.
See: Check Disk (chkdsk) - Read Event Viewer Log
that describes how to read the Disk Check evernts
If the disk is ok, the host file might be corrupt or have the wrong security descriptor
This MS fixit might help - it resets the hosts file to default.
How can I reset the Hosts file back to the default?
Bill
.
Quote