1.7 causes PC not to finish booting - just goes to black screen.

[Tatumsa]

As per the topic, computer boots incredibly slowly, then after the Welcome screen goes I end up with a mouse pointer on a black screen. The only way I have of fixing this is to uninstall. Any ideas?

[daledoc1]

Hello and welcome, tatumsa:

Please follow the instructions below to run the mbam-check tool (if you still have MBAM installed) and the DDS tool.

Then please post back with the 3 requested logs attached to your next reply, as well as a few protection logs, if you have them.

If you have uninstalled MBAM, please post back with both of the DDS logs, anyway.

The experts will review them & try to pinpoint a cause and a solution for you.

Alternatively, if you are a paid user of MBAM PRO, you can open a ticket directly at the help desk here: http://www.malwareby...ontact_consumer

Thanks,

daledoc1

------------------------------

Step 1 -- Create an mbam-check log:

Download mbam-check.exe from HERE and save it to your desktop.

Double-click on mbam-check.exe to run it, it should then open a log file.

Please attach to your next reply the CheckResults.txt file which should now be located on your desktop.

Then, if you can, please also upload your 3 most recent Protection module logs:

In Windows XP, these logs are located in: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

In Windows Vista/7, these logs are located in: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Step 2 -- Run DDS and create 2 logs:

Download DDS from one of the locations below and save it to your Desktop:

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once it is downloaded, you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool, on Vista or Win 7 right click and select Run as administrator

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

• 
  When done, DDS will open two (2) logs:
• 
  
  1. DDS.txt
     
  2. Attach.txt
     

• Save both reports to your desktop
  
• Please attach both of the following logs to your next reply: DDS.txt and Attach.txt
  --->You can ignore the note about zipping the Attach.txt file in most cases.
  

[Tatumsa]

Hi there, thank you for that, I am a paid subscriber, but if you can help that's even better hehe. I have the files for you, but as my PC won't boot up, I am unable to have Malwarebytes running.

attach.txt

dds.txt

protection-log-2012-12-28.txt

CheckResults.txt

protection-log-2012-12-27.txt

protection-log-2012-12-26.txt

[daledoc1]

Hi:

We'll need to wait for a staffer or expert to formally review your logs.

However, the one glaring thing that jumps right out is that you have **3** anti-virus programs installed.

.

AV: Webroot AntiVirus with Spy Sweeper *Enabled/Updated* {53211D91-0C31-95F2-E3A5-7661FB22889E}

AV: ESET Smart Security 5.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

AV: Webroot SecureAnywhere *Enabled/Updated* {9C0666FC-6C7D-3E97-3C40-0C6B33FC7401}

That might well be the major contributor to your problem.

There should only be ONE robust AV (either free or paid) and ONE anti-malware program (such as MBAM) on your system.

Multiple AVs actually make your computer LESS secure, not more so; and they cause the sort of crashes, conflicts and clashes you described.

Please wait for further, expert advice.

In the interim, though, I would strongly suggest that you completely remove 2 of the 3 AVs, using the vendor's removal tools, if available.

Thanks for your patience,

daledoc1

[AdvancedSetup]

The computer appears to be infected based on the Event Logs. Please see the following post to have someone assist you with this further: Available Assistance

==== Event Viewer Messages From Past Week ========
.
28/12/2012 23:21:18, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  cfeyZClx
28/12/2012 23:19:46, Error: Service Control Manager [7001]  - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
28/12/2012 23:19:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
28/12/2012 23:19:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
28/12/2012 23:19:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
28/12/2012 23:19:44, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
28/12/2012 23:19:39, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
28/12/2012 23:19:38, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD cfeyZClx CSC DfsC discache eamonm ehdrv EpfwLWF NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:  A device attached to the system is not functioning.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error:  A device attached to the system is not functioning.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
28/12/2012 23:19:37, Error: Service Control Manager [7001]  - The Creative Audio Service service depends on the Windows Audio service which failed to start because of the following error:  The dependency service or group failed to start.
28/12/2012 23:19:34, Error: sptd [4]  - Driver detected an internal error in its data structures for .
28/12/2012 23:14:41, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the eventlog service.
28/12/2012 23:14:37, Error: Service Control Manager [7022]  - The ESET Service service hung on starting.
28/12/2012 20:01:30, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WRSVC service.
28/12/2012 20:01:00, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Spooler service.
27/12/2012 17:08:56, Error: Service Control Manager [7034]  - The PnkBstrB service terminated unexpectedly.  It has done this 1 time(s).
27/12/2012 17:08:53, Error: Service Control Manager [7034]  - The PnkBstrA service terminated unexpectedly.  It has done this 1 time(s).
.
==== End Of File ===========================

[Tatumsa]

Ok, thanks for all the information heh. I have worked out itwas the SpySweeper one that was conflicting and uninstalled it. Thank you both for your help

[daledoc1]

Hi, Tatumsa:

Did you see the reply from the forum Admin, Advanced Setup, just above yours here?

http://forums.malwar...ndpost&p=627814

The computer appears to be infected based on the Event Logs. Please see the following post to have someone assist you with this further: Available Assistance

Please follow his advice to get expert help checking your system and clearing it of malware.

Thanks,

daledoc1

[AdvancedSetup]

It's possible that it was only due to software conflict but if you have the time it might be best to still have someone take a look for you.

Cheers

[daledoc1]

It's possible that it was only due to software conflict but if you have the time it might be best to still have someone take a look for you.

Ok, thanks for all the information heh. I have worked out it was the SpySweeper one that was conflicting and uninstalled it.

Hi, again, Tatumsa:

Just a quick thought: you had **3** AVs installed, so it would still be advisable to completely remove 1 of the remaining 2.

When you're "done" you really ought to have only 1 AV and 1 anti-malware (MBAM) running in real-time.

Since having 3 may have rendered your computer MORE vulnerable, it would be a good idea to follow Advanced Setup's sugggestion to have a qualified malware expert help you to check your system, just in case.

Cheers,

daledoc1