Advanced Startup, Only Enter-Key Works

[turpit]

Hi,

 

mouse and keyboard of my Windows 8.1 Computer temporarily freeze. When I started considering that a virus might be involved and wanted to boot into a Linux-DVD for scanning, I noticed that in Advanced Startup only the Enter-Key works (which only results in a normal Windows boot). I can't select any of the other options (for example secure boot, boot from DVD etc) as the F-Keys and the digit keys are ignored. All keys of the keyboard work well after Windows has booted. USB legacy support, which is reported to sometimes resolve keyboard problems in the Advanced Startup menu,  is enabled in the BIOS. But I find it rather unlikely that only one specific key works due to a normal SW problem. Windows Defender never reported anything.

 

Then I tried the following:

1. ESET online scanner (log file attached) which found some PUP. I asked it to resolve the problem. But this neither changed  the behaviour of mouse and keyboard nor the Advanced Starup menu.
2. MBAM (log file attached), which I believe didn't find anything serious either. I didn't ask MBAM to delete anything.
3. FRST from the system recovery environment command prompt. I also attach this log file which contains some ATTENTION-lines which I don't fully understand.

 

I'm now more or less lost. I believe this can only be a virus, but don't know how to proceed. I'd be really grateful for your help.

 

Cheers,

Martin

 

MBAM.txt

ESET.txt

FRST.txt

[TwinHeadedEagle]

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
    
 
    
Before we start please read and note the following:
    
Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
Do not paste the logs in your posts, attachments make my work easier. There is a Attach Files option below which you can use to attach your reports. Always attach reports from all tools.
Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
Note that we may live in totally different time zones, what may cause some delays between answers.
Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
    
I can't foresee everything, so if anything unexpected happens, please stop and inform me!
There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
 
P2P/Piracy Warning:

• If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
• Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
• If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

 

 

 

Can you boot to Normal mode?

[turpit]

Yes.

[turpit]

And many thanks for being here and helping me!

 

The "Yes" was for the booting to normal mode .

[TwinHeadedEagle]

Then, run FRST from Normal mode, check Addition.txt, press Scan and attach both reports.

[turpit]

Done.

Addition.txt

FRST.txt

[TwinHeadedEagle]

Go and remove following:
- Video Download Converter version 1.0.0.0
- VideoDownloadConverter Toolbar
 
 
 
 
Fix with Farbar Recovery Scan Tool
 

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

 
Download attached fixlist.txt file and save it to the Desktop:
 
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

[turpit]

Thanks a lot!  After a reboot for which FRST asked mouse and keyboard are back to normal.

 

Unfortunately the behaviour of Advanced Startmenu is unchanged, that is still only the Enter-Key works and I can only boot Windows normally.

Fixlog.txt

[TwinHeadedEagle]

Good. I do not think I can help you with your second problem.

[turpit]

Thanks a lot for your help, TwinHeadedEagle! The mouse/keyboard-problem was really annoying. I really appreciated your help!

 

Actually I found this forum trying to figure out why the Window 8 Advanced Startup menu only allows me to do normal boot and ignores all other options. I found this rather suspicous. It also seemed that other people with  a virus infection of their computers had similiar problems. Is such a  problem in your experience not virus related?

[TwinHeadedEagle]

I do not think that some virus will do something so unimportant. I didn't see evidence of some serious virus on your PC that could have done this. You were infected with simple Adware infection.

 

 

Below you will find my thoughts about securing your machine. Go ahead through it, you will benefit from some useful advice about safe computing.

 

 

Recommended reading:

MUST READ - security tips: Computer Security - a short guide to staying safer online. Simple and easy ways to keep your computer safe and secure on the Internet

 

MUST READ - general maintenance: What to do if your Computer is running slowly?

 

 

 

Recommended additional software:

TFC - to clean unneeded temporary files.

Malwarebytes' Anti-Malware - to scan your system from time to time in search for malware.

Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.

McShield - to prevent infections spread by removable media.

CryptoPrevent - to secure yourself from very severe CryptoLocker infection.

Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.

FiheHippo.com Update Checker - to keep your programs up-to-date.

Adblock - to surf the web without annoying ads!

 

 

 

• The following will implement some post-cleanup procedures:

 

=> Please download DelFix by Xplode to your Desktop.

 

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore

Click Run button and wait a few seconds for the programme completes his work.

At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

 

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix

Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

 

My help is free for everybody.

If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:

Thank you!

 

 

 

Stay safe,

TwinHeadedEagle

[turpit]

Thanks again for your help on Saturday afternoon and evening.

 

I thought compromising the Windows Advanced Startup would keep a user from booting anything else than the infected Windows. But that was just a layman's idea to explain the strange behavior.

 

Some beer support is on the way ;-)

 

Cheers,

Martin

[TwinHeadedEagle]

You're very welcome

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!