Infected

[jamesost]

So my browsers have been running extremely slowly and crashing a lot while I constantly get popups from Avast that webpages are being blocked from the domain lijit.com. Obviously some sort of malware on here trying to direct urls and page requests.

 

I have MB Pro, MBAE Premium, and Avast on my system and none of them can detect this.

 

Attached FRST logs below.

 

Thanks.

Addition.txt

FRST.txt

[TwinHeadedEagle]

Hello,

Check Disk

• Press the + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• chkdsk C: /r

• You should get a message to schedule Check Disk at next system restart. Please type Y and press Enter.
• All you should do now is to restart your PC and let the Check Disk process finish uninterrupted.

Check Disk report:

• Press the + R on your keyboard at the same time. Type eventvwr and click OK.
• In the left panel, expand Windows Logs and then click on Application.
• Now, on the right side, click on Filter Current Log.
• Under Event Sources, check only Wininit and click OK.
• Now you'll be presented with one or multiple Wininit logs.
• Click on an entry corresponding to the date and time of the disk check.
• On the top main menu, click Action > Copy > Copy Details as Text.
• Paste the contents into your next reply.

[jamesost]

Ok never before have I encountered so many issues with trying to run a disk check.

 

First, after about 10 minutes of the Check Disk running, my monitor goes into Power Save Mode and will not come back on. I tried unplugging it and everything and upon turning it back on it just immediately says Power Save Mode and goes into that mode. So I have no idea when and if the Check DIsk task finishes running.

 

So I just left it alone for about 4 hours. Rebooted the machine (since I have to to turn the monitors back on). Then I'm met with a ton of error popups (4 to be exact).

 

ADOBEC~1.EXE - Corrupt File - The file or directory C:\$Secure is corrupt and unreadable. Please run the Chkdsk utility.

 

Acrobat Distiller - Unable to create a temporary folder. Error: 1392 - The file or directory is corrupted and unreadable.

 

NSIS Error - Error writing temporary file. Make sure your temp folder is valid.

 

Dell Dock - The Dell Dock's language file, which is necessary for its operation, has failed to load. Please check your Dell Dock installation. (and my Dell Dock did not load as it usually does).

 

So I closed all the windows and tried to load the event viewer to see about the log file.

 

That brought up another error.

 

Event Viewer - MMC has detected an error in a snap in and will unload it.

 

System.BadImageFormatException

 

Which you have two options: (1) Report this error to Microsoft, and then shut down MMC. or (2) Unload the snap in and continue running (which I select).

 

Then the Event Viewer just loads a window with a red x and says MMC could not create the snap-in.

 

CLSID: FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}

 

None of these errors had ever appeared until after I tried running the Check Disk task and I had done a reboot earlier today. I'm about to reboot again just to see what happens.

[jamesost]

Yeah after the new reboot all u get is the windows loading icon then a quick flash of a blue screen and then it says windows failed to load and gave me two options 1) run repair or 2) load windows normally. Option two just repeats the icon loading and quick blue screen flash then back to failed loading options screen. So I try repair and after about 5 min of running my monitor does the same stupid enter power save mode and shuts off so I can't see wtf is going on. It won't come back on without a restart.

Yikes this has escalated to very bad in a hurry.

[jamesost]

Well I let it just sit there to finish the repair even though monitor was off and it restarted on its own (I guess after repair finished). This time it booted fine to the accounts login screen and I logged in to my admin account. The account loaded fine with no error pop up messages. The dell dock loaded too this time as normal. Loaded the event viewer this time and I followed the directions but after the wininit filter there were 0 logs showing.

 

Should I try to run the Check Disk again (even though my computer monitor is sure to go into the forever Power Save Mode again for whatever reason) and let it sit even longer?

[TwinHeadedEagle]

Yes, please run it. Check disk should commence after you restart your PC.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

[Maurice Naggar]

Thread re-opened per request.

[jamesost]

Sorry TwinHeadedEagle,

 

I had to go out of town on a business trip and got back Sunday night. I will post try the Check Disk again in the morning and post the results. Thanks.

[jamesost]

So I'm unable to run check disk.

 

I get this when I run the chkdsk from the command line...

 

 

I hit Y. Then after the restart it says this and proceeds to load the user profiles screen afterwards...

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

 

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.

  (XP users click run after receipt of Windows Security Warning - Open File).

• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please upload them into your next reply.

[jamesost]

^{New logs attached.}

Addition.txt

FRST.txt

[TwinHeadedEagle]

Did you recently perform some installation or upgrade?

[jamesost]

Not that I'm aware of. Recently renewed and updated a license file to Avast, but that's all I can remember.

[TwinHeadedEagle]

Can you remove Avast and then try to perform Check disk.

 

You can use this utility:

 

https://www.avast.com/uninstall-utility

[jamesost]

Well I uninstalled Avast and I still cannot get a chkdsk to run without my monitor going into Power Save mode midway through and refusing the wake up without a reboot. I've done some searching on Google and a few people have run in circles with this issue and Dell, but I have yet to find anyone that found a fix for it. So I guess for now I'll go explore that and since it is more of a hardware/software issue I'll let you attend to other people and I'll come back once I have resolved this issue. Appreciate the help so far.

[TwinHeadedEagle]

Okay, keep me updated.

[jamesost]

Will do. Just FYI, uninstalling Avast did get chkdsk to start running. So I guess the recent Avast install was causing the error in post #10 of this thread. Odd and interesting lol.

[TwinHeadedEagle]

Can you get Check Disk report I asked in post #2 ?

[jamesost]

No. It runs. But after about 10 minutes the monitor goes into some Power Save crap (even with all power save mode settings turned off) and wont come back on without a manual reboot. I'm ordering a new PSU to see if that is causing a problem (suggestion from another forum).

 

Wondering if we can skip that step and check other things for now.

 

My MBAE is running, but my MBAM wont. I have a premium account but when I open MBAM it says no longer valid (which isn't true). I go to enter in my key and id and once I hit activate it just tells me I need an Internet connection to activate (and I have one). So then I just go back to the dashboard and hit update and I get a MBAM has stopped working error and it crashes. I try to scan and same thing....MBAM has stopped working and crash.

 

Any ideas on that?

[TwinHeadedEagle]

Can you get Check Disk report I asked in post #2 ?

[jamesost]

I keep answering that question, but maybe I'm not being clear enough.

 

No I cannot get it. I can start running the report, but it wont finish because my monitor goes into Power Saving Mode 10 mins into the Check Disk scan and I have left the computer sitting all night long and when I come back in the morning the monitor still will not wake up so I have to manually reboot the computer. When I go to check the logs in the event viewer and filter them by Wininit there are 0 reports showing. So for whatever reason the scan isn't finishing, but if it's giving an error I wouldn't know cause my monitor wont come on after it goes into a Power Saving Mode after the scan has started.

 

I'm getting a new PSU to see if that will help with that hardware issue, but until it arrives I will not know.

 

My question was is there anything we can do to figure out why my MBAM isn't working properly without having to do a Check Disk scan? Is there something on the computer preventing it from running properly?

 

Thanks and sorry for not being clear enough.

[TwinHeadedEagle]

I am sorry, I didn't understand well.

 

 

I would really like to perform Check Disk, because it will check file system structure, and it could tell us if everything is fine or something needs to be fixed.

 

Let's try to run Check Disk in read-only mode to see what is going on:

 

 

Command Prompt

• Press the + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• chkdsk C: > %userprofile%\Desktop\CheckDiskReport.txt

It should be done in few minutes. When done, please attach CheckDiskReport.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!