Ran malwarebytes on Windows 10, now won't boot

[taj7334]

Computer, with factory installed Windows 10, had adware popups, so I installed Malwarebytes.  While it was scanning I left the computer unattended about 1 hour. When I came back to it the power button was flashing, screen was dark; appeared to be asleep.  I could not get it to wake with the mouse or keyboard.  I held down the power button until it powered off. After 1 minute I turned it back on and it whirrs, but nothing comes up on the monitor and the power button continues to blink.  I have tried restarting it and hitting F8 to try a SafeMode start, but it's not booting to anything - still a black screen.

 

The Farbar Recovery Scan Tool link says I can't use it on my computer (Windows 10).  (I have two of the exact same computer, bought for twins going to college this fall, and tried to download the recovery tool onto the one that works so I could transfer to a thumb drive.)

 

The computer is a Lenovo, 64 bit purchased new in late November 2015.  The 90 day "warranty" from Best Buy just ran out last week.  My son likes to play video games online and this is the second time McAfee has let adware through onto his computer.

 

Because I can't get beyond a black screen there is nothing to send in the way of a log (couldn't run Farbar anyway).

 

I do not have an original boot disk since it was factory install and I did not make a recovery disk when we purchased it - bad decision I think.

 

I appreciate any help.

[TwinHeadedEagle]

Hello,

    

 

They call me TwinHeadedEagle around here, and I'll try to help your with your issue.

 

     

    

Before we start please read and note the following:

• We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.
• Note that we may live in totally different time zones, what may cause some delays between answers.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

 

 

 

  Rules and policies

 

We won't support any piracy.

That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

 

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

 

 

---

Do you have USB Flash device at hand? Let me know if you can boot to Advanced Startup options?

http://www.tenforums.com/tutorials/2294-advanced-startup-options-boot-windows-10-a.html

---

[taj7334]

I have several USB flash drives.  Do you want me to try Option 6? 

I have to get to work, so may not get back to you until after 7:00 pm Central time.

[TwinHeadedEagle]

Yes, you can try option #6. Let me know of the outcome.

[taj7334]

Option 6 did not work.  I tried turning it off and on 8 times.  As soon as it's "on" the light is blinking and the monitor stays black.  I have checked the monitor and it works fine. 

Would it work to make a recovery disk/USB from the duplicate computer I have? (Same computer box, Windows 10, etc)

[TwinHeadedEagle]

Yes, you can try that.

[taj7334]

I tried to make a recovery disk and it wouldn't "find" the USB drive.  I tried it with and without the box checked "Back up systems to the recovery drive", tried two different new USB thumb drives, 16 GB and 32 GB, and tried each before and after the point where it says insert a USB drive.  I waited more than 5 minutes and the drive never popped up and tried all options multiple times.  It is reading the thumb drives, they show up in "my computer".  I also started the process on my old computer (windows 7 updated to 10) and the USB shows up fine.  They are both SanDisk drives. Is it something with the Lenovo computers or the SanDisk?

[TwinHeadedEagle]

Ok, we will burn required tools on your USB.

 

 

Please download the following tools on your Desktop:

• Farbar Recovery Scan Tool x64
• Rufus
• WIN10586PESE_x64.ISO

• Insert your USB and then start Rufus
• Select the ISO file WIN10586PESE_x64.ISO on the desktop via the ISO icon.

• Under the Device select your USB Flash.
• Press Start
• When the process is complete, copy Farbar Recovery Scan Tool x64 on this USB

• Insert USB into infected computer and power on the computer. Now you need to set your computer to boot from USB. In order to do that, follow this guide.
• When you boot from USB, you will see image like this:

• Click Troubleshoot

In the next window, click Advanced options and select Command Prompt.

• In the command window type in notepad and press Enter.
• When notepad opens, click File and select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst64.exe and press Enter.

Note: Replace letter e with the drive letter of your flash drive.

• The tool will start to run. When the tool opens click Yes to disclaimer.
• Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please attach it to your reply.

[taj7334]

Not sure why, but my son decided to unplug the computer from the powerstrip.  When he plugged it back in the computer booted just fine.  The Malwarebytes has removed the adware problem that started all this mess.

I am still unable to get it to make a recovery disk.  Would it be best to contact Microsoft for help on creating a recovery disk or would it work to do the Farbar and Rufus steps mentioned above?

[TwinHeadedEagle]

Are you able to boot normally now?

[taj7334]

Yes, it has booted up normal the last two times.  Thank you for your help.  We'll try to get Microsoft to help with making a recovery drive.

Thank you.

[TwinHeadedEagle]

If you can boot, you can use Farbar Recovery Scan Tool from your Windows, no need for recovery drive.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
   
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[taj7334]

In the one week's time my son has had his computer running again he "downloaded" 5 Trojan files.  I had to run the Malwarebytes again before trying the recovery tool.

Here are the scan files.

Thank you.

FRST.txt

Addition.txt

[TwinHeadedEagle]

Yes, you were infected with DNS Unlocker infection. We will remove all remaining threats.

 

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

 

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
• (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt. 

Please upload it to your reply.

 

fixlist.txt

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!