Jump to content

Windows 10 keeps restarting after malware scan

Benjie
 Share

Recommended Posts

  • Replies 242
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

JSntgRvr
JSntgRvr

Won't touch those with a ten feet pole. Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same

JSntgRvr
JSntgRvr

Logs look clear.   Check the Security Center and the Device Manager. Are there any problems?   Let me know the overall performance of the computer.

JSntgRvr
JSntgRvr

After a good rest, use this application to remove tools used and quarantined items (Except for Malwarebytes Antimalware): Please download KpRm by Kernel-panik and save to your Desktop. Clic

Posted Images

Benjie

Benjie

Posted
  • Author
Posted

Hello JSntgRvr

The laptop booted as seen here: photos attatched

 

Should I immediately update you here if I notice something different about how the laptop is functioning? Maybe for the next couple of days?

 

I would like to ask about the malwares that caused this in the first place - have they already been removed? Next would be regarding the problem starting StartupCheckLibrary.dll shown in the last photo - will it be a problem in the future?

 

Lastly, as of now, I would like to say thank you to you from the bottom of my heart. I have actually contemplated about just reformatting my laptop and essentially deleting all my files to fix this. But you have done well in being patient in guiding me to a solution. JSntgRvr thank you.

 

20220608_031137.jpg

20220608_031145.jpg

20220608_031327.jpg

20220608_031514.jpg

20220608_031659.jpg

20220608_031710.jpg

Link to post
Share on other sites
JSntgRvr

JSntgRvr

Posted
Posted

Lets check the computer. Run FRST64 in Normal Mode (You can copy and paste your copy from the USB to the desktop). Two files will be produced, FRST,txt and Addition.txt. They will be saved in the same location FRST64 is ran (the desktop).

 

Attach those files to your reply.

Link to post
Share on other sites
Benjie

Benjie

Posted
  • Author
Posted

Followed through with the restart, here is the fixlog file:

Thank you for today JSntgRvr! I've been awake for almost 22 hours here and its morning again already. I'll be sleeping for a bit and follow your next instructions as soon as I wake up. 

Thank you very much for today! Lifesaver.

Fixlog.txt

Link to post
Share on other sites
JSntgRvr

JSntgRvr

Posted
Posted

Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see.

Fixlist.txt

To be in the safe lane, remove and reinstall Malwarebytes Antimalware. Once done, perform a full scan and post its report. Instructions here.

Link to post
Share on other sites
Benjie

Benjie

Posted
  • Author
Posted
5 hours ago, JSntgRvr said:

Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see.

Fixlist.txt 1.43 kB · 0 downloads

To be in the safe lane, remove and reinstall Malwarebytes Antimalware. Once done, perform a full scan and post its report. Instructions here.

I have done the instructions given as seen in these photos:

 

The Scan report is named scanreport.txt and I don't know what the mbst-clean-results.txt is, but it was also generated in my desktop.

 

With that said, I have not quarantined the found threat scan results as I am afraid that it will lead to the endless reboot again. But I have not closed the scan results window as seen on the last photo as I will await your instructions if I should quarantine them or not.

 

Thank you and hope to hear from you soon.

20220608_173508.jpg

20220608_173653.jpg

20220608_173829.jpg

20220608_173834.jpg

20220608_174529.jpg

scanreport.txt mbst-clean-results.txt

Link to post
Share on other sites
Benjie

Benjie

Posted
  • Author
Posted

Also here is the Fixlog generated by this fixlist.

5 hours ago, JSntgRvr said:

Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see.

Fixlist.txt 1.43 kB · 0 downloads

To be in the safe lane, remove and reinstall Malwarebytes Antimalware. Once done, perform a full scan and post its report. Instructions here.

 

Fixlog.txt

Link to post
Share on other sites
JSntgRvr

JSntgRvr

Posted
Posted (edited)

Sorry for the delay. Run Malwarebytes antimalware and quarantine those detections. The folder C:\PROGRAM FILES\KMSPICO is a hack tool to activate Windows. It should not be in your computer.

Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see.

 

Fixlist.txt

Edited by JSntgRvr
Link to post
Share on other sites
Benjie

Benjie

Posted
  • Author
Posted

I have done the instructions said here as seen in these photos but can I ask what happens if the threats are quarantined? Are they removed completely from my computer or are they still there?

 

Also here is the fixlog file from the new fixlist file: but as FRST was finishing Avast popped this window up (last photo). What should I do? Is something wrong?

7 minutes ago, JSntgRvr said:

Sorry for the delay. Run Malwarebytes antimalware and quarantine those detections. The folder C:\PROGRAM FILES\KMSPICO is a hack tool to activate Windows. It should not be in your computer.

Download the enclosed file.   Save it next to FRST64. Run FRST64 as you did before and  click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see.

 

Fixlist.txt 1.62 kB · 1 download

 

20220609_004244.jpg

20220609_004307.jpg

20220609_004343.jpg

20220609_005238.jpg

Fixlog.txt

Link to post
Share on other sites
Benjie

Benjie

Posted
  • Author
Posted

Also this folder was created just before Avast took hold of FRST.

 

I would like to say thank you again for your help. It is currently very late from where I'm from and since last time's session made me last the whole night up until morning - my body feels a bit tired and sick, so I hope you won't mind if I'd sleep for the next 6 to 8 hours.

 

With that said I'd follow your instructions immediately after I wake up and hopefully I could still reply to you while you are still active.

Again thank you and hope to hear from you soon.

165471105681199261261371316840.jpg

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.