Groan… yup. I just tried to run aswmbr again & while last time it opened for me, started downloading Avast virus updates(or some such), then when I hit run, it crashed, this time, it just crashed as soon as I clicked on the program. Interestingly tho, you said the Windows update apparently hadn’t worked, and I have restarted the computer since, but this time when it restarted, I got a different lock screen, then got the ‘Get even more out of Windows’, as if it had just updated.
So… yes please, tell me your next suggestion for eradicating the beast!
And I had installed Avast on my daughter’s machine too, which has been having random freezing & glitching issues, so tried to remove it from hers too, but it also shows as still there, so will have to start another thread on that too! As it’s not crashing on her tho, which subforum do you suggest I put that one?
Explained at the start of thread, first thought virus, so went to do prework for a thread in that section(it was merged into this thread). Asmwb is malwarebytes & thàt caused a BSOD, so just tried it again…
Had BSOD come up a few times over the last couple of weeks. Last time was when I tried to do the ASWMB prework for this thread. BSOD said ‘Driver IRQL not less or equal’ . Then today, I was just reading emails(online Yahoo) & it crashed on me, giving message; Faulty Hardware Corrupted Page.
Help please??
Sorry, had no idea of anything being malware related and having never heard of aswmbr I needed to ask.
If this aswmbr has not long caused a BSOD can you upload the dmp for us, please use the method below for doing so;
Copy any dmp files from C:\Windows\Minidump onto the desktop.
Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.
Upload the zip folder using the Attach button, bottom left of the dialogue input box
Avast again, I see that you previously post on the malware removal thread regarding this issue, unfortunately we are going to have to refer you back there to resolve this, Avast is embedded in your system which is becoming a more and more common occurrence and only the malware experts have the tools, ways and means to eradicate it.
Hang fire here until a security expert moves your thread.
Have already asked a security expert to take a look for us, different time zones means that my PM was post in the middle of the night where our colleague is so there will be some delay in him replying.
Something that we can try why your thread is still on this forum;
Post an Autoruns log for us, see here
1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the “Autoruns.exe”.
3: Click on the "Hide Signed Microsoft and Windows Entries” option.
4: Go to File then to Export As or Save in some versions.
5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.
Hi, didn’t see last replies earlier sorry. Attached is the autoruns txt - the options tab was blanked out & I couldn’t see anywhere else to exclude windows entries…
Hello Loosie, I’m Gus and will try to help you. Please read the following and if you agree we can proceed.
[ul]
[li]Please let me know if you are receiving help at another forum on this issue so I can close this thread?[/li][li][COLOR=rgb(250, 197, 28)]Please agree to stay with me till we give you the all clear[/li][li][COLOR=rgb(184, 49, 47)]Please do not run any tools other than the ones we ask you to[COLOR=rgb(184, 49, 47)], some can be very dangerous and actually make things worse.[/li][li]Should any tools we ask you to use [COLOR=rgb(184, 49, 47)]give you a security warning you can safely allow them to run, they have all been proven safe.[/li][li]Download any requested tools and make sure to [COLOR=rgb(41, 105, 176)]run them from the desktop, unless specifically instructed otherwise.[/li][li]Please do not install any other software whilst we cleanup, this can complicate the process, making cleaning impossible.[/li][li]With malware it can be impossible to determine the outcome, and whilst we will work to a positive result [COLOR=rgb(250, 197, 28)]we strongly recommend you backup all your personal files and folders before we begin.[/COLOR][COLOR=rgb(250, 197, 28)][/li][li][COLOR=rgb(184, 49, 47)]Do remember the fixes used to clean your machine are meant for your computer only, and the use on another computer may cause serious damage to that machine.[/li][li]Finally, [COLOR=rgb(184, 49, 47)]please allow me a little time to analyse any logs I request from you, I know you want your computer cleaned yesterday but please remember we are all volunteers here and we do have a life that sometimes takes us away from computers. If your thread gets closed due to no response from you you can PM me or a staff member and have it reopened. Should you not hear from me within 48 hours please PM me.[/li][li]That’s the last of the fine print so lets get under way[/li][/ul]
We need a log from Farbar Recovery Scan Tool (FRST) to examine your system.
Please download the FRST 32 bit or FRST 64bit version to suit your operating system.[COLOR=rgb(250, 197, 28)] It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu"
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Firstly, thanks, no one else is helping me with this problem - PCHF has been a lifesaver in the past & is my only go to now! Probably about time for another donation to you guys actually.
I did a FRST scan when I first posted about this, thinking it was malware, but below is another I’ve just done now. I tried to do an ASWMBR scan too, when I first tried to do malware ‘prework’ for here, but that triggered the blue screen crash. Details above.
FRST scan;
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-04-2020
Ran by Anya (administrator) on DESKTOP-EIUB3MN (Dell Inc. Latitude E6330) (27-04-2020 13:57:22)
Running from C:\Users\Anya\Desktop\PC prework
Loaded Profiles: Anya (Available Profiles: USER & Anya & Administrator)
Platform: Windows 10 Pro Version 1909 18363.778 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additions txt;
[HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-04-2020
Ran by Anya (27-04-2020 14:00:58)
Running from C:\Users\Anya\Desktop\PC prework
Windows 10 Pro Version 1909 18363.778 (X64) (2020-04-17 03:03:07)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
Error: (04/27/2020 12:51:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (04/27/2020 11:50:45 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (04/27/2020 11:50:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3875
[HEADING=1]System errors:[/HEADING]
Error: (04/27/2020 08:28:18 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error:
Unable to access a key.
Error: (04/27/2020 08:28:18 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: The Peer Name Resolution Protocol cloud did not start because the creation of the default identity failed with error code: 0x80630203.
Error: (04/23/2020 11:36:01 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (04/23/2020 08:16:05 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000012b (0xffffffffc00002c4, 0x0000000000000975, 0x00000197cbb88560, 0xffff81815fa64000). A dump was saved in: C:\WINDOWS\Minidump\042320-49593-01.dmp. Report Id: d7ceac61-13f4-496b-a28a-dfb627bdd6b6.
Error: (04/23/2020 08:16:05 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 8:10:23 PM on ‎4/‎23/‎2020 was unexpected.
Error: (04/22/2020 11:16:26 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.
[HEADING=1]Windows Defender:[/HEADING]
Date: 2020-04-23 22:38:37.106
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {6C7E722E-8E6A-4A8B-A336-10DB024A0425}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-04-19 10:36:15.601
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {D15BEAA7-4604-4766-976D-9ADAE1CB7DB1}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-04-19 10:19:31.878
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {E7B28714-A81A-47F2-8448-F464F114E828}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2020-04-19 09:34:10.267
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
Date: 2020-04-19 09:34:05.031
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
==================== Memory info ===========================
BIOS: Dell Inc. A20 02/21/2018
Motherboard: Dell Inc. 0HDT4R
Processor: Intel(R) Core™ i3-2350M CPU @ 2.30GHz
Percentage of memory in use: 49%
Total physical RAM: 8095.64 MB
Available physical RAM: 4126.38 MB
Total Virtual: 8607.64 MB
Available Virtual: 4007.07 MB
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.
Tweet
[/li][/ul]
Comment