Solved Get rid of the hit.gemius.pl PUP

Malnutrition · Jul 14, 2019

There is nothing in here that would cause these issues, I suggest you run the all in one repair tool with all default items checked. I'd also suggest you run the checkdisk with the instructions I gave to you.

Malnutrition · Jul 14, 2019

I'll tell you how to put the files back, because I am certain you believe I caused this issue.

Use these instructions at your own risk, because placing anything back that I removed and you will be reinfecting your machine.

bbdra · Jul 14, 2019

Ok, gpo.ini are in C:\Windows\System32\GroupPolicy and C:\Windows\SysWOW64\GroupPolicy now.

Malnutrition · Jul 14, 2019

For FRST........

Open Everything search.
Copy and paste.
C:\FRST\Quarantine\C\Windows\system32\GroupPolicy\GPT.ini.xBAD
Right click on the file and rename.
Then just delete the .xbad
Then copy and paste C:\FRST\Quarantine\C\Windows\system32\GroupPolicy\GPT.ini
into the everything search window.
Drag this file to your desktop.
Then copy C:\Windows\system32\GroupPolicy
Double click that folder then drag the file from your desktop to that folder.

Repeat the same for this file as well.

C:\FRST\Quarantine\C\Windows\SysWOW64\GroupPolicy\GPT.ini.xBAD

For Quick Diag.....

Copy and paste C:\QuickDiag\Quarantine\C\Windows\System\CMSPDIF2.ini .QuickScript
Into the everything search.
Right click rename delete the .QuickScript
Then copy C:\QuickDiag\Quarantine\C\Windows\System\CMSPDIF2 into everything search drag that file to desktop.
Then open C:\Windows\System
Drag that file from desktop to this folder.

Repeat for any file that you like still will not change the issue.

If however you run the check disk as suggested and then run the all in one tool with all default items checked the issue will be resolved. But maybe not if you add these files back to your computer.

Malnutrition · Jul 14, 2019

You can go through and add back every file that I removed then reboot your machine, but once you see that it is nothing that I removed, I'd suggest that you re-run the fixes to put those files back into quarantine, then run the check disk with the instructions I provided, then run the all in one tool with all the boxes checked as suggested.

Malnutrition · Jul 14, 2019

You can send all the files back that you wish like this with QuickDiag. Just delete from this set of instructions what you want to stay deleted, include what you want to be restored.

Quick Diag Fix.

First please create a restore point!
Right click on Quick Diag Run as Admin.
Copy the content of the code box below to your clipboard.
Click on the S within the User Interface of the program.
Then click on Script.
Allow completion.
Post the log created in your next reply.

Code:

backup::
C:\Program Files\AVAST Software\Avast\AvLaunch.exe
C:\Program Files\AVAST Software
C:\Program Files (x86)\IObit
C:\Windows\IObit
C:\Windows\iun6002.exe
C:\Windows\System\CMSPDIF2.ini
C:\Users\Administrátor\AppData\LocalLow\IObit
C:\Users\Administrátor\AppData\Roaming\IObit
C:\ProgramData\AVAST Software
C:\ProgramData\IObit
C:\ProgramData\McAfee
C:\ProgramData\{FA7D5C51-6ACA-0558-7668-96BA089C68BD}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
C:\Program Files\McAfee
C:\Program Files (x86)\Common Files\IObit
C:\Windows\Tasks\ImCleanDisabled
C:\Windows\Tasks\Uninstaller_SkipUac_Administrátor.job
C:\Windows\System32\Tasks\Avast Software
C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrátor
C:\Windows\System32\drivers\aswVmm.sys
C:\Windows\System32\drivers\aswStm.sys
C:\Windows\System32\drivers\aswSP.sys
C:\Windows\System32\drivers\aswSnx.sys
C:\Windows\System32\drivers\aswRvrt.sys
C:\Windows\System32\drivers\aswRdr2.sys
C:\Windows\System32\drivers\aswMonFlt.sys
C:\Windows\System32\drivers\aswKbd.sys
C:\Windows\System32\drivers\aswHwid.sys
C:\Windows\System32\drivers\aswHdsKe.sys
C:\Windows\System32\drivers\aswElam.sys
C:\Windows\System32\drivers\aswbloga.sys
C:\Windows\System32\drivers\aswbidsha.sys
C:\Windows\System32\drivers\aswbidsdrivera.sys

bbdra · Jul 14, 2019

Well, i have released some suspicious files from quarantine and must say you are right, nothing has changed. I have to go to sleep 5 AM here... tommorow ill do fixes and the rest.
btw failed to recover most of the lost files, what a bad day...

Malnutrition · Jul 14, 2019

bbdra said:
btw failed to recover most of the lost files, what a bad day...

Your HDD is failing, or so it would seem from what your own computer is reporting, I highly suggest that you re-run the fixes so that you are not re infecting your machine.

Run the check disk as suggested and run the all in one tool.....

bbdra · Jul 14, 2019

I did everything as you wrote, after a restart, an error occurred while performing repair of windows. Here is a log file: Diagnostika nástroje Oprava spouštění systému a protokol opravy
---------------------------
Počet pokusů o opravu: 1
Podrobnosti relace
---------------------------
Systémový disk = \Device\Harddisk0
Systémový adresář = E:\Windows
Spuštění automatické kontroly = 0
Počet hlavních příčin potíží = 1
Proveden test:
---------------------------
Název: Zkontrolovat aktualizace
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 0 ms
Proveden test:
---------------------------
Název: Test systémového disku
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 0 ms
Proveden test:
---------------------------
Název: Diagnóza chyb disku
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 0 ms
Proveden test:
---------------------------
Název: Test metadat disku
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 969 ms
Proveden test:
---------------------------
Název: Test metadat disku
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 31 ms
Proveden test:
---------------------------
Název: Test cílového operačního systému
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 16 ms
Proveden test:
---------------------------
Název: Kontrola obsahu svazku
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 94 ms
Proveden test:
---------------------------
Název: Diagnostika správce spuštění systému
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 0 ms
Proveden test:
---------------------------
Název: Diagnostika protokolu spuštění systému
Výsledek: Operace byla úspěšně dokončena. Kód chyby = 0x0
Doba trvání = 0 ms
Zjištěná hlavní příčina:
---------------------------
Soubor e:\boot\resources\custom\bootres.dll, který je kritický pro spouštění, je poškozen.
Opravná akce: Oprava souboru
Výsledek: Chyba. Kód chyby = 0x2
Doba trvání = 2781 ms
---------------------------
---------------------------

bbdra · Jul 14, 2019

I forgot say that my whole desktop was cleared again and I cannot log into windows 10 now because of the error

Malnutrition · Jul 14, 2019

Create a new user through the command prompt.

new localgroup administrators UserName /add
net localgroup administrators UserName /add

5 Ways to Access Windows 10 Boot Options Menu | River Net Computers | In Memoriam

in this post, we will show you 5 ways to access Windows 10 advanced boot options to troubleshoot and fix many common Windows 10 problems.

rivernetcomputers.com

Back up your data your HDD is toast.

Malnutrition · Jul 14, 2019

I'd suggest trying to back up your data first. This program will allow that option....I have used this program to fix badly damaged windows before, you put it on a USB or cd/dvd with another machine.....

Then boot with it and allow it to repair windows.

Fix Disabled, Badly Infected and Slow Windows Computers - Try This One, It Works!

Online computer repair for disabled, badly infected and slow Windows computers. Like nothing you have ever seen, We start with a click and safely Fix the problems others can't. Repair your XP, Vista, 7, 8, 10 Computers Today from home!

www.likenewpc.net

bbdra · Jul 14, 2019

New admin acc have been made and activated. What now?

Malnutrition · Jul 14, 2019

Now you can make a backup of your files. I suggest a backup then we will check your HDD further.

Share or Transfer files between User Accounts on Windows 11/10

Learn how to share files & folders between users, or transfer files from one user account to another user account, on a Windows 11/10 PC or laptop.

www.thewindowsclub.com

Malnutrition · Jul 14, 2019

You can also use the Everything Search Engine from the new account, and type in .mp3 to find your music... .mp4 for videos etc...

Common File Extensions

A list of common file extensions and file types that are good to know.

fileinfo.com

bbdra · Jul 14, 2019

Most of important files are backed up, so let's do it fast. Btw here is my Hdd info : (1) KINGSTON SA400S37480G
----------------------------------------------------------------------------
Model : KINGSTON SA400S37480G
Firmware : SBFK71E0
Serial Number : 50026B76823217E4
Disk Size : 480,1 GB (8,4/137,4/480,1/480,1)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 937703088
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version :
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 6917 hod.
Power On Count : 105 krát
Temperature : 36 C (96 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM
APM Level : ----
AAM Level : ----
Drive Letter : D: F:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 __0 000000000000 Počet chyb čtení
09 100 100 __0 000000001B05 Hodin v činnosti
0C 100 100 __0 000000000069 Počet cyklů zapnutí zařízení
94 255 255 __0 000000000000 Specifický pro výrobce
95 255 255 __0 000000000000 Specifický pro výrobce
A7 100 100 __0 000000000000 Specifický pro výrobce
A8 100 100 __0 000000000000 Specifický pro výrobce
A9 100 100 __0 00000000001D Specifický pro výrobce
AA 100 100 _10 000000000021 Specifický pro výrobce
AC 100 100 __0 000000000000 Specifický pro výrobce
AD 100 100 __0 00000010002C Specifický pro výrobce
B5 100 100 __0 000000000000 Specifický pro výrobce
B6 255 255 __0 000000000000 Specifický pro výrobce
BB 100 100 __0 000000000000 Specifický pro výrobce
C0 100 100 __0 00000000000B Unsafe Shutdown Count
C2 _64 _55 __0 002D00140024 Teplota
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C7 100 100 __0 000000000000 Specifický pro výrobce
DA 100 100 __0 000000000000 Specifický pro výrobce
E7 100 100 __0 000000000062 Specifický pro výrobce
E9 100 100 __0 000000001BE3 Specifický pro výrobce
F1 100 100 __0 000000001855 Total Host Writes
F2 100 100 __0 000000001A1A Total Host Reads
F4 100 100 __0 000000000010 Specifický pro výrobce
F5 100 100 __0 00000000002C Specifický pro výrobce
F6 100 100 __0 00000005CC10 Specifický pro výrobce
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3530 3032 3642 3736 3832 3332 3137 4534 2020 2020
020: 0000 0000 0000 5342 464B 3731 4530 4B49 4E47 5354
030: 4F4E 2053 4134 3030 5333 3734 3830 4720 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 1F00
070: 0000 0000 0000 0000 0000 001F 850E 0004 004C 0040
080: 0FF8 0000 746B 7D01 4163 7469 BC01 4163 407F 000A
090: 001E 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 36B0 37E4 0000 0000 0000 0008 4000 0000 5002 6B76
110: 8232 17E4 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 10FF 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 FFFE 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 31A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 64 64 00 00 00 00 00 00 00 09 32
010: 00 64 64 05 1B 00 00 00 00 00 0C 32 00 64 64 69
020: 00 00 00 00 00 00 94 00 00 FF FF 00 00 00 00 00
030: 00 00 95 00 00 FF FF 00 00 00 00 00 00 00 A7 00
040: 00 64 64 00 00 00 00 00 00 00 A8 12 00 64 64 00
050: 00 00 00 00 00 00 A9 00 00 64 64 1D 00 00 00 00
060: 00 00 AA 00 00 64 64 21 00 00 00 00 00 00 AC 32
070: 00 64 64 00 00 00 00 00 00 00 AD 00 00 64 64 2C
080: 00 10 00 00 00 00 B5 32 00 64 64 00 00 00 00 00
090: 00 00 B6 00 00 FF FF 00 00 00 00 00 00 00 BB 32
0A0: 00 64 64 00 00 00 00 00 00 00 C0 12 00 64 64 0B
0B0: 00 00 00 00 00 00 C2 22 00 40 37 24 00 14 00 2D
0C0: 00 00 C4 00 00 64 64 00 00 00 00 00 00 00 C7 32
0D0: 00 64 64 00 00 00 00 00 00 00 DA 00 00 64 64 00
0E0: 00 00 00 00 00 00 E7 13 00 64 64 62 00 00 00 00
0F0: 00 00 E9 13 00 64 64 E3 1B 00 00 00 00 00 F1 12
100: 00 64 64 55 18 00 00 00 00 00 F2 12 00 64 64 1A
110: 1A 00 00 00 00 00 F4 00 00 64 64 10 00 00 00 00
120: 00 00 F5 00 00 64 64 2C 00 00 00 00 00 00 F6 00
130: 00 64 64 10 CC 05 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 FF FF 00 79
170: 03 00 01 00 02 1E 06 1E 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 00 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 94 00 00 00 00 00 00 00 00 00
030: 00 00 95 00 00 00 00 00 00 00 00 00 00 00 A7 00
040: 00 00 00 00 00 00 00 00 00 00 A8 00 00 00 00 00
050: 00 00 00 00 00 00 A9 00 00 00 00 00 00 00 00 00
060: 00 00 AA 0A 00 00 00 00 00 00 00 00 00 00 AC 00
070: 00 00 00 00 00 00 00 00 00 00 AD 00 00 00 00 00
080: 00 00 00 00 00 00 B5 00 00 00 00 00 00 00 00 00
090: 00 00 B6 00 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
0B0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0C0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DA 00 00 00 00 00
0E0: 00 00 00 00 00 00 E7 00 00 00 00 00 00 00 00 00
0F0: 00 00 E9 00 00 00 00 00 00 00 00 00 00 00 F1 00
100: 00 00 00 00 00 00 00 00 00 00 F2 00 00 00 00 00
110: 00 00 00 00 00 00 F4 00 00 00 00 00 00 00 00 00
120: 00 00 F5 00 00 00 00 00 00 00 00 00 00 00 F6 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0D

Malnutrition · Jul 14, 2019

Scan the HDD for errors.

Download HD Tune and save the file.
Install HD Tune and restart it after installation.
Then go to the tab Error Scan , select the hard drive you want to check and press Start .
The check can be quite time consuming take depends on the size of the hard drive check.
Take a screen shot of the result and save it.
Upload it to IMGUR for us. Post the link here.

Do Not tick the quick scan!!

bbdra · Jul 14, 2019

Didnt mentioned I cannot log into win 10 with the new acc, still same error like before. Now I'm working in my xp account. just finished with burning likenewpc cd. What to do first, install hd tune n this system, or continue with like new cd?

Malnutrition · Jul 14, 2019

So long as everything is backed up, then go ahead with the like new program.

bbdra · Jul 15, 2019

The repairs in likenewpc doesn't fix this problem , still same.

Malnutrition

Malnurished Mod

Malnutrition

Malnurished Mod

bbdra

Malnutrition

Malnurished Mod

Malnutrition

Malnurished Mod

Malnutrition

Malnurished Mod

bbdra

Malnutrition

Malnurished Mod

bbdra

bbdra

Malnutrition

Malnurished Mod

5 Ways to Access Windows 10 Boot Options Menu | River Net Computers | In Memoriam

Malnutrition

Malnurished Mod

Fix Disabled, Badly Infected and Slow Windows Computers - Try This One, It Works!

bbdra

Malnutrition

Malnurished Mod

Share or Transfer files between User Accounts on Windows 11/10

Malnutrition

Malnurished Mod

Common File Extensions

bbdra

Malnutrition

Malnurished Mod

bbdra

Malnutrition

Malnurished Mod

bbdra

Search

Search

Solved Get rid of the hit.gemius.pl PUP