Author Topic: Black screen with cursor  (Read 5384 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Black screen with cursor
« on: August 20, 2014, 02:40:55 PM »
Hello.

Well, looks like this problem is very common, right?

Never had any problems with Avast before. But now, when I tried to install the new client... I can't start Windows (XP SP2 64-bit) anymore: just got a black screen with a (functional) mouse cursor on it.
Using Avast Free here. My NVIDIA drivers already updated.

When I uninstall Avast (in Windows' Safe Mode), Windows works properly. Doesn't look like a disk or Windows problem: it's Avast.
Also, when I try to install Avast through the online setup, the installer freezes on "Finishing Setup" and never really finishes it. So I had to download the offline installer.

I read somewhere it could be because Avast is blocking explorer (the Windows' file manager). Is that correct?

Well, I attached FRST.txt - as I can see, people always ask for it.

Hope you can help me.

Thanks!
« Last Edit: August 20, 2014, 03:12:15 PM by Phoinx »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #1 on: August 20, 2014, 03:38:00 PM »
I believe that there are some problems with 64bit XP's as they are not a mainstream OS

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
 
HKLM-x32\...\Winlogon: [Userinit] userinit [X]
HKLM\...\Command Processor:  <======= ATTENTION
HKLM-x32\...\Command Processor:  <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx [2011-09-05]
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

REDACTED

  • Guest
Re: Black screen with cursor
« Reply #2 on: August 20, 2014, 03:54:00 PM »
Hi, essexboy!

Thank you for your attention!

Here is the log:

Code: [Select]
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Administrator at 2014-08-20 10:51:18 Run:2
Running from C:\PHOINX\PROGRAMAS\Limpeza\Avast\Farbar Recovery Scan Tool
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Winlogon: [Userinit] userinit [X]
HKLM\...\Command Processor:  <======= ATTENTION
HKLM-x32\...\Command Processor:  <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx [2011-09-05]
EmptyTemp:
CMD: bitsadmin /reset /allusers

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => Value was restored successfully.
HKLM\Software\Microsoft\Command Processor\\AutoRun => value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Command Processor\\AutoRun => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif" => Key deleted successfully.
C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoods.crx => Moved successfully.

=========  bitsadmin /reset /allusers =========

'bitsadmin' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========

EmptyTemp: => Removed 632.8 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #3 on: August 20, 2014, 04:46:29 PM »
Could you see if the same problem occurs now

REDACTED

  • Guest
Re: Black screen with cursor
« Reply #4 on: August 20, 2014, 05:13:44 PM »
It does. =[

But... Should I do this with Avast installed? If that's the case,  could only do that while in Safe Mode.
What I did was uninstall Avast, then FRST Fix and after that installed Avast again - and the problem continues.
« Last Edit: August 20, 2014, 09:00:41 PM by Phoinx »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #5 on: August 20, 2014, 09:05:53 PM »
I will need to have a little search on this to see if the xp64 was resolved

REDACTED

  • Guest
Re: Black screen with cursor
« Reply #6 on: August 21, 2014, 04:25:19 PM »
Well, I tried it both ways, with no luck.

I also tried the Avast removal tool (just to be sure): no solution using that too.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #7 on: August 21, 2014, 04:33:19 PM »
It appears that there are some unidentified problems with some XP64 bit, but as it is not all then it is proving difficult to track down the problem.  As of yet I have been unable to find a solution
But I will keep looking

REDACTED

  • Guest
Re: Black screen with cursor
« Reply #8 on: August 21, 2014, 04:52:20 PM »
Could it be related to a previous installation of another anti-virus I did before?
I installed Kaspersky to give some orientation to a friend using it. But after that I uninstalled it - and used the specific removal tool and CCleaner to clear it all.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #9 on: August 21, 2014, 04:59:46 PM »
That is a possibility as there are some drivers remaining

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637784 2014-04-11] (Kaspersky Lab)
R3 klim5; C:\Windows\System32\DRIVERS\klim5.sys [35632 2011-03-10] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [21520 2009-11-02] (Kaspersky Lab)
2014-07-25 13:56 - 2014-04-11 15:37 - 00637784 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2014-07-25 13:56 - 2012-08-30 22:26 - 00235960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klogon.dll
2014-07-25 13:56 - 2011-10-20 11:48 - 00458032 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2014-07-25 13:56 - 2011-10-20 11:48 - 00013616 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl2.sys
2014-07-25 13:56 - 2011-03-11 12:43 - 00035907 _____ () C:\WINDOWS\system32\Drivers\klop.dat
2014-07-25 13:56 - 2011-03-10 18:34 - 00035632 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klim5.sys
2014-07-25 13:56 - 2009-11-02 20:27 - 00021520 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

REDACTED

  • Guest
Re: Black screen with cursor
« Reply #10 on: August 21, 2014, 05:17:13 PM »
Here it is:

Code: [Select]
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Administrator at 2014-08-21 12:02:29 Run:4
Running from C:\PHOINX\PROGRAMAS\Limpeza\Avast\Farbar Recovery Scan Tool
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [637784 2014-04-11] (Kaspersky Lab)
R3 klim5; C:\Windows\System32\DRIVERS\klim5.sys [35632 2011-03-10] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [21520 2009-11-02] (Kaspersky Lab)
2014-07-25 13:56 - 2014-04-11 15:37 - 00637784 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2014-07-25 13:56 - 2012-08-30 22:26 - 00235960 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klogon.dll
2014-07-25 13:56 - 2011-10-20 11:48 - 00458032 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2014-07-25 13:56 - 2011-10-20 11:48 - 00013616 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl2.sys
2014-07-25 13:56 - 2011-03-11 12:43 - 00035907 _____ () C:\WINDOWS\system32\Drivers\klop.dat
2014-07-25 13:56 - 2011-03-10 18:34 - 00035632 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klim5.sys
2014-07-25 13:56 - 2009-11-02 20:27 - 00021520 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klmouflt.sys
EmptyTemp:
CMD: bitsadmin /reset /allusers
*****************

KL1 => Service not found.
kl2 => Service not found.
KLIF => Service not found.
klim5 => Service not found.
klmouflt => Service not found.
"C:\WINDOWS\system32\Drivers\klif.sys" => File/Directory not found.
"C:\WINDOWS\system32\klogon.dll" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\kl1.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\kl2.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klop.dat" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klim5.sys" => File/Directory not found.
"C:\WINDOWS\system32\Drivers\klmouflt.sys" => File/Directory not found.

=========  bitsadmin /reset /allusers =========

'bitsadmin' is not recognized as an internal or external command,
operable program or batch file.

========= End of CMD: =========

EmptyTemp: => Removed 464.2 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

As you can see, nothing found...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Black screen with cursor
« Reply #11 on: August 21, 2014, 06:06:34 PM »
OK back to the drawing board