Author Topic: Boot Scan File Check?  (Read 2888 times)

0 Members and 1 Guest are viewing this topic.

Offline a_vast

  • Sr. Member
  • ****
  • Posts: 233
Boot Scan File Check?
« on: October 10, 2015, 05:05:15 PM »
Hi,

My laptop opened with a black screen + no internet access today. These are the reports - Avast would not let me access the details of the boot scan :(



Thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Boot Scan File Check?
« Reply #1 on: October 10, 2015, 05:18:57 PM »
Let's have a look...

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Boot Scan File Check?
« Reply #2 on: October 10, 2015, 05:37:48 PM »
As far as I'm aware if there are no detections in the boot-time scan or any scan for that matter, it has no retained data for Detailed report.

Unless you change the report statistics to include OK files, etc. (and you are going to get huge data files), then the only data recorded would be what you already see in the Lower window run time, tested files (numbers, no details) tested folders, data tested and that is pretty much all you would get.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline a_vast

  • Sr. Member
  • ****
  • Posts: 233
Re: Boot Scan File Check?
« Reply #3 on: October 10, 2015, 11:03:19 PM »
Thanks David & Asyn,

The MBAM is already posted, just ran FRST. Have been on and offline all day with my router flashing red several times - it did a red on me after i ran FRST as well, I have no idea what is going on :-o

Offline a_vast

  • Sr. Member
  • ****
  • Posts: 233
Re: Boot Scan File Check?
« Reply #4 on: October 10, 2015, 11:04:38 PM »
This file didn't show - I attach it again

Offline a_vast

  • Sr. Member
  • ****
  • Posts: 233
Re: Boot Scan File Check?
« Reply #5 on: October 10, 2015, 11:20:47 PM »
Here's the aswMBR, first time I used this & FRST.

Offline a_vast

  • Sr. Member
  • ****
  • Posts: 233
Re: Boot Scan File Check?
« Reply #6 on: October 11, 2015, 02:46:54 AM »
Any ideas please - my connectivity is all over the place today, could it even be the ISP perhaps?

Thanks.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Boot Scan File Check?
« Reply #7 on: October 11, 2015, 12:14:57 PM »
Nothing readily apparent just some orphans, I will refresh your network

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
2015-09-20 18:17 - 2015-09-20 18:17 - 00000000 ____D C:\Users\Ric\AppData\Local\{4871F821-B1D8-4C99-B6D9-418F51EAF37D}
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3183433093-2047692126-102195025-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Ric\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that