Random white screen crashes, must reboot; sometimes blue screen

karendanette · Mar 12, 2013

Hi Guys,

Long time, thankfully, but here I am again. Last week, I went through several of the steps in the procedure, but stopped at the point where you ask, "Are you still having problems?" I was giving it a couple of days to see, and yes, I am. I have also read through posts, but since instructions are for each specific user/situation, I am posting a new thread as instructed.

My first question is, do you want the logs that were created before, last week, or should I start fresh today now that I have a thread?

Thanks. Karen

Kestrel13! · Mar 12, 2013

Hi, fresh logs from running procedures now would be great.

karendanette · Mar 13, 2013

Hi,

I have attached the requested logs. I ran them in safe mode.

Thank you! Karen

Kestrel13! · Mar 13, 2013

Re run Hitman and have it delete Potential Unwanted Programs. Then tell me if there is any change or not.

karendanette · Mar 13, 2013

Hi, I'm back to running in normal mode. It's still early, but the problem seems to be solved. I'm puzzled though: the infected files were audio or video files for my work that I downloaded from DropBox. How could those files have become infected?

karendanette · Mar 13, 2013

I came back to my computer after dinner and there was a white screen, so I do still have a problem. What should I do next? Thanks.

Kestrel13! · Mar 14, 2013

Does Hitman find anything now when you rescan with it? Don't fix anything, just let me know, or attach a log.

karendanette · Mar 14, 2013

I've attached the latest log from Hitman.

:confusedNow, there is another interesting change I've noticed this morning: I run an extended desktop but at some point in the last month or so, my laptop monitor started acting strange and eventually went dark. I switched everything to the external monitor and have been using only it, until this morning. Now my laptop monitor is working again. I had assumed this was a completely separate issue and that is why I didn't mention it here, but now I'm wondering if it's actually malware related.:confused Thanks for your help!

Kestrel13! · Mar 14, 2013

Can you uninstall Yontoo Layers Client please and again - let me know how things are running...

karendanette · Mar 14, 2013

It will not uninstall. The dialog box is titled Tarma Installer, and the message is "Setup initialization error".

Kestrel13! · Mar 14, 2013

Use Revo Uninstaller then. Let me know how you get on.

karendanette · Mar 14, 2013

I did use Revo Uninstaller and it appeared to remove Yontoo from several places. However, after that, I re-ran Hitman Pro again, and it found six more traces. I deleted them. Now my laptop screen is dark again. I've attached the Hitman Log.

Kestrel13! · Mar 15, 2013

We'll try one more tool. I think your issues with the screen of your laptop are something you should ask about in another area of the forum, it doesn't appear to be malware related.

http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

karendanette · Mar 15, 2013

Hi, I've attached the log below. Thanks.

Kestrel13! · Mar 15, 2013

If there is still an issue with your screen I suggest you post in the software forum.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Press and hold the Windows key http://forums.majorgeeks.com/chaslang/images/Windows_Logo_key.gif and then press the letter R on your keyboard. This opens the Run dialog box.

Copy and paste the below into the Run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others) and running MGclean.bat did not remove, you can delete these files now.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 6 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

karendanette · Mar 16, 2013

I've been without Internet since last night. Again yesterday when I came back to my pc, it displayed a white screen. I rebooted, went to this site, and before I could do anything, got a blue screen. Booted into safe mode since then, but haven't had Internet since. I realize these things could be coincidental but the timing of these coincidences seems very strange to me. Please tell me what to do next. This post was sent from my iPhone.

Kestrel13! · Mar 16, 2013

As previously said, i think you have alot of NON malware related issues. So do feel free to post in the software forum and/or networking forum.

karendanette · Mar 16, 2013

If you look back through the posts, you did not say I have a lot of non-malware issues. You said if I'm still having problems with my screen, which I took to mean the darkened screen, that it probably was not malware related. I felt that you were going to tell me my system was clean without answering any of my questions, but I needed to check to be sure there was nothing more you could do.

Just because you know how to solve computer problems for free for perfect strangers, doesn't give you the right to be snippy. Thank you for your help and your time.

Kestrel13! · Mar 17, 2013

I was not being snippy. You have seriously misinterpreted there i'm afraid. If you are not happy with my services you can always go off elsewhere for free or paid assistance.

Just because you know how to solve computer problems for free for perfect strangers, doesn't give you the right to be snippy.
Click to expand...

and just because you woke up on the wrong side of bed doesn't mean that I am going to stand there in the line of fire and let you unload.... I gave you help, i checked your machine for malware... and now i am telling you that you need to seek advice in another area of the forum. I've done all I can for you and that's apparently not enough....

karendanette · Mar 17, 2013

Wow! I think the posts speak for themselves. I did thank you for your time and help. Enough said. Have a good evening.

Log in or Sign up

Random white screen crashes, must reboot; sometimes blue screen

karendanette Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Attached Files:

RKreport[1]_S_03122013_02d2148.txt

mbam-log-2013-03-12 (21-55-10).txt

TDSSKiller.2.8.16.0_12.03.2013_22.02.53_log.txt

HitmanPro_20130312_2224.log

MGlogs.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

karendanette Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Attached Files:

HitmanPro_20130314_1033.log

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Attached Files:

HitmanPro_20130314_1540.log

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Attached Files:

JRT.txt

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

karendanette Private E-2