Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: BORN Ontario child registry data breach affects 3.4 million people

Featured Deal: Get started in AI or make your own with this $19.97 course bundle

Latest Buyer's Guide: Best VPNs to unblock Stan outside Australia in 2023

Windows security will not scan, threat service has stopped. Restart it now.

Started by kdubb666 , Sep 02 2023 04:13 PM

Prev

Page 3 of 7
1
2
3
4
5

Next
»

Please log in to reply

93 replies to this topic

#31 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 12 September 2023 - 08:39 AM

Let's hunt for those files.

Please do this.

===================================================

Farbar Recovery Scan Tool Search

--------------------

Launch FRST
Copy and paste the following in the Search: box

setuperr.log;setupact.log;PreGatherPnPList.log

Click Search Files button
When completed click OK and a Search.txt document will open on your desktop
Copy and paste the contents of that document your reply

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.

Search.txt

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

Back to top"> Back to top

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#32 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 09:00 AM

Farbar Recovery Scan Tool (x64) Version: 11-09-2023

Ran by kelle (12-09-2023 08:55:05)

Running from C:\Users\kelle\OneDrive\Desktop

Boot Mode: Normal

================== Search Files: "setuperr.log;setupact.log;PreGatherPnPList.log" =============

C:\Windows\setupact.log

[2022-03-01 21:50][2023-09-12 08:03] 000320259 _____ () A9D996C14C75C4EEB9564298CFBF8F79 [File not signed]

C:\Windows\setuperr.log

[2022-03-01 21:50][2023-09-08 11:42] 000000000 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Windows\System32\Sysprep\Panther\setupact.log

[2022-09-05 06:23][2022-09-05 06:23] 000012735 _____ () A39988B501EEC90EDE4598505108F066 [File not signed]

C:\Windows\System32\Sysprep\Panther\setuperr.log

[2022-09-05 06:23][2022-09-05 06:23] 000000000 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Windows\System32\LogFiles\setupcln\setupact.log

[2022-02-09 22:30][2023-09-11 16:14] 007662968 _____ () D7C8F31C5554145342314F1EBD7842D9 [File not signed]

C:\Windows\System32\LogFiles\setupcln\setuperr.log

[2022-02-09 22:30][2023-09-11 16:14] 000609569 _____ () 1FC778BC6D01EC6160BF51DFEDFE3569 [File not signed]

C:\Windows\Panther\UnattendGC\setupact.log

[2022-02-09 22:24][2023-09-12 08:06] 000589230 _____ () 9285ABF7025928E8D012653647758041 [File is in use]

C:\Windows\Panther\UnattendGC\setuperr.log

[2022-02-09 22:24][2022-02-09 22:24] 000000000 _____ () D41D8CD98F00B204E9800998ECF8427E [File is in use]

C:\Windows\Panther\NewOs\Panther\setupact.log

[2023-09-07 12:25][2023-09-06 17:16] 000146926 _____ () E6B84D0D236AF9B00C244B332C27F965 [File not signed]

C:\Windows\Panther\NewOs\Panther\setuperr.log

[2023-09-07 12:25][2023-09-06 17:16] 000003208 _____ () 381681535534FA4290482C4385808F1D [File not signed]

C:\Windows\Logs\SetupSnapshotCleanupTask\setupact.log

[2023-09-07 12:00][2023-09-08 12:25] 000001923 _____ () 85FDB33F25FACA3B773D0058EDA01E29 [File not signed]

C:\Windows\Logs\SetupSnapshotCleanupTask\setuperr.log

[2023-09-07 12:00][2023-09-07 12:00] 000000000 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\$Windows.~WS\Sources\Panther\setupact.log

[2023-09-07 12:25][2023-09-07 12:27] 000044669 ____C () C708A7DF8126B91D3A784103ECA21EFC [File not signed]

C:\$Windows.~WS\Sources\Panther\setuperr.log

[2023-09-07 12:25][2023-09-07 12:27] 000001940 ____C () 267D8D54CE0C2139E88620B444168B03 [File not signed]

C:\$WINDOWS.~BT\Sources\Panther\setupact.log

[2023-09-08 11:43][2023-09-08 14:18] 028286944 ____C () 398C723341EB64D02B7399054B199B60 [File not signed]

C:\$WINDOWS.~BT\Sources\Panther\setuperr.log

[2023-09-08 11:43][2023-09-08 12:31] 000092522 ____C () 440FE6AFE842DCF578BA32222EB00C14 [File not signed]

C:\$SysReset\Logs\setupact.log

[2023-09-01 19:23][2023-09-01 19:24] 000115011 _____ () 160163E432D49CA0D6F2BC3895E49D92 [File not signed]

C:\$SysReset\Logs\setuperr.log

[2023-09-01 19:23][2023-09-01 19:24] 000002070 _____ () FABCCD5EC5691A6203A2FD013B500713 [File not signed]

====== End of Search ======

Back to top"> Back to top

#33 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 09:19 AM

Also another tidbit of information that I think is included in the problem, I had a SteelSeries mouse that just stopped working. I bought a new one, same brand different model. It also does not work (but works on another pc). I have tried updating the drivers, but nothing is working. I think it is maybe due to part of windows being corrupt or something. Anyway, just FYI.

Back to top"> Back to top

#34 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 12 September 2023 - 02:51 PM

Thanks for your continued patience.

Please do this.

===================================================

Farbar Recovery Scan Tool Fix

--------------------

Right click on the FRST64 icon and select Run as administrator
Highlight the below information then hit the Ctrl + C keys at the same time and the text will be copied
There is no need to paste the information anywhere, FRST64 will do it for you

Start::
zip: C:\Windows\Panther\NewOs\Panther
zip: C:\$Windows.~WS\Sources\Panther
zip: C:\$WINDOWS.~BT\Sources\Panther
cmd: wmic qfe list brief /format:texttablewsys > "%USERPROFILE%\desktop\installedwu.txt"
End::

Click Fix
When completed the tool will create a log on the desktop called Fixlog.txt. Please copy and paste the contents of the file in your reply.
The tool will create a zipped folders on your Desktop with today's date, example: 06.20.2023_13.24.50.zip. Upload the files here
An installedwu.txt file will be placed on your desktop
Copy and paste the contents of that file in your reply

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.

Fixlog
Uploaded files
installedwu.txt

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

Back to top"> Back to top

#35 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 04:12 PM

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-09-2023

Ran by kelle (12-09-2023 16:07:56) Run:7

Running from C:\Users\kelle\OneDrive\Desktop

Loaded Profiles: kelle

Boot Mode: Normal

==============================================

fixlist content:

*****************

Start::

zip: C:\Windows\Panther\NewOs\Panther

zip: C:\$Windows.~WS\Sources\Panther

zip: C:\$WINDOWS.~BT\Sources\Panther

cmd: wmic qfe list brief /format:texttablewsys > "%USERPROFILE%\desktop\installedwu.txt"

End::

*****************

================== Zip: ===================

C:\Windows\Panther\NewOs\Panther -> copied successfully to C:\Users\kelle\OneDrive\Desktop\12.09.2023_16.07.56.zip

=========== Zip: End ===========

================== Zip: ===================

C:\$Windows.~WS\Sources\Panther -> copied successfully to C:\Users\kelle\OneDrive\Desktop\12.09.2023_16.07.57.zip

=========== Zip: End ===========

================== Zip: ===================

C:\$WINDOWS.~BT\Sources\Panther -> copied successfully to C:\Users\kelle\OneDrive\Desktop\12.09.2023_16.07.58.zip

=========== Zip: End ===========

========= wmic qfe list brief /format:texttablewsys > "%USERPROFILE%\desktop\installedwu.txt" =========

========= End of CMD: =========

==== End of Fixlog 16:08:00 ====

Back to top"> Back to top

#36 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 04:15 PM

I tried to upload the file, it said it was too big? Also there were actually 3 zipped folders

they are time stamped 2 mins apart...screen shot

https://gofile.io/d/nNkafT

Back to top"> Back to top

#37 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 04:18 PM

i see no file called installedwu.txt

Back to top"> Back to top

#38 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 12 September 2023 - 04:20 PM

Yes, there should be 3 folders. Did you try to upload them one at a time? Also, there should be a installedwu.txt document on your Desktop. You should be able to copy/paste the report in your reply.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

Back to top"> Back to top

#39 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 12 September 2023 - 04:36 PM

Sorry, we cross-posted.

If you have another option to upload the files, like OneDrive, see if you can do that then send me a Personal Message with the download link.

Regarding the file not on your Desktop. Click Start, type Windows Update then hit Enter. Click on View Update History. If there is a Windows 10 update named 2023-08 or something similar let me know what the KB number is.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

Back to top"> Back to top

#40 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 04:37 PM

There is no installedwu.txt at all. I even did it again, here is the folder sorted by date

https://gofile.io/d/uGWDdP

also you can the size of the one zipped file

The size of your file is greater than maximum file size of 10 MBs....is what I get when I try to upload it

I will upload the other one.

Back to top"> Back to top

#41 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 12 September 2023 - 05:44 PM

We may have cross-posted again. See Post #39.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

Back to top"> Back to top

#42 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 12 September 2023 - 10:10 PM

I have sent the DM with llinks.

I will be away until Saturday but I can try to remote in to the pc to keep working on this when I can. Thank you for all of your help.

Back to top"> Back to top

#43 kdubb666

Topic Starter

Members
51 posts
OFFLINE

Local time:08:23 PM

Posted 13 September 2023 - 08:03 PM

-

Edited by kdubb666, 13 September 2023 - 08:05 PM.

Back to top"> Back to top

#44 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:23 PM

Posted 15 September 2023 - 11:01 AM

Access is denied until you approve it. I sent requests for approval

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start