aswMBR Crashes Computer [Solved]

So, I am trying just see if there's anything malicious on my laptop…it's gotten glitchy lately…and I have tried to scan using aswMBR four times now and every time it crashes my computer. I'm running Windows 10. What do I need to do to sweep for malware if this keeps happening?

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 6 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

• rkill.exe
• rkill.com
• rkill.scr
• rkill.pif
• WiNlOgOn.exe
• uSeRiNiT.exe

~~
[external image: xlK5Hdb.png]Farbar Recovery Scan Tool (FRST) Scan

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
• Right-Click FRST.exe / FRST64.exe and select [external image: AVOiBNU.jpg]Run as administrator to run the programme.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the programme run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.
  
  

I had to run WiNIOgOn, and it still crashes when running aswMBR. Do I need to try running the last rkill option?

You can try to temporarily disable your antivirus, which ever way I need to see the results for the Farbar Recovery Scan Tool

Attached are the two files created from Farbar.

Let me know what to do next, if anything.

 

As stated, in recent months my laptop has gotten glitchy. I will be reading something and it as if I have clicked somewhere out of the program, and will have to click back to scroll and what-not. Also, the whole system seems to periodically flicker…like a milli-second black flash across the screen. 

 

Thank you!

Also, the whole system seems to periodically flicker…like a milli-second black flash across the screen.

Hope this doesn't point to something like hardware.
as far as it looking to be coming from malware, not so obvious but we will run the machine through some checks to rule that out.
**

Start double-click on Farbar Recovery Scan Tool (FRST) with Administrator privileges

Right click on the text below and select Copy.[beginning with Start:: and finishing with End::]

Start::
EndProcesses:
CreateRestorePoint:
SearchScopes: HKU\S-1-5-21-4244961275-1164796245-2144420859-1001 -> DefaultScope {35D0EB43-B499-4285-B64A-1C3A94C8F1A3} URL =
SearchScopes: HKU\S-1-5-21-4244961275-1164796245-2144420859-1001 -> {35D0EB43-B499-4285-B64A-1C3A94C8F1A3} URL =
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
2017-06-20 11:57 - 2017-04-20 09:17 - 0050720 _____ (HP Inc.) C:\Users\Joshua Murrow\AppData\Local\Temp\ACLMInstaller.exe
CustomCLSID: HKU\S-1-5-21-4244961275-1164796245-2144420859-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-4C8F83C25E7C}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
Emptytemp:
Hosts:
End::


Press the Fix button.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

****

[external image: h3qKPnn.png]Malwarebytes AdwCleaner

• Please download Malwarebytes AdwCleaner and save the file to your Desktop
• Right-click AdwCleaner.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Follow the prompts.
• Click [external image: A49sxPr.png]Scan.
• Upon completion, click [external image: 6cyn5v5.png]Logfile. A log (AdwCleaner[S0].txt) will open. Briefly check the log for anything you know to be legitimate.
• Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
• Click [external image: MqHawIb.png]Clean.
• Follow the prompts and allow your computer to reboot.
• After the reboot, a log (AdwCleaner[C0].txt) will open. Copy the contents of the log and paste in your next reply.
  – File, folder and registry backups are made for items removed using this programme. Should a legitimate file, folder or registry item be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[S0].txt.
  
  ***********
  
  Zemana AntiMalware Free
  download it from here:
  
  
  Double-click on the file named Zemana.AntiMalware.Portable to perform a system scan with Zemana AntiMalware Free.
  You may be presented with a User Account Control dialog asking you if you want to run this program. If this happens, you should click Yes to allow Zemana AntiMalware to run.
  When Zemana AntiMalware starts, click on the Scan button to perform a system scan.
  without changing any options, press Scan
  
  
  When Zemana has finished finished scanning it will show a screen that displays any malware that has been detected. To remove all the malicious files, click on the Next button.
  Zemana AntiMalware will now start to remove all the malicious programs from your computer.
  
  Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.
• open Zemana AntiMalware again and locate the latest report
• please paste the contents into your reply
• 
  When the process is complete, you can close Zemana AntiMalware
  
  **
  please post these 3 logs when finished.

Here are the three requested logs…

This is looking to be a decently clean computer.

****

• Download Emsisoft Emergency Kit and save it to your desktop.
• Double-click icon then click Install
• A Window should open highlighting Start Emergency Kit Scanner
• Right click on the icon and select Run as administrator
• Click 1. Update now!
• Once the update is completed select Settings under Scan
• Uncheck Join the Emsisoft Anti-Malware Network
• Click Scan at the top
• Click On scan completion
• Click Quarantine detected objects, then click OK
• Click Malware Scan
• Once completed click View Report
• Save the file to your Desktop using the default file name
• Copy and paste the report in your reply

===============

Well, I am glad that these various scans are coming up empty-handed, and that I appear to be "clean"…BUT…it's a nuisance otherwise, and I don't want to take it in

 

Scan results, attached, and they seem to have come up "clean"… 

Have you fooled around with task manager to see if you can locate which process(es) might be taking up the most CPU?

Since running scans, not getting any hits, let's try running a different rootkit scanner.

🖼Click to load external image (a6csRll.png)Malwarebytes Anti-Rootkit Beta

• Download Malwarebytes Anti-Rootkit Beta and extract it to your desktop (MBAR will be launched shortly after the extraction);
  🖼Click to load external image (HTCF1SV.png)
• Click on Next, and then on the Update button to let it update its database. Once the database has been successfully updated, click on Next;
  🖼Click to load external image (UJCQPAS.png)
• Make sure all the checkboxes are checked, then click on the Scan button, and let it completes its scan (this can take a while);
  🖼Click to load external image (v4lJKL5.png)
• Once the scan is done, make sure that every item is checked, and click on the Cleanup button (a reboot might be required);
• After that (and the reboot, if one was required), go back in the mbar folder and look for a text file called mbar-log-TODAY'S-DATE.txt;
• Copy/paste the content of that log in your next reply;

bump

Well, yet another scan that comes up with nothing. I am guessing it is just some sort of "fluke" that I am having… I guess at this point, my only real question is if any one these scans have been spyware searches?

Don't give up yet, if I can't help in malware removal (nothing found) I can send you to a sub forum and see if the hardware techs can find issues.

Let's try resetting the browsers to see if the glitch is going on there.


Instructions on how to backup your Favourites/Bookmarks and other data can be found below.

• Backup Internet Explorer Favourites
• Backup Firefox Bookmarks
• [external image: U5NwUGc.png]Backup Chrome Bookmarks

Proceed with the reset once done.

• Internet Explorer: How to reset Internet Explorer settings
• Firefox: Reset Firefox
• Chrome: Chrome - Reset browser settings

bump

OK. I have reset browsers, and have not had an issue as of yet today. If it boils down to an actual hardware issue, the laptop is less than a year old, so I should be able to have hardware issues resolved under any sort of warranty. I would say that since I have not had any issues the last two days, the browser resets may have taken care of the issue(s).

 

THANK YOU for all the help. I will post back if the issue persists in the next few days…