PC under attack?

poppellerant

That'll teach me to read properly! You said you installed the harddrive but you never said anything about installing Windows. For some reason I assumed Windows had been installed!

The "reboot and select proper boot device" message is telling you the BIOS can't find a drive to boot from. This could be either an installation CD, a Live CD or a harddrive with an operating system (ie: Windows) installed.

Go ahead and boot fromt he Windows disc and install Windows. If you get stuck, post on here and I'll try to reply ASAP.

JohnG

He heh! Since my last comment I went ahead with Windows DVD in drive and after one or two issues managed to install OK followed by the ASUS Software and relevant drivers and since have been merrily adding the necessary anti virus and other bits and everything (fingers crossed) seems to be fine. Even the graphics on screen set themselves nicely unlike previously.

So it's finally looking good!! :j:j:j:j:j

Hope I'm not speaking too soon!
Meanwhile, many thanks for all your support Proppellerant (And Waddler-8 previously) it's doubtful I would have achieved this without your help! :T

JohnG

Just returned from a week away, switched on the PC and after a minute or two (on Facebook) the old problems returned i.e. 'Program not responding' and from then on every attempt to do anti virus scans and closing down took an age. Had to resort to rebooting manually so then had to go through the black screen and usual options.
Tried Safe Mode but this got so far and just stuck at the list of files loaded. Did a start and repair and that failed.
Did a CheckDisk which did a load of repairs etc (eg Correcting/Deleting index $130 for file 10121 (Listed numerous times in the process?)

Eventually got back in but get so far and the problems reoccur . Did manage to do a malware scan which came up clean and a Antispyware which was also zero.

Feeling rather dejected having thought it was sorted with new Hard Drive - what on earth is wrong can anyone say? Looks like a new PC is the only solution, crazy after only 2yrs of fairly innocuous use plus and replacing the Hard Drive.

JohnG

I am now back working on the problematic PC without the earlier slowness and hanging but I fear that the problems will return once again at some point.
I've been able to various scans with updated software such as Malwarebytes, Super AntiSpyware, Avast and Hitman Pro and apart from 3 adwares found through Superantispyware, nothing untoward has shown up?

Here's the latest HijackthisLog if anyone would be kind enough to have a look at? There are a lot of 'file missing' lines, might these have anything to do with it? Were they the ones dealt with when running CHKDSK earlier perhaps?

Thanks for any advice?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:38:23, on 15/07/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Users\John & Clare\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\QuickTime\qttask.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\John & Clare\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\John & Clare\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [Spotify] "C:\Users\John & Clare\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7482 bytes

poppellerant

I'm wondering if it's possibly the harddrive controller or the SATA data cable that connects the harddrive to motherboard.

You should be able to buy a SATA cable for a quid or two on eBay.

JohnG

Thanks Proppellerant, what one should I look for seem to be different types and sizes? I guess I should see what I have already and replace like for like?

poppellerant

Length isn't too important, as long it's not overly long. I don't think there's any difference between SATA 2 and 3 cables, but myself I'd buy a SATA 3 cable just because if it supports a faster speed then it must be of higher quality.

One thing to watch for is right angled connectors. You can't always fit right angled connectors because of space restrictions.

Gavin78

Could it be bad memory? I assume the pc has 4 gig of ram, I would take one of the sticks out and boot it up with just one in. might be a little slower with having less memory but if the problem happens with 1 in take it out and put the other back in and run it again.

It could be "not saying it is" bad memory 1 or both sticks

I would also like to suggest a bad power supply? I've known similar issues you are having can also be the cause of a failing power supply

JohnG

Thank you for the suggestion Gavin78 and yes, it does have 4GB of memory.
When I went to go back to the pc just now, having left it on for about an hour, found it shut down and when I fired it up, it came up with the black screen and options to Start Normally or choose an option to repair or use safe mode etc.
Also, as I'm typing this, Avast came up with one of it's blue advice things in the bottom right corner and whilst it remained in view, I could not type anything - the screen basically froze/hung for a short while? I don't think the Avast box was saying anything apart from advising to update incidentally.
Also, I seem to have problems when it's installing Window updates - it takes ages for some of them to install and I think they don't always install cleanly?
So sadly the PC continues to be a bit unstable. Will look at the suggestions given though my wife is keen I take it to a local PC repair company (Doesn't think I'm capable of fixing it myself ) but that's when I think it becomes more and more uneconomical :eek: .

Gavin78

To be fair you've replaced the HD, so unless the motherboard is knackered, then the only thing I can point to is bad ram or a power supply thats on its way out.

Taking ram out is pretty easy. just make sure when going inside your pc you discharge your hands of any static (touch a radiator or something) ram is usually situated at the right hand side of the case. normally Blue or white clips hold it in place. they just pull back and the ram pops out, same when putting ram in it has a little bit missing in the middle so will only go in the slot 1 way when you push ram back in the white clips should spring back into place.

As for a faulty power supply only thing you can do with that is replace it again pretty straight forward to do. you can google/you tube memory removal and power supply removal.

I'm not saying it's any of them wait and see what others say but I would start looking at them.