Proxy Virus - need help eliminating

[Curson]

Hi themetallikid,

I believe your system to be really damaged, which prevents FRST to run normally. It also be may the root cause of the issues you described.
Let's try to repair it.

Copy/paste the following command in the admin command prompt :

Code: [Select]

DISM /Online /Cleanup-Image /RestoreHealth

Do not close the command prompt ! It may takes a few hours until the command finish.

When the repair is finished, please reboot your system.
How is your computer running now ?

Please attach those two files (if present) with your next reply :

Code: [Select]

C:\Windows\Logs\CBS\CBS.log
C:\Windows\Logs\DISM\Dism.log
Regards.

[themetallikid]

How do I know when its finished... there was a % that climbed up and it's been on the 100% for a bit, with the cursor flashing after the [=======100%=======] _


Is there more or is that "it" and I should restart, it maybe took about 15 min...

[themetallikid]

so literally after I posted that last question...it went further and came up with this...I've attached what you asked that was available as well. 

Microsoft Windows [Version 10.0.18362.295]
(c) 2019 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>DISM /Online /Cleanup-Image /RestoreHealth

Deployment Image Servicing and Management tool
Version: 10.0.18362.1

Image Version: 10.0.18362.295

[==========================100.0%==========================]
Error: 0x800f081f

The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see http://go.microsoft.com/fwlink/?LinkId=243077.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

C:\WINDOWS\system32>

[themetallikid]

its definately better...the one website I was trying to purchase those files from played the audio samples fine, added to cart fine...I had some issues checking out, not sure if it was cpu or website related....but its a move in the right direction. 

What do you see if anything in the logs, I'll continue to monitor tonight as I have plenty of stuff to catch up on. 

[Curson]

Hi themetallikid,

The logs show that DISM was able to repair some corrupted Windows files, but failed to repair all of it.

Error in operation: source for package or file not found, ResolveSource() unsuccessful. (CBS HRESULT=0x800f081f) - CCbsConUIHandler::Error

There is still something we can try, but I need some time and information to make a process.
Which edition of Windows (Home, Pro, etc.) are you using ?

Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :

Code: [Select]

chkdsk C: /r /v /x
Please allow chkdsk to run on next reboot and restart the computer to perform the analysis.

Regards.

[themetallikid]

Completed, ran once...when I first got home, it either went really quick or took me longer than normal to change in to my relaxing clothes, lol...


Sat down and ran it again and it went through the 'repair' process. 

Not sure if there is something I should be looking for.  I know when I tried to pull up the forum here, I did initially get a proxy error, but eventually it loaded and seems ok. 

[Curson]

Hi themetallikid,

Your system is not entirely repaired.
Which edition of Windows (Home, Pro, etc.) are you using ?

Regards.

[themetallikid]

What came with the laptop when I purchased it is Windows 10 Home, 64 Bit (x64 based processor)

[Curson]

Hi themetallikid,

Please follow this process carefully.
If you don't understand a point or something went wrong, please let me know.

1) Download Windows 10 1903 ISO file and save it on your desktop
2) Right-click on the file and select "Mount". This will mount the image as a virtual disk. Please take note which letter the system assigned it (D, E, etc.)

3) Launch the command prompt windows (cmd) with admin rights and copy/paste the following command but replace the Z letter by the one assigned by windows to your virtual disk :

Code: [Select]

DISM /Online /Cleanup-Image /RestoreHealth /Source:wim:Z:\sources\install.wim:1 /LimitAccess

Do not close the command prompt ! It may takes a few hours until the command finish.

4) When the repair is finished, please reboot your system.
5) Please attach those two files (if present) with your next reply :

Code: [Select]

C:\Windows\Logs\CBS\CBS.log
C:\Windows\Logs\DISM\Dism.log
How is your computer running now ? Did the 0x800f081f error was displayed at the end of the process like last time ?

Regards.

[themetallikid]

completed, didnt show any errors....this time.   restarted.....

I did get the proxy thing again when I first tried to load the forum, however, a simple refresh brought the page up fine.  I'll continue to browse a bit here....

[themetallikid]

HEre are the logs

[Curson]

Hi themetallikid,

It looks way better.
Could you please try to run FRST again ?

Regards.

[themetallikid]

I went back and tried to rerun the program, it kept wanting to update and wouldnt let me run it.  so I deleted it, and clicked the link to reinstall it.

I ran as administrator, i did not get the pop up this time at the beginning.  However...It ran, and I got the same results....

started the scan as admin (right click, run as admin)...let it do its thing, at the end it said that the FRST log was created in the same directory as the .exe (or something similar to what you posted....it then opened a notepad window with an error, and another window that said created addition.txt file in the same directory as FRST.  Only button to click on was ok, which then brought the 'active' window to the 2nd notepad screen, which is blank...with an error that says could not locate the frst.txt file...do I want to create one?  I click yes, and both notepads are blank....

[Curson]

Hi themetallikid,

It seems the repair was unsuccessful.
I hate to say this, but I'm now out of idea.

So, I advise you to open a new thread describing the issues you are experiencing with your system in a Windows repair specialized forum. You will find there people more qualified than me in this area of expertise. If you do so, please attach the latest CBS and DISM logfiles, it will help them to better understand the state of your system as is it now.

I'm sorry I wasn't able to help you with this.

Regards.

[themetallikid]

man, that sucks....do you have any ideas how/why this could have happened?  I literally use this to pay bills, run sound for my band and run some football pools. 

And its been fine til a few months ago....


With what is 'not' repaired at this point is there a risk of any catastrophic issues?  or is whats not working a minimal thing and for lack of a better word...cosmetic? 

I'll follow up on a windows forum, and great appreciate your help and expertise in trying to assist me.