An "NTLDR is missing" error message

[Floorist]

Someday when I'm old and gray I'm going to take a language coarse in how to read GEEK or Greek.

Daris

It may be too late for us Daris.

 

[Nick]

Run OTL


Under the Custom Scans/Fixes box at the bottom, paste in the following


:OTL
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel |
On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Wester\LOCALS~1\Temp\catchme.sys -- (catchme)
FF - user.js - File not found

:Services

:Reg

:Files
C:\FRST

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done
You will get a log that shows the results of the fix. Please post it.


NOTE. If for any reason OTL stalls (most likely at "killing processes..." step) run the fix from safe mode.

Last scans...



Download Security Check from here http://screen317.changelog.fr/SecurityCheck.exe, and save it to your Desktop.


Double-click SecurityCheck.exe
Follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me.


Please download Farbar Service Scanner (FSS) http://www.bleepingcomputer.com/download/farbar-service-scanner/dl/62/ and run it on the computer with the issue.
Make sure the following options are checked:

Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender
Other Services
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.


Download Temp File Cleaner (TFC) http://oldtimer.geekstogo.com/TFC.exe

Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.


Please run a free online scan with the ESET Online Scanner http://www.eset.com/me/home/products/online-scanner/


Disable your antivirus program
Click on "Run ESET Online Scanner" button.
Tick the box next to YES, I accept the Terms of Use
Click Start
Accept any security warnings from your browser.
Check Scan archives
Click Start
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click on List of found threats
Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
NOTE. If Eset won't find any threats, it won't produce any log.

--------------------------------------------------------------------------------

 

[Nick]

How we making out Darol ?

 

[Darol Wester]

Sorry. Got side tracked. I tried running OTL with what's in red, but it freezes. At least that's what I'm guessing. I left it along for over an hour and no changes. I tried it in safe mode, but I can't find OTL in there. Tried looking in downloads which is where it's been, but My Documents is blank.??? I'll bet if I could save to desktop, which I can't, it would be there.

 

[Nick]

Try running the others. Then try again . It only takes a few minutes to run it . are you checking Custom scans ?
Are You Use using Fire Fox ?

 

[Darol Wester]

This is the only one I can get to run Nick. In the first one I copy/paste red text into CustomScans and hit the run fix button. It does nothing. #2 just says "Stopping Running Processes". #4/ESET just pulls a blank page.

But here's #3. Dam!!!

I'm running Firefox.

Farbar Service Scanner Version: 08-01-2014
Ran by Wester (administrator) on 08-01-2014 at 13:25:58
Running from "C:\Documents and Settings\Wester\My Documents\Downloads"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
aswTdi(8) Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
0x080000000500000001000000020000000300000004000000080000000600000007000000
IpSec Tag value is correct.

**** End of log ****

 

[Nick]

IN Firefox check Tools > Options > General > Put a check mark in Save files to > check Browse > scroll to desktop > Check OK . Download OTL again and see if it sends it to the desktop.

 

[Darol Wester]

Well, I got OTL to desktop and ran it in safe mode, but it won't go. It says "Not responding" at the top. Don't know Nick??

 

[Nick]

Not a big deal , But i need to look at Security check. Delete it and download it again . Should be on your desktop .

 

[Darol Wester]

Can't get it to run either Nick. I've tried it from several sites, but all it does is this.

 

[Nick]

In safe mode to ?

 

[Darol Wester]

Can't get online in safe mode. Can't save Security Check to desk top because it won't load. I'm gonna go have a drink. Maybe 2.

 

[Nick]

You got online to make the post . Unplug the modem from the outlet for 30 seconds > plug it back in and try again. If you can get on in regular mode try loading it from there .

 

[Nick]

Darol , Why are you in safe-mode ?

 

[Darol Wester]

In safe mode to ?

I tried it after you asked me.

It was a long day. I'll try again tomorrow.

 

[Nick]

Can you get online in regular mode ?

If so Download the software from there , and run it in regular mode .

Delete the others first .

I do need to look at the security check log .

 

[Darol Wester]

OK. When I try to download the Security Check from your link, or any other one for that matter, this is what I get. It also causes Avast to put up a window telling me that it just blocked a virus every time I try and download it. I've been to all sorts of websites that have a link to Security Check but they all have the same results.

Do I get to use the hammer yet?????

You ever use Crossloop?

 

[Darol Wester]

Sorry. Forgot to enter this in the last post for, "This is what I get."

 

[Nick]

Right click on the avast icon and disable it for 30 minutes . Then download it .

Run it in regular mode .

 

[Darol Wester]

Now we're loggin.....

Results of screen317's Security Check version 0.99.78
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Free Antivirus
`````````Anti-malware/Other Utilities Check:`````````
SUPERAntiSpyware
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 45
Adobe Flash Player 11.9.900.170
Adobe Reader XI
Mozilla Firefox (27.0)
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes Anti-Malware mbam.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 18% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````