Author Topic: system file checker and windows repair v.3.8.1 on 8.1 (Read 23224 times)

stella · « **on:** January 30, 2016, 04:54:38 am »

Hello!
1) does anyone know if I can use windows repair v.3.8.1 on 8.1 without any windows cd, afterwards?

2)can i use system file checker on 8.1 without any windows CD, afterwards?

i didn't get any windows cd since it is built into the chrome laptop.

i am asking before so i don't get any more problems after.

S

Boggin · « **Reply #1 on:** January 30, 2016, 02:36:57 pm »

You don't need a Win 8.1 install disk for either.

Windows Repair deals with the Registry and sfc /scannow replaces any files from the compressed dllcache already on the computer.

This article describes how to create Win 8.1 install bootable media should you want it - https://www.winhelp.us/non-destructive-reinstall-of-windows-8-and-8-1.html

stella · « **Reply #2 on:** January 31, 2016, 06:16:48 am »

Super thanks!

Do you, or anyone know where-how i can repair my keyboard settings on my laptop, after a messy remote trojan attack?
Does any of the 2 mentioned programs -methods work on solving that?

After the trojan remote attack they left my keyboard messy, and it writes numbers with letters etc.
I have tried loads of programs, scans and fixings to solve that.
Grateful for any insight how to fix it.

S

Boggin · « **Reply #3 on:** January 31, 2016, 06:47:53 am »

Are you sure you are infection free ?

You'll probably need to go to your computer support site and look for the keyboard drivers.

If it doesn't have any listed, go into Device Manager and expand Keyboard.

It may be listed as HID Keyboard Device.

Right click on it and select Properties then under the Details tab, use the dropdown and click on Hardware Ids.

There you will find a driver number highlighted.

Right click on it - select Copy then you can Paste it into the reply box where we can run a Google on it, or you could Google it yourself for a driver download, but don't fall for one of those driver updater programs - look for something resembling the vendor of your laptop.

stella · « **Reply #4 on:** February 01, 2016, 05:57:18 am »

Great info!

Yes no infections.
I have run Avast, Malware-A..., Iobit..., Kaspersky... ccleaner and a bunch of various combinations all saying i am clean.

I did try something similar of what yo suggest but it didn't work out. it won't allow me to update my driver...

i will try what you wrote, thanks again.

S

Boggin · « **Reply #5 on:** February 01, 2016, 08:55:51 am »

Do you have any restore points back to before the Trojan attack that you could try to see if that resolves the keyboard problem ?

stella · « **Reply #6 on:** February 01, 2016, 10:38:43 am »

i tried that, but i think the system restore point was infected.
now i have no 'old' system restore point, only the ones that have messy keyboards.

thanks anyway

Boggin · « **Reply #7 on:** February 01, 2016, 01:36:57 pm »

How are you getting on with the drivers ?

stella · « **Reply #8 on:** February 02, 2016, 01:11:57 am »

in device manager: when i update drivers, it says they are updated.

my highlighted driver:

HID\VID_062A&PID_4101&REV_0312&MI_00

can you suggest where i can download it?

thanks!

Boggin · « **Reply #9 on:** February 02, 2016, 06:30:03 am »

When I copy & paste that driver into a Google search, I'm getting a lot of hits, but none are specific to a computer model.

Can you post your make & model and where would it not allow you to download a driver.

What do you have listed under Keyboards in Device Manager ?

stella · « **Reply #10 on:** February 02, 2016, 06:58:31 am »

Yes... messy

I can update drivers now, but there is no update since it says it is updated.

samsung laptop.

I am sending you a snapshot of how it looks in the HID keyboard:
It is possible then that the two first are 'messy programs, or ?

again, thanks for all support and interactions.
appreciate it big time.

S

Boggin · « **Reply #11 on:** February 02, 2016, 07:23:31 am »

What I was wanting to see is what it has when you expand Keyboards in Device Manager.

stella · « **Reply #12 on:** February 02, 2016, 07:40:07 am »

ok.
when i expand...

Boggin · « **Reply #13 on:** February 02, 2016, 07:55:11 am »

Click on Chrome devices and then use the dropdowns to enter your machine's details in http://www.samsung.com/us/support/downloads and then look to see if there are any keyboard drivers.

stella · « **Reply #14 on:** February 03, 2016, 09:40:23 am »

super thanks, i will try that.

S

Boggin · « **Reply #15 on:** February 03, 2016, 10:44:34 am »

Let us know how you get on.

stella · « **Reply #16 on:** February 04, 2016, 07:09:10 am »

I am running through some loops with comodo and some other network 'firewall' WiFi issues as well.
So, when i solve it, i will share.

thanks
S

Boggin · « **Reply #17 on:** February 04, 2016, 09:40:58 am »

Are you using the free version of Comodo ?

A reinstall of Comodo may resolve the firewall issues, but use its Uninstaller to get rid of any residue.

https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/143/9/

stella · « **Reply #18 on:** February 04, 2016, 11:24:04 am »

Hey, super !

Comodo actually found a hidden file rootkit but did not clean it - failed.

Before that Kaspersky rootkit did not find any and i run it several times.

I will run Malware rootkit.

I use Iobit uninstaller, but will check out your link, thanks again.

WiFi feels tricky... since they attached a user account [access everyone] and until i deleted that they had time to mess up and steal all.

so i have to be cautious in what i change, in case they have made major admin-system rules to 'rule me out '.

S

Boggin · « **Reply #19 on:** February 04, 2016, 02:24:29 pm »

While MBAM has a Rootkit mode, Norton Power Eraser may be much stronger but it can take out legit programs because it is very aggressive.

Could Comodo have quarantined it so that Kaspersky couldn't find it ?

Depending upon how much stuff you have on your Chrome Book to back up or programs to reinstall, the most effective way to disinfect an OEM machine is to factory reset it, especially as they had set up another user account and then reconsider your choice of AV program.

Had you clicked on any dodgy links ?

stella · « **Reply #20 on:** February 05, 2016, 01:11:51 am »

i used Kaspersky before Comodo, so nothing is quarantined.

I have to try Norton Power Eraser especially when it's aggressive it may work, thanks

Nope, no dodgy links. I have no habits to visit those worlds.
These are people who have checked me up and done a target, on me.

Yes the most effective way to disinfect an OEM machine is to factory reset it, but i have no idea what they messed with so i made a decision to work it out in chunks, in case i loose admin access somehow or everything get wiped out... i am thinking...

S

Boggin · « **Reply #21 on:** February 05, 2016, 07:13:12 am »

When you do get it sorted, get into the habit of making regular system images onto external media.

One of those could have sorted this problem in a crack and a system image is the only defence against Ransomware.

stella · « **Reply #22 on:** February 06, 2016, 04:15:33 am »

I have never done that, so I don't know anything about it, simply.
Can 'hackers' mess with that or it it safe?
If it is safe, i will learn how to do that.
Any recommendation of where to read about that?

Thanks
S

Boggin · « **Reply #23 on:** February 06, 2016, 08:57:25 am »

As a system image is usually created onto external media, then it cannot be infected by whatever may have infected the computer, but prior to creating one it is best to run a chkdsk /f and a robust antimalware scan so that you aren't saving a corrupt or infected volume.

Being a Win 7 user, I had to Google for that and found - http://www.thewindowsclub.com/create-restore-system-image-windows-8-1

If you are using an OEM machine and you have a Recovery partition, then also check the box for Data D:

However, to restore with it, the article says to tap F8 as you switch on which doesn't work in Win 8.1 but from an elevated cmd prompt you can enter -

bcdedit /set bootmenupolicy legacy

exit

Then reboot.

Tapping F8 as you switch on will now get you into the advanced boot options.

If you wanted to get rid of the F8 provision - although I can't think why, use standard instead of legacy in the bcdedit cmd.

This article goes into more detail with an alternative method of getting to the recovery with a system image, but with the F8 option enabled, should you not otherwise be able to boot up normally, F8 will pull you out of the mire.

https://www.winhelp.us/system-image-backup-in-windows-8-1.html

stella · « **Reply #24 on:** February 06, 2016, 11:50:31 am »

wow!

Super thanks!

i know some of it, so i will go through it and read all you have found, posted.

8.1 is not F8 , but i know how.

have a great weekend

S