Screen behavior.

NLAlston

NLAlston

Member
Shut my laptop down, yesterday, and went back to it last night. When it booted up I saw that there was only one third of the icons on the desktop, with the balance of the screen being black (where, before, there WAS a background). Numerous restartings of the laptop only produced the same results, and I don't know why the situation occurred in the first place.
 
Loose connection on the display cable, bad inverter, or damage to the screen. If you just closed the lid and went back to it the next day without bumping/dropping/whatnot, then it's most likely one of the first two.

Checking/replacing either will involve removing at least the keyboard (possibly more) to get to the flex cable connection on the MoBo, and taking apart at least the bezel and removing the LCD on the screen.
 
imsati said:
Loose connection on the display cable, bad inverter, or damage to the screen. If you just closed the lid and went back to it the next day without bumping/dropping/whatnot, then it's most likely one of the first two.

Checking/replacing either will involve removing at least the keyboard (possibly more) to get to the flex cable connection on the MoBo, and taking apart at least the bezel and removing the LCD on the screen.
Click to expand...

Thanks for responding, Jay.

It just so happened that my screen's background DID show back up, at the second power-up attempt that was made, today. However, this laptop is really exhibiting very erratic behavior, now.

I am still sitting with just a third of my icons showing, and don't know what caused that. I can still access some of the programs which were referenced by the respective, lost icons. But some of the programs, which had icons sitting on the desktop, are now gone completely.

I had also went to START/NEW to create a new folder for something. When I clicked on NEW I was presented with (empty).

I then searched around, again, to see how I could go about formatting/restoring my system - and, this time, did find it under the VAIO SUPPORT section. From there, I entered into the RECOVERY section. There, I found three choices (Create Recovery Discs/ Restore C: Drive/ Restore complete system), but clicking on ANY of them brought forth no further action. Nothing would open up. This thing has also reverted back to the UK character setting, and I have forgotten how to change it back.

I am thinking that I may have a terrible virus, on board, which is wreaking this havoc, and have NO idea as to how to proceed.
 
Last edited:
Let me ask you this....

For the icons that are missing on your desktop, are there program entries for them in the start menu? Same behavior when booting into safe mode with networking?
 
johnb35 said:
Let me ask you this....

For the icons that are missing on your desktop, are there program entries for them in the start menu? Same behavior when booting into safe mode with networking?
Click to expand...

There were, for most of the icons that were missing. The missing program entries can be reinstalled, easily enough, but what confuses me is why it all happened in the FIRST place.

Regarding on the behavior noticed when booting in to safe mode, with networking - all I can say is that I know nothing about that. I have seen the Safe Mode choice jump up, at one point or another - in the past, but wouldn't
know how to go about calling it up on my own. I also don't know what it actually means to boot up in Safe Mode. I mean, I know that safe means safe :), but what is 'SAFE' really allowing my system TO do - or NOT to do?
 
So you are saying there are not entries in the start menu that are associated with your missing icons? If so, then yes you have an infection that causes this. Hopefully you haven't ran any kind of temp file cleaner. Try doing this in order.

1. Download and run the following file.

http://www.bleepingcomputer.com/download/unhide/dl/6/

Will take a few minutes to run. Afterwards hopefully missing icons and start menu entries are back, may have to reboot system after running the program.

Then run the following and post the logs.

1.

Please download AdwCleaner by Xplode onto your Desktop.



•Please close all open programs and internet browsers.
•Double click on adwcleaner.exe to run the tool.
•Click on Scan.
•After the scan you will need to click on clean for it to delete the adware.
•Your computer will be rebooted automatically. A text file will open after the restart.
•Please post the content of that logfile in your reply.
•You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.

2.

Please download Junkware Removal Tool to your desktop.

•Shutdown your antivirus to avoid any conflicts.
•Very important that you run the tool in this manner:
Right-mouse click JRT.exe and select Run as administrator
Do NOT just double-click it.
•The tool will open and start scanning your system.
•Please be patient as this can take a while to complete.
•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
•Post the contents of JRT.txt in your next message.

3.

Please download Malwarebytes' Anti-Malware and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.

Please post the log that Malwarebytes displays on your screen.

4.

Download OTL to your Desktop


•Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
•Click on Minimal Output at the top
•Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
◦When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Just post the OTL.txt file in your reply.

then post the logs from the following 4 programs.

1. Adwcleaner
2. Junkware removal tool
3. Malwarebytes
4. OTL
 
John, the absolute ONLY thing I was able to grab was Malwarebytes, and that is because I was offered the options of either saving, or running the program. I chose the latter, owing to the fact my downloads are NOT saved. I have attempted to save each of the other files, that you listed, and they DO show in the completed Downloads window that is accessible within my browser (Firefox). However, when I visit that same Download folder - from my START/DOCUMENTS/DOWNLOADS folder - NOTHING shows, there.

Following, though, is the Malwarebytes Scan Log:
........................................................................................................

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 16/03/2015
Scan Time: 09:25:55
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.03.16.02
Rootkit Database: v2015.02.25.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7
CPU: x64
File System: NTFS
User: Administrator

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 360840
Time Elapsed: 10 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 4
PUP.Optional.Binkiland.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\elggllhppljlljkgfeokjpehmdamkejk, No Action By User, [62d053f3d0ba0234b4232c1191745ea2],
PUP.Optional.Binkiland.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\elggllhppljlljkgfeokjpehmdamkejk, No Action By User, [8ca67dc9c6c4ca6c855272cbf90cc040],
PUP.Optional.Binkiland.A, HKU\S-1-5-21-2211768332-1059613675-3390714068-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Binkiland Browser, No Action By User, [f33f67df276338fe2bb1112cb84dd32d],
PUP.Optional.Binkiland.A, HKU\S-1-5-21-2211768332-1059613675-3390714068-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\elggllhppljlljkgfeokjpehmdamkejk, No Action By User, [dc56a89e04866fc725b360dd10f5cb35],

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUP.Optional.Binkiland.A, HKU\S-1-5-21-2211768332-1059613675-3390714068-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://binkiland.com/?f=1&a=bnk_omx...G0EtD0A0EyD0D0DyEzy0Fzz0C2Q&cr=1608410251&ir=, Good: (www.google.com), Bad: (http://binkiland.com/?f=1&a=bnk_omx...D0A0EyD0D0DyEzy0Fzz0C2Q&cr=1608410251&ir=),No Action By User,[41f147ffe4a611255fb80fdda2636f91]

Folders: 4
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],

Files: 23
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_elggllhppljlljkgfeokjpehmdamkejk_0.localstorage, No Action By User, [d2601b2baedc231382f42a83ca39ee12],
PUP.Optional.Binkiland.A, C:\Windows\System32\Tasks\Wse_binkiland, No Action By User, [3101172f771363d3eaefea537590ef11],
PUP.Optional.Binkiland.A, C:\Windows\Tasks\Wse_binkiland.job, No Action By User, [1220f84ea6e481b510ca0c3162a39967],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Bookmarks, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Cookies, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\History, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\chrome-extension_elggllhppljlljkgfeokjpehmdamkejk_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\chrome-extension_hbkgcolmiibkgjcmnlngemkpdpifggdg_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_get.adobe.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_get3.adobe.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_googleads.g.doubleclick.net_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_s7.addthis.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_www.mozilla.org_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\https_www.ridgidforum.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_cdn.bitmedianetwork.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_download.cnet.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_googleads.g.doubleclick.net_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_www.avg.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_www.shouldiremoveit.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_www.topazlabs.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Binkiland\User Data\Default\Local Storage\http_www.utorrent.com_0.localstorage, No Action By User, [7bb70f37a7e37bbbe31feeb849bade22],
PUP.Optional.Binkiland.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://binkiland.com/?f=1&a=bnk_omxmedia_15_11&cd=2XzuyEtN2Y1L1Qzu0FtDyB0B0C0B0EyByEzz0DtByE0CtDtDtN0D0Tzu0StCtCyCzytN1L2XzutAtFzztFtAtFtCtN1L1CzutCyEtBzytDyD1V1BtBtN1L1G1B1V1N2Y1L1Qzu2SyDyEyE0Bzy0DyEzztG0BtC0B0FtG0FyB0FtBtG0Ezy0CzytGtC0Ezy0EyCyE0B0F0C0EtD0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0EyDtC0B0DzytGtA0EyEtAtGyE0DtB0EtG0AzzyBtDtG0EtD0A0EyD0D0DyEzy0Fzz0C2Q&cr=1608410251&ir=",), No Action By User,[d65c85c10288f046ff001c0dbc4a42be]

Physical Sectors: 0
(No malicious items detected)


(end)
 
Did you run the unhide.exe file and reboot?

When you run malwarebytes you need to quarantine all at the end. The log says you didn't do anything with them.

Can you download those files onto a flash drive from another computer and then run them on yours? You should have ran the unhide program first.
 
John, your last message didn't show up on my laptop. I received notification of your response, and am answering it on my IPad.

In answer to your question, about being able to download those files from another computer, my IPad is the only other computering device that I own (writing to you on it right now).

I WAS able to RUN the JRT utility, which required a restart of my laptop - which (wouldn't you know it :() produced the black screen again, with just the icons showing. I am alarmingly close to taking my sledgehammer to this laptop :).
 
Malwarebytes detection info:
...........................................
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 18/04/2015
Scan Time: 10:48:30
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.04.19.01
Rootkit Database: v2015.03.31.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7
CPU: x64
File System: NTFS
User: Administrator

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 433480
Time Elapsed: 8 min, 40 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.Binkiland.A, HKU\S-1-5-21-2211768332-1059613675-3390714068-500.bak\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\elggllhppljlljkgfeokjpehmdamkejk, No Action By User, [49246b03850558de3600eb63976ea060],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)
 
johnb35 said:
Is there anyway you can post some pictures of this black screen?
Click to expand...

I am pretty sure that I should be able to grab a screenshot of my laptop's desktop, and will try to get that done when I get up (in bed, now, and on my IPad).

Would also like to share with you that I visited BestBuy, yesterday, and had one of their Geek Squad techs take a look at my laptop. I had begun to explain what was going on, while the laptop was booting up, when the tech cut in and started running off the things which HAD been happening, with my computer. He stated that he'd seen the same condition with a few other systems, which had the Win8 OS (my laptop has Win7) and mentioned that it was caused by a very nasty virus which had taken over my system.

The stated fix? Either contact Sony, for the purpose of purchasing a set of recovery disks - OR buy a Windows 8 OS Disk.

It's a definite fact that I (as mentioned before) cannot make recovery disks, nor am I able to activate any of the other two formatting/recovery choices, so I wonder if the tech might've been on point about what he'd said.
 
johnb35 said:
Is there anyway you can post some pictures of this black screen?
Click to expand...

John, I just tried to capture. Screenshot of my desktop, but (for some reason) the Snipping Tool would NOT perform the operation.

Aside from the 10 or 11 icons which sit on that totally black background, there is a box that pops up, at each booting, with the following info within it:
.................................................................................................

SYSTEM PREPARATION TOOL 3.14
System preparation tool (Sysrep) prepares the machine for hardware independence and cleanup.

SYSTEM CLEANUP ACTION
Enter System Out-of-box experience (OOBE)

SHUTDOWN OPTIONS
Quit
Reboot
Shutdown
...................................................................................................
Choosing either of those three choices always result in the notice that
'A fatal error occurred while trying to Sysrep the machine'.

 
Did these just start happening? Thus is usually what happens right after a reinstall of windows using recovery software.
 
I would like some clarification on something.

Earlier this morning, I visited OfficeMax to see what the Windows 8.1 would set me back. I also inquired about the price for the McAfee Antivirus software. The saleswoman informed that setting up those two wouldn't, necessarily, be enough. She stated that they have a virus removal offering which would ensure the full removal of a virus.

Now, I don't know a whole lot about computers, but had always thought that viruses, and such, attached themselves to the software side of things - not the hardware.

Shouldn't I be able to arrive at a totally clean slate by purchasing/installing the OS, and the antivirus program? I had been using AVG Free, which (she stated) was the reason for the infection in the first place.
 
johnb35 said:
Did these just start happening? Thus is usually what happens right after a reinstall of windows using recovery software.
Click to expand...

Yes, John, that is exactly when this all started - right after a system recovery from my laptop's embedded recovery feature. But it was graduated, meaning that it wasn't this bad at first. Now, my laptop is truly in terrible condition. I need to get it going, ASAP, mainly because of my need to feed patterns into my Carvewright CNC for carving.
 
The system recovery image may be bad. You can always download the windows 7 iso and install that way, using the key on the bottom of the laptop to activate.

OfficeMax person was lying to you. Once you format the hard drive everything is gone including any and all viruses. I would just suggest reinstall Windows at this point.
 
johnb35 said:
The system recovery image may be bad. You can always download the windows 7 iso and install that way, using the key on the bottom of the laptop to activate.

OfficeMax person was lying to you. Once you format the hard drive everything is gone including any and all viruses. I would just suggest reinstall Windows at this point.
Click to expand...

Thanks again, John.

I figured that the young lady was either lying - or that she had been misinformed, herself.

Regarding the downloading of Win7, I wasn't able to do it. I only found one site which offered such a download, and they required my product ID. When I entered it in I was met with the notice that my number belonged to an already purchased machine, and that it was unsupported. I was instructed to contact the manufacturer of my laptop.

I don't know WHAT to do, now, outside of springing for a new OS.
 
If you have dropbox, I can send you the ISO you need to reinstall. I just need your email address which you can send me in a PM. Just need to know if you need 32 or 64 bit version of windows 7.
 
You must log in or register to reply here.
Back
Top