Black Screen With Mouse- urgent

[ell]

Can you run d7 on an offline system?

It has limited functionality, but yes, theres also hirens boot cd, ERD

 

[MichaelsComputerServices]

It has limited functionality, but yes, theres also hirens boot cd, ERD

I've been trying Hiren's, but I didn't get anywhere and I couldn't find ERD that worked with Windows 7,

 

[MichaelsComputerServices]

Right now D7 is doing some offline virus scans.

 

[lcoughey]

You say you have a backup, but did you run a test of the hard drive? Can you be 100% certain that you are working on a stable hard drive?

 

[MichaelsComputerServices]

Yes, I ran a test on the hard drive. I used the image that I took and restored on a new hard drive, same problem.

 

[MichaelsComputerServices]

D7 Offline Malware Scan didn't find anything. I am scanning with malwarebytes right now.

 

[ell]

You could always pull the drive and put in it a usb adapter or slave it to a bench machine and run scans to it, may be quicker.

 

[MichaelsComputerServices]

You could always pull the drive and put in it a usb adapter or slave it to a bench machine and run scans to it, may be quicker.

Yes, that is how I am running scans.

 

[ell]

Yes, that is how I am running scans.

you tried autoruns?


gkblbgf;lhfl;hjf;hf;hf;lg;

 

[MichaelsComputerServices]

you tried autoruns?


gkblbgf;lhfl;hjf;hf;hf;lg;

Just did, nothing looks out of place. I guess I could use Autoruns to narrow out a driver issue.

 

[ell]

Just did, nothing looks out of place. I guess I could use Autoruns to narrow out a driver issue.

filter windows cert stuff and disable all drivers,startups and services except the ones you need

 

[MichaelsComputerServices]

filter windows cert stuff

Sorry, what are you trying to say? Filter it by what? It has filter by windows signature?

 

[ell]

Sorry, what are you trying to say? Filter it by what? It has filter by windows signature?

check that the drivers are all verified, examine the properties of any others, disable logons unnecessary, check scheduled tasks, services, look for anything suspicious.

 

[MichaelsComputerServices]

A lot of the drivers are red/pink in autoruns. A quick search says the this means an unsigned image. Problem is, a lot of these red/pink drivers look to be crucial system drivers. There are about 20-30.

 

[ell]

Its infected. in options in autoruns you can check hide msft and windows entries and check verify sigs



cccccccccccccccccccccccc

 

[MichaelsComputerServices]

Ok, I really don't think so knowing the operator, but does sound more like it.

Edit: I only say this because on my bench it has about 10 drivers that are also pink/red and that system works fine.

 

[JustInspired]

last black screen I had was caused by avast and I had to do a clean install.

We actually had one last week where Avast drivers were causing the same thing. Have seen it with AVG too.

This is where I love ServicesPE. Very easy to disable drivers and services from running on a non-booting system. It is part of the elderly (but still lovely) UBCD4Win and also on FalconFour's boot CD (but I never told you that OK?)

Also check that the event logs in C:\Windows\System32\winevt are not corrupt as this can sometimes cause a black screen with cursor issue.

 

[Go-To Gordon]

We actually had one last week where Avast drivers were causing the same thing. Have seen it with AVG too.

This is where I love ServicesPE. Very easy to disable drivers and services from running on a non-booting system. It is part of the elderly (but still lovely) UBCD4Win and also on FalconFour's boot CD (but I never told you that OK?)

Also check that the event logs in C:\Windows\System32\winevt are not corrupt as this can sometimes cause a black screen with cursor issue.

good to know!

fifdsfdsf

 

[ThanatosOfOne]

I had one of these last week that was an appinit dll value that no longer existed. deleted the appinit dll key from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows from the the DaRT and it took off.

 

[lcoughey]

Wouldn't it have been faster to simply run a repair or fresh install of Windows?