View original (French)

Windows Defender Offline scan stops before completion

Solved
Le_Djoff -  
 Le_Djoff -

Hello,

I suspect there is a virus on my PC. I use Windows Defender as my antivirus.

The regular full scan finds nothing. So I tried to run an offline scan.

I have tried several times and I'm encountering issues. Sometimes the scan starts fine, but when it gets to about 90%, the PC goes back to Windows and the scan does not seem to complete. Nothing appears in the protection history. Other times, the PC restarts and launches the scanning program, but it returns to Windows quite quickly, even before scanning any files... And at other times, the scan doesn't start at all, and I have to try several times before the PC launches the process...

What do you think is happening? Is it possible that I have a virus that is blocking the use of this offline scan? What can I do?

Thank you very much!

4 answers

  1.
    bazfile Posted messages 58487 Registration date   Status Moderator Last intervention   20 266
     

    Hello.

    To check your PC, do the following.

    Download FRST.

    Once downloaded, save it on the desktop then right-click on FRST and choose Run as administrator you will see this:

    Wait for the message the tool is ready to work to appear then click on Analyze

    Warning, wait for the messages stating that the analysis is complete to appear.

    At the end of the analysis, you will have two text files on the desktop FRST and Addition.

    Then send the FRST and ADDITION reports to https://www.cjoint.com/ then provide the two links generated by https://www.cjoint.com/ in your response.

    bazfile
    Moderator/Contributor security.
    a hello, a reply, a thank you are always appreciated.

    1
    1. Le_Djoff
       

      I downloaded FRST but I'm hesitating to run it. First, Chrome blocked its download because it considered it potentially dangerous. I forced the download and now it's Windows that's blocking the launch because it's telling me it might be a virus... Is this normal?

      0
      1. fabul Posted messages 42112 Registration date   Status Moderator Last intervention   6 059 > Le_Djoff
         

        Hello,

        Antiviruses are often less reliable than humans.

        You can trust Bazfile and run it.

        2
      2. Le_Djoff > fabul Posted messages 42112 Registration date   Status Moderator Last intervention  
         

        Alright, I'm going!

        0
    3. bazfile Posted messages 58487 Registration date   Status Moderator Last intervention   20 266
       

      You wanted to know if there was an infection on your PC, although Windows Defender warned you of the risk you were taking by downloading and installing the pirated software Ableton.11.1.6_x64, the answer is no, your PC is not infected.

      You should still remove Ableton located in :

       E:\Complets\Ableton.11.1.6_x64\Crack\Ableton_KeyGen.exe

      There are just a few orphan or obsolete processes, if you wish to remove them, follow these steps.

      Procedure to be done in the order indicated:

      1- Open FRST as an administrator, for this right-click on FRST and choose run as administrator
      2 - Copy the entire script that is in the box below:

        Start:: CreateRestorePoint: CloseProcesses: HKLM\...\Run: [] => [X] HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-2663889446-3059999480-2222092641-1001\...\Run: [LMADVmon] => "C:\Program Files (x86)\Lexmark MX310 Series\LMADVmon.exe" (File not found) HKU\S-1-5-21-2663889446-3059999480-2222092641-1001\...\Run: [] => [X] GroupPolicy: Restriction ? Policies: C:\ProgramData\NTUSER.pol: Restriction AlternateDataStreams: C:\Users\Le_Dj\AppData\Local\Temp:$DATA​ [16] FirewallRules: [{31CB936F-9396-4473-974A-39BE4D2DEFCF}] => (Allow) C:\Users\Le_Dj\AppData\Local\Temp\RarSFX0\InstallationPackage\Install\x64\InstallGui.exe => File not found FirewallRules: [{74516F49-EAD4-4917-9862-53A14ADD63A0}] => (Allow) C:\Users\Le_Dj\AppData\Local\Temp\RarSFX0\InstallationPackage\Install\x64\InstallGui.exe => File not found FirewallRules: [TCP Query User{D7D2CD43-BA67-44AF-8D2F-323A098D636B}C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe => File not found FirewallRules: [UDP Query User{3564BEC4-7973-4845-AD37-105B8AF5CD43}C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe => File not found FirewallRules: [{2F9BFF70-DDB7-4CDB-88AD-9805B6212469}] => (Block) C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe => File not found FirewallRules: [{FE9C06A1-D57C-4579-A987-E83C59C1DCD4}] => (Block) C:\users\le_dj\appdata\local\discord\app-1.0.9005\discord.exe => File not found FirewallRules: [TCP Query User{23DFBDFC-9658-46D1-8961-CABFE8EE1CEC}C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe => File not found FirewallRules: [UDP Query User{FB8F459D-FB6B-44FE-8353-B2CF22B85A0F}C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe => File not found FirewallRules: [{3BD7DFFA-5E0F-4652-8D2A-A3BC0D042F0C}] => (Block) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe => File not found FirewallRules: [{F652CEBF-2CDC-457A-8C9D-590234B12D71}] => (Block) C:\program files (x86)\steam\steamapps\common\destiny 2\destiny2.exe => File not found FirewallRules: [TCP Query User{D28189A4-BB14-45AF-9E8C-BED838D5DE10}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe => File not found FirewallRules: [UDP Query User{25E2CA15-2E67-46E5-92D2-D1C5D3FE720F}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe => File not found End::

      3- Once the script is copied, click on Fix, FRST automatically takes the script from the clipboard.


      Let the fix run, once it is done you will be asked to restart your PC, do it as soon as you are prompted, see below.

      Then once your computer has restarted:
      4- You will have a Fixlog file on your desktop, then send this fixlog report to https://www.cjoint.com/ and provide the link generated by https://www.cjoint.com/ in your response.

      bazfile
      Moderator/Security Contributor.
      a hello, a response, a thank you are always appreciated.

      0
  2. Le_Djoff
     

    Okay great! Thank you very much for the time spent...

    If there are no viruses, that's even better. But that doesn't solve my initial problem...

    The problem at the base is that my internet browser is causing my PC to "freeze." When I use it, sometimes the mouse pointer disappears and the PC becomes very slow. It freezes like that for several seconds and then everything goes back to smooth, before freezing again a little later. What’s strange is that this happens with all the different browsers I've tried... However, it only occurs with internet browsers. For everything else, my PC works perfectly. This, along with the fact that I'm having difficulty doing an offline scan, made me suspect the presence of a virus or something like that... I'm going to try to figure out what's wrong...

    0
  3. bazfile Posted messages 58487 Registration date   Status Moderator Last intervention   20 266
     

    You should have explained this from the beginning.

    Disable hardware acceleration in the relevant browser see this page.

    0
  4. Le_Djoff
     

    Ok thanks! :-) I'll give that a try!

    0