Technical Support Bulletin
TSB5203QA0001R01

   
The Windows logon is not finished correctly after installing unsafe software "Vosteran, Taplika, Unchecky or Binkiland"


    Document details:

-
 Product:
 
-
 Model No.:
 
-
 Operating System:
Windows 7 - 32 Bit, Windows 7 - 64 Bit, Windows 8 - 32 Bit, Windows 8 - 64 Bit, Windows 8.1 - 32 Bit, Windows 8.1 - 64 Bit
   more details...  


    Issue:

It may happen that a black screen occurs with only the cursor appearing after user logon using Windows 7, 8 and 8.1. 
Key combination "Ctrl+Alt+Del" is still working and PC can boot in safe mode.


    Summary:

It is possible that after installing unsafe software on a notebook, the device is no longer loading the OS correctly.
Only a black screen with a blinking cursor is visible after Windows user logon.



    Resolution:

To remove the malware applications "Vosteran, Taplika, Unchecky, Binkiland" from the notebook and make it bootable again, follow the steps below: 

End "Run once wrapper" process at Task manager, and then uninstall 3rd party browser extension program: 

1.         Press CRTL-ALT-DEL
2.         Click on "Task Manager"
3.         In the Processes tab, look for "Run Once Wrapper"
4.         Right click on it and click on "End task"
5.         Desktop will show up
6.         Press start button and type "Uninstall a program" and press Enter
7.         Look for "WSE_Binkiland"
Note:    Program name could be different as Vosteran, Taplika, Unchecky, Binkiland
8.         Select it and click on "Uninstall"
9.         Restart computer by clicking on start button and then power button.  Click on "Restart"

If you still get a black screen with a blinking cursor, additional steps might be needed:

1.
         Follow steps 1 thru 5 above
2.         Click on start button
3.         Type "regedit"
4.         Click on "Yes" on User Account Control
5.         Navigate thru this path below by clicking on expand arrow:
            HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
            On the right pane, make sure "(Default)" is the only entry.  If you see "Binkiland", right click on it and click on "Delete"
Note:    Program name might have different as Vosteran, Taplika, Unchecky, Binkiland

6.         Navigate thru this path below by clicking on expand arrow.
            HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
            On the right pane, Make sure "(Default)" is the only entry.  If you see "Binkiland", right click on it and click on "Delete"
Note:    Program name could be different as Vosteran, Taplika, Unchecky, Binkiland
7.         Close the registry editor.
8.         Reboot the notebook.


Additionally we recommend to check for a virus/malware on the affected PC with a antivirus software (with latest definitions).



    Disclaimer:

Toshiba provides this information "as is" without warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability or fitness for a particular purpose. Toshiba shall not be responsible for the topicality, correctness, completeness or quality of the information or software provided. Toshiba is not liable for any damage caused by the use of any information or software provided, including information that is incomplete or incorrect. Any trademarks used herein belong to their respective owners.


    Survey:

 1. Was the information in this document helpful?
not at all very helpful

 2. Without this information would you have called the call centre?
 Yes
 No
 I don't know

 3. Please select one option based on your first choice:
 I'm very satisfied
 I think it will help, but I haven't tried it yet
 I need further information
 The information is hard to understand
 The information does not answer my question
 The information is wrong

 4. Let us know how to improve this document (optional):