ImNewUser

updated

6 years ago

I

ImNewUser

5 Posts

0

61825

August 28th, 2011 06:00

Window Explorer has stopped working and then.

Hi, i'm new about PC so i don't know what is the problem with my thing.

Well 2 days ago, i was shutting down my PC but the PC wasn't going to shut down for 5 min and stay at desktop, after i got a message " Window Explorer has stopped working" ( while the message is pop-up, my PC is slow and lag like hell, it took me 2 min to close the message 'cause the mouse wasn't lag and hard to control) and then i closed the message, PC shutdown normaly. And the next day, my PC became very lag ( if i open 2 tabs on Firefox, PC gonna freeze ) even right-click on a game icon at desktop, it takes 20 seconds to show me the option to copy or cut or ect... I tried to delete everything ( games, yahoo, ect..) but the problem still there. I'm using Dell 14R inspiron with Window 7 x32 bit.

If some1 has the same problem and fixed, please help me :(

And sorry for my bad english

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    6999

    1

    Posted September 1st, 2011 09:00

    Considering that you had cracks and uTorrent on there, it is very likely that the system needs a deep cleaning. This forum is not set up for that because the logs can be quite lengthy, and unfortunately, Dell's Malware Removal forum is closed.


    We can still help. :emotion-1:

    My suggestion is to register for a free account and post a HijackThis log at SpywareHammer so the trained security analysts can walk you through some steps in order to get better performance. Please use the same username as you have here, if possible, so I can follow your progress.
    The instructions for posting at SpywareHammer are HERE.

    ** Important!  Please include a link to this topic at Dell so they can see what we have done so far. That way, your helper at the other site will not have to ask you to repeat the same scans.

    Good luck! Let us know if this solves the problem. :emotion-21:

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    6999

    0

    Posted August 28th, 2011 14:00

    What type of security do you use on this computer? Anti-virus? Anti-spyware? Have you had any other type of pop-ups or symptoms of malware?

  • ImNewUser

    5 Posts

    6999

    0

    Posted August 29th, 2011 08:00

    Well, i was using AVG and tried to delete it too, but still doesn't work

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    6999

    0

    Posted August 29th, 2011 09:00

    Thank you for the information. Here are a couple of things to try:

    1. Try using System File Checker to scan your OS for missing/corrupt files, complete these steps:

        Click Start , and then type cmd in the Start Search box.
        In the results area, right-click cmd.exe , and then click Run as administrator . You will be prompted to type the password for an administrator account. Click Continue if you are the administrator or type the administrator password. Click Continue .
        At the command prompt, type Sfc /scannow , and then press ENTER.

        The scan may take some time, so be patient. Windows will repair any corrupted or missing files that it finds. If information from the installation CD is needed to repair the problem, you may be prompted to insert your Windows CD.



    2. See if you are able to keep the system running long enough to download DDS and save it to your desktop. If you cannot do it in normal mode, try Safe mode with networking.

    • Disable any script blocking protection
    • Double click dds.scr to run the tool.
    • When done, DDS.txt will open.
    • Click Yes at the next prompt for Optional Scan.
    • Save both reports to your desktop.

    Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE.

    ---------------------------------------------------
    Please include the contents of the following logs by copying and pasting the text of each into your next reply:

    DDS.txt
    Attach.txt

  • ImNewUser

    5 Posts

    6999

    0

    Posted August 30th, 2011 06:00

    Thank you for your help and here the things.

    I did do sfc /scannow but it stopped at 34% and said " Window Resource Protection could not perform the requested operation", even i tried 3 times :(

    And here the text :

    DDS:

    DDS (Ver_2011-08-26.01) - NTFSx86

    Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_24

    Run by Welcome at 14:16:43 on 2011-08-30

    Microsoft Windows 7 Professional   6.1.7601.1.1258.84.1033.18.3061.2076 [GMT 2:00]

    .

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\wininit.exe

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\system32\atieclxx.exe

    C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

    C:\Windows\system32\WLANExt.exe

    C:\Windows\system32\conhost.exe

    C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Windows\System32\svchost.exe -k Akamai

    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Windows\system32\taskeng.exe

    C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

    C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE

    C:\Program Files\Dell\QuickSet\quickset.exe

    C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

    C:\Program Files\3G USB Modem\HSDPALauncher.exe

    D:\iTunes\iTunesHelper.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\UniKey\UniKeyNT.exe

    C:\Program Files\Internet Download Manager\IDMan.exe

    C:\Program Files\Internet Download Manager\IEMonitor.exe

    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Windows\System32\alg.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\system32\WUDFHost.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Windows\system32\conhost.exe

    C:\Windows\system32\sppsvc.exe

    C:\Windows\System32\svchost.exe -k secsvcs

    C:\Windows\system32\sfc.exe

    C:\Windows\servicing\TrustedInstaller.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    C:\Windows\system32\wuauclt.exe

    C:\Windows\system32\conhost.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://google.com.vn/

    uSearch Bar = Preserve

    mStart Page = hxxp://www.yahoo.com

    uInternet Settings,ProxyOverride = *.local

    uInternet Settings,ProxyServer = 82.67.32.120:4151

    uURLSearchHooks: H - No File

    mURLSearchHooks: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - c:\program files\utorrentbar\tbuTor.dll

    BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll

    TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

    TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll

    TB: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - c:\program files\utorrentbar\tbuTor.dll

    TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll

    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

    uRun: [UniKey] c:\program files\unikey\UniKeyNT.exe

    uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet

    uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot

    mRun: [Broadcom Wireless Manager UI] c:\program files\dell\dw wlan card\WLTRAY.exe

    mRun: [QuickSet] c:\program files\dell\quickset\QuickSet.exe

    mRun: [IAStorIcon] c:\program files\intel\intel(r) rapid storage technology\IAStorIcon.exe

    mRun: [HSDPALauncher] c:\progra~1\3gusbm~1\HSDPAL~1.EXE

    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

    mRun: [iTunesHelper] "d:\itunes\iTunesHelper.exe"

    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

    mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

    mPolicies-system: EnableLUA = 0 (0x0)

    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

    IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm

    IE: Download with IDM - c:\program files\internet download manager\IEExt.htm

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office11\REFIEBAR.DLL

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

    TCP: DhcpNameServer = 212.27.40.240 212.27.40.241

    TCP: Interfaces\{E4A74587-FE2B-4C89-BEFF-95E67B198976} : DhcpNameServer = 212.27.40.240 212.27.40.241

    TCP: Interfaces\{E4A74587-FE2B-4C89-BEFF-95E67B198976}\6427565675966696 : DhcpNameServer = 212.27.40.241 212.27.40.242

    Hosts: 74.208.10.249 gs.apple.com

    .

    ============= SERVICES / DRIVERS ===============

    .

    R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-1-25 218688]

    R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]

    R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2009-7-14 20992]

    R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-8-18 176128]

    R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\intel\intel(r) rapid storage technology\IAStorDataMgrSvc.exe [2010-12-17 13336]

    R2 IDMWFP;IDMWFP;c:\windows\system32\drivers\idmwfp.sys [2011-7-18 89376]

    R3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\drivers\bcmvwl32.sys [2010-12-17 17144]

    R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-12-17 132480]

    R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2010-12-17 65576]

    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]

    S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-12-21 45352]

    S3 DAEDriver54;DAEDriver54;c:\windows\softwaredistribution\datastore\logs\dak32.sys [2011-3-31 29696]

    S3 hm;hmdrv;c:\windows\system32\drivers\HMDriver.sys [2011-1-17 4608]

    S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]

    S3 qcusbser;Mobile Connector USB Device for Legacy Serial Communication;c:\windows\system32\drivers\cmusbser.sys [2007-10-16 97408]

    S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]

    S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-7-1 52224]

    S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2011-1-13 1343400]

    S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-7-14 311296]

    S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2008-7-11 47128]

    S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [2008-7-10 242712]

    S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2008-7-11 369688]

    .

    =============== Created Last 30 ================

    .

    2011-08-27 11:56:34 4915024 ------w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll

    2011-08-27 11:56:32 7152464 ------w- c:\programdata\microsoft\windows defender\definition updates\{58fa6ae9-71c7-4509-970a-0c3dd1d9a55a}\mpengine.dll

    2011-08-27 00:48:14 -------- d-----w- C:\Boot

    2011-08-24 16:55:21 2048 ----a-w- c:\windows\system32\tzres.dll

    2011-08-24 16:32:10 -------- d-----w- c:\users\welcome\appdata\roaming\Realm of the Titans

    2011-08-24 16:27:05 -------- d-----w- c:\windows\system32\directx

    .

    ==================== Find3M  ====================

    .

    2011-08-26 13:08:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2011-07-16 04:27:30 290816 ----a-w- c:\windows\system32\KernelBase.dll

    2011-07-16 02:17:19 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

    2011-07-16 02:17:19 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

    2011-07-16 02:17:19 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

    2011-07-16 02:17:19 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

    2011-07-09 02:30:00 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys

    2011-07-06 15:14:42 89376 ----a-w- c:\windows\system32\drivers\idmwfp.sys

    2011-07-06 11:37:36 152576 ----a-w- c:\windows\system32\msclmd.dll

    2011-06-24 04:27:01 169984 ----a-w- c:\windows\system32\winsrv.dll

    2011-06-24 04:22:20 271360 ----a-w- c:\windows\system32\conhost.exe

    2011-06-23 04:33:57 3967872 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2011-06-23 04:33:57 3912576 ----a-w- c:\windows\system32\ntoskrnl.exe

    2011-06-21 05:34:23 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2011-06-15 08:55:19 86016 ----a-w- c:\windows\system32\odbccu32.dll

    2011-06-15 08:55:19 81920 ----a-w- c:\windows\system32\odbccr32.dll

    2011-06-15 08:55:19 319488 ----a-w- c:\windows\system32\odbcjt32.dll

    2011-06-15 08:55:19 163840 ----a-w- c:\windows\system32\odbctrac.dll

    2011-06-15 08:55:19 122880 ----a-w- c:\windows\system32\odbccp32.dll

    2011-06-11 02:29:25 2334208 ----a-w- c:\windows\system32\win32k.sys

    .

    ============= FINISH: 14:18:18.08 ===============

    Attach:

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2011-08-26.01)

    .

    Microsoft Windows 7 Professional

    Boot Device: \Device\HarddiskVolume3

    Install Date: 12/17/2010 1:23:11 PM

    System Uptime: 8/30/2011 2:12:56 PM (0 hours ago)

    .

    Motherboard: Dell Inc. |  | 00FR73

    Processor: Intel(R) Core(TM) i5 CPU       M 460  @ 2.53GHz | U2E1 | 2534/133mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 98 GiB total, 72.93 GiB free.

    D: is FIXED (NTFS) - 195 GiB total, 190.072 GiB free.

    E: is FIXED (NTFS) - 171 GiB total, 159.407 GiB free.

    F: is FIXED (FAT) - 0 GiB total, 0.038 GiB free.

    G: is FIXED (FAT32) - 2 GiB total, 1.949 GiB free.

    H: is CDROM ()

    I: is Removable

    J: is CDROM ()

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    .

    ==== Installed Programs ======================

    .

    µTorrent

    3G USB Modem

    7-Zip 9.20

    Adobe Flash Player 10 ActiveX

    Adobe Flash Player 10 Plugin

    Akamai NetSession Interface

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver

    AVG 2011

    Bonjour

    Call of Duty(R) - World at War(TM) 1.1 Patch

    Cisco EAP-FAST Module

    Cisco LEAP Module

    Cisco PEAP Module

    Conduit Engine

    DAEMON Tools Lite

    DAEMON Tools Toolbar

    DW WLAN Card Utility

    Foxit Reader

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB945282)

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946040)

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946308)

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947540)

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947789)

    Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB948127)

    Intel(R) Management Engine Components

    Intel(R) Rapid Storage Technology

    Intel(R) Turbo Boost Technology Driver

    Internet Download Manager

    iTunes

    Java Auto Updater

    Java(TM) 6 Update 24

    K-Lite Codec Pack 5.4.4 (Basic)

    League of Legends

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft .NET Framework 4 Multi-Targeting Pack

    Microsoft Application Error Reporting

    Microsoft Help Viewer 1.0

    Microsoft Office Professional Edition 2003

    Microsoft Silverlight

    Microsoft SQL Server 2008

    Microsoft SQL Server 2008 Browser

    Microsoft SQL Server 2008 Common Files

    Microsoft SQL Server 2008 Database Engine Services

    Microsoft SQL Server 2008 Database Engine Shared

    Microsoft SQL Server 2008 Management Objects

    Microsoft SQL Server 2008 Native Client

    Microsoft SQL Server 2008 RsFx Driver

    Microsoft SQL Server 2008 Setup Support Files (English)

    Microsoft SQL Server Compact 3.5 SP2 ENU

    Microsoft SQL Server VSS Writer

    Microsoft Text-to-Speech Engine 4.0 (English)

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Express Edition with SP1 - ENU

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974

    Microsoft Visual C++ 2010 Express - ENU

    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

    Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu

    Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32

    Pando Media Booster

    QuickSet32

    QuickTime

    Realtek High Definition Audio Driver

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

    Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Sql Server Customer Experience Improvement Program

    SQL Server System CLR Types

    UniKey 4.0 NT

    Uninstall LAC VIET mtd2002-EVA

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    uTorrentBar Toolbar

    Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (03/24/2010 6.3.0.2501)

    WinRAR archiver

    Yahoo! Messenger

    .

    ==== End Of File ===========================

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    6999

    0

    Posted August 30th, 2011 14:00

    Please see if you are able to run the following. If not in Normal Mode, try it in Safe Mode:

    * If you are unable to download or install MBAM on your computer, see if you can use a friend's or family member's computer to download MBAM. Use the update link mentioned below to manually update. Once downloaded, rename the program installer "mbam-setup.exe" file to something else like "lookinhere.exe". Copy the installer file and the update file to a CD or flash drive. Transfer the files to the infected computer. Install the "lookinhere.exe" file, then run the update so that you will have the current definitions. After that, run a full system scan and select to have the program REMOVE whatever it finds.

    Please download the FREE version of Malwarebytes Anti-Malware and save it to your desktop.
    Alternate link: Malwarebytes Anti-Malware

    • Make sure you are connected to the Internet.
    • Double-click on mbam-setup.exe to install the application.
    • When the installation begins, follow the prompts and do not make any changes to default settings.
    • When installation has finished, make sure you leave both of these checked:
      • Update Malwarebytes' Anti-Malware
      • Launch Malwarebytes' Anti-Malware
    • Then click Finish.

    MBAM will automatically start and you will be asked to update the program before performing a scan.

      • If an update is found, the program will automatically update itself.
      • Press the OK button to close that box and continue.
      • If you encounter any problems while downloading the updates,

    manually download them from here
    and just double-click on mbam-rules.exe to install.
    Alternatively, you can update through MBAM's interface from a clean computer,
    copy the definitions (rules.ref) located in
    C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes'
    Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.

    On the Scanner tab:

      • Make sure the "Perform Quick Scan" option is selected.
      • Then click on the Scan button.
      • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
      • The scan will begin and "Scan in progress" will show at the top.
      It may take some time to complete so please be patient.

      • When the scan is finished, a message box will say "The scan completed successfully.

    Click 'Show Results' to display all objects found

    • Click OK to close the message box and continue with the removal process.

    Back at the main Scanner screen:

    • Click on the Show Results button to see a list of any malware that was found.
    • Make sure that everything is checked, and click Remove Selected.
    • When removal is completed, a log report will open in Notepad.
    • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
    • Copy and paste the contents of that report along with any other requested logs into your next reply and exit MBAM.

    Note:-- If MBAM encounters a file that is difficult to remove,
    you may be asked to reboot your computer so it can proceed with the disinfection process.
    Regardless if prompted to restart the computer or not, please do so immediately.
    Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

    -- MBAM may make changes to your registry as part of its disinfection routine.
    If you're using other security programs that detect registry changes (like Spybot's Teatimer),
    they may interfere with the fix or alert you after scanning with MBAM.
    Please disable such programs until disinfection is complete or permit them to allow the changes.

    **If you need to re-install MBAM but encounter issue in re-installing, try using the MBAM Cleanup Utility by downloading it from HERE

  • ImNewUser

    5 Posts

    6999

    0

    Posted August 31st, 2011 05:00

    I did exactly what you said, and it found 3 objects.

    Malwarebytes' Anti-Malware 1.51.1.1800

    www.malwarebytes.org

    Database version: 7619

    Windows 6.1.7601 Service Pack 1

    Internet Explorer 9.0.8112.16421

    8/31/2011 1:55:46 PM

    mbam-log-2011-08-31 (13-55-46).txt

    Scan type: Quick scan

    Objects scanned: 176467

    Time elapsed: 3 minute(s), 40 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 3

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    c:\Windows\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

    c:\Windows\Tasks\{62c40aa6-4406-467a-a5a5-dfdf1b559b7a}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Windows\Tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

    After the scan, it asked me to restart the computer, and i did "Ok" then i came back to desktop and try to right click on some icon, but it took me 1 min, then Pop-up Window has stopped working again

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    6999

    0

    Posted August 31st, 2011 08:00

    It appears that you have or had a malware issue and will need more work. We will need to confirm by running additional diagnostics.

    * If you have disabled System Restore in an attempt to begin cleaning malware, please enable it now. We will flush System Restore when we are finished cleaning and we are sure that everything is running smoothly.

    * If you are using any cracked software, please remove it. In addition to being illegal, when you install cracked software, you are running executable files from dubious, unknown sources. You are giving these sources access to information on your hard disk, and potential control over operation of your computer. Definition of cracked software HERE.

    * If you are using any P2P (file sharing) programs, please remove them before we clean your computer.  The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state. That includes BitTorrent and similar programs. There is a partial list HERE.    

    * Please be aware that if your issue involves Windows error codes the chances of resolution may be slim because some of these infections corrupt .exe files. The presence of windows error codes may also indicate hardware problems and could limit the success of infection removal.

    * If this computer belongs to someone else, do you have authority to apply the fixes we will use?

    * After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that I have instructed you to use because this may cause conflicts with the tools that I am using. Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate, and depending on the extent of  infection, I may need to send you to another site

    * During the course of our cleanup please do not do any additional online work or surfing.

    * We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case. Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.

    *Please note also that not all of our tools work on 64-bit systems, so we may be limited in our procedures.

    Please let me know after you have removed uTorrent and P2P as described above.

    No Reply within 3 days will result in my removal of this from my subscriptions. If you require more time, please let me know.

    Instructions posted for this user are customized for this user only. The tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post on the Virus and Spyware Discussions forum to start a new forum topic.

  • ImNewUser

    5 Posts

    6999

    0

    Posted September 1st, 2011 07:00

    I have deleted uTorrent and some crackeds programe ( IDM ect..), and im able to open 4 tabs on I.E without freeze or not responding, but i right click to some icon, it still takes from me 20 sec to show the menus

  • amjubeti

    17 Posts

    959

    0

    Posted September 24th, 2015 09:00

    Cause
    This issue can be caused due to any of the following issues:
    You may be using an outdated or corrupted video driver
    System files on your PC may be corrupt or mismatched with other files
    You may have a Virus or Malware infection on your PC
    Some applications or services running on your PC may be causing Windows Explorer to stop working


    http://www.deskdecode.com/how-to-fix-windows-explorer-has-stopped-working/