chazmayne

Hi people, i recently recieved a problem on my machine where whatever system i try to get onto all that happens is an error message saying "..... has enoucntered a problem and needs to close. we are sorry for the inconvience." it then gives you the option to send error report or not send. this has happened when ive tried to get onto internet explorer, word, windows live messenger. i have tried running anti virus software such as kaspersky, spybot, malwarebytes but nothing has been picked up, i have attached the information needed but couldnt run gmer.exe it kept freezing, any help would be appreciated thank you.

Attached Files

	Attach.txt (9.2 KB, 3 views)
	DDS.txt (11.9 KB, 4 views)

mas_pogi

hi.

We need to have gmer log first before we start fixing your
computer. Something must be stopping gmer to complete its scans.

If you have the gmer.exe now, delete it please.

Redownload GMER from here:
http://www.gmer.net/files.php

Unzip it to the desktop.

---------------------------------
Open Notepad and copy/paste the contents in the code box below, into Notepad.
Save this as chaz.bat Choose to "Save type as - All Files"

It should look like this:

Place the batch next to gmer & double click chaz.bat to launch it.

When the program opens and click on the Rootkit tab.
Make sure all the boxes on the right of the screen are checked, EXCEPT for 'Show All'.
Click on Scan.
Once done click on the [Save..] button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop.
Attach that ARK.txt in your next reply.


**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Mark

mas_pogi

hi.

Do you still need help?


Mark

chazmayne

sorry about the long delay, i had big problems with the gmer, i finally got the file saved so here it is.

Attached Files

ark.txt (42.9 KB, 3 views)

mas_pogi

hi.

No problem.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

-----------------------------------------------------------------------
Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

----------------------------------------------------------------------------------------------------------

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can find instructions HERE.

Please include the C:\ComboFix.txt in your next reply for further review.

Mark

mas_pogi

hi.

Do you still need help?

Mark

chazmayne

Hi Mark

Sorry i went away for a couple of days, here is the combofix txt, I'm very grateful for your help.

Attached Files

ComboFix.txt (31.8 KB, 2 views)

mas_pogi

hi.

No problem.

Lets continue;

Your log(s) show that you are using so called peer-to-peer or file-sharing programmes (in your case LimeWire 5.1.1). These programmes allow to share files between users as the name(s) suggest. In today's world the cyber crime has come to an enormous dimension and any means is used to infect personal computers to make use of their stored data or machine power for further propagation of the malware files. A popular means is the use of file-sharing tools as a tremendous amount of prospective victims can be reached through it.

Please uninstall them via add/remove program at the CONTROL PANEL:
LimeWire 5.1.1
-----------------------------------------------------------------------

Copy and paste the following text into Notepad:

Save this as "fixme.reg" . Choose to save as *all files and place it on your Desktop. It looks like this
Double-click fixme.reg

-----------------------------------------------------------------------

Run ESET Online Scan

*Close any open programs
*Turn off the real time scanner of any existing antivirus program while performing the online scan. You can find the instructions You can find instructions HERE.

Go here to run an online scannner from ESET.

• Note: You will need to use Internet explorer for this scan
• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
• Click Scan
• Wait for the scan to finish
• Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
• Copy and paste that log as a reply to this topic and also let me know how things are now.

------------------------------------------------------------------------

Please also attach this one in your next reply for review.

C:\ComboFix.txt

------------------------------------------------------------------------

Disable any script blocker then double click dds.scr to run the tool.

• When done, DDS.txt will open.
• Click Yes at the next prompt for Optional Scan.
• Save both reports to your desktop.

Please post the content of DDS.txt and attach attach.txt in your next reply.

------------------------------------------------------------------------


How's your computer now?


In your reply, please post


DDS.txt
C:\Combofix.txt <--attached
Attach.txt <- attached
Kaspersky scan result <---attached
Answer to my questions

Mark

chazmayne

Hi Mark

It seems that the last scan i did cleared up one of the problems which then let me do other scans which has seemed to fix everything. i think i should have a big clean up of the computer anyway so could you do me a list of some good general clean up software, thank you for your help.

chazmayne

Not sure if this problem is related, when i try to change my performance options to adjust for best apperance i get this error message

An exception has occured while using C\WINDOWSsystem32\shell32.dll,control_RunDLL
C\WINDOWS\system32\sysdm.cpl,"system"

Not sure what the problem is, any help would be appreciated.

mas_pogi

hi.

Please complete my last instruction. We cannot be sure until I get the logs and scan I needed so that I could review it. Well, a big clean up would mean reformat.


Could you try it again? Try adjusting the option and let me know.

Mark

chazmayne

Hi Mark

I have tried to run the online scanner but it freezes everytime i try to run it, What shall i do?

mas_pogi

hi.

Could you try this one?

Perform an online scan with Panda ActiveScan

• Click on Scan Your PC Now
• A "pop up" window will appear, or a new tab will open.
• Click on Register
• Choose the option you like most, but we recommend the Free Registration.
• Click on Register
• Enter your e-mail address, and create a password.
• Select "I do not want to receive any type of information". (unless you want to receive such information)
• Click on Send
• Confirm registration, and continue by entering your user name and password, then click on Enter
• Select Full Scan, then Click on Scan Now
• Wait for the components to be loaded and installed. Don't close this window or go to another page while it is downloading. You can continue using the Internet by opening another window in your browser.
• If it finds any malware it can disinfect, the Disinfect button will be enabled. Click on Disinfect
• Please ignore the offer to buy the program. Click on Export To
  
• Export the log and save it to your desktop.
• Please attach the contents of that log to your reply, along with a new HijackThis log.

* Turn off the real time scanner of any existing antivirus program while performing the online scan

----------------------------------------------------------------------

Does the original problem still occurs?


Mark

mas_pogi

hi.

Do you still need help?

If I don't receive a reply from you within 3 days of this post, this topic will be closed.

Mark

Angelfire777

Due to lack of response, this topic will now be closed. If you need continued support, please begin a new thread, and provide a link to this topic. This applies only to the original topic starter. Everyone else please begin a New Topic, after following the steps outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help