Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

61328

August 28th, 2011 06:00

Window Explorer has stopped working and then.

Hi, i'm new about PC so i don't know what is the problem with my thing.

Well 2 days ago, i was shutting down my PC but the PC wasn't going to shut down for 5 min and stay at desktop, after i got a message " Window Explorer has stopped working" ( while the message is pop-up, my PC is slow and lag like hell, it took me 2 min to close the message 'cause the mouse wasn't lag and hard to control) and then i closed the message, PC shutdown normaly. And the next day, my PC became very lag ( if i open 2 tabs on Firefox, PC gonna freeze ) even right-click on a game icon at desktop, it takes 20 seconds to show me the option to copy or cut or ect... I tried to delete everything ( games, yahoo, ect..) but the problem still there. I'm using Dell 14R inspiron with Window 7 x32 bit.

If some1 has the same problem and fixed, please help me :(

And sorry for my bad english

20.5K Posts

September 1st, 2011 09:00

Considering that you had cracks and uTorrent on there, it is very likely that the system needs a deep cleaning. This forum is not set up for that because the logs can be quite lengthy, and unfortunately, Dell's Malware Removal forum is closed.


We can still help. :emotion-1:

My suggestion is to register for a free account and post a HijackThis log at SpywareHammer so the trained security analysts can walk you through some steps in order to get better performance. Please use the same username as you have here, if possible, so I can follow your progress.
The instructions for posting at SpywareHammer are HERE.

** Important!  Please include a link to this topic at Dell so they can see what we have done so far. That way, your helper at the other site will not have to ask you to repeat the same scans.

Good luck! Let us know if this solves the problem. :emotion-21:

20.5K Posts

August 28th, 2011 14:00

What type of security do you use on this computer? Anti-virus? Anti-spyware? Have you had any other type of pop-ups or symptoms of malware?

5 Posts

August 29th, 2011 08:00

Well, i was using AVG and tried to delete it too, but still doesn't work

20.5K Posts

August 29th, 2011 09:00

Thank you for the information. Here are a couple of things to try:

1. Try using System File Checker to scan your OS for missing/corrupt files, complete these steps:

    Click Start , and then type cmd in the Start Search box.
    In the results area, right-click cmd.exe , and then click Run as administrator . You will be prompted to type the password for an administrator account. Click Continue if you are the administrator or type the administrator password. Click Continue .
    At the command prompt, type Sfc /scannow , and then press ENTER.

    The scan may take some time, so be patient. Windows will repair any corrupted or missing files that it finds. If information from the installation CD is needed to repair the problem, you may be prompted to insert your Windows CD.



2. See if you are able to keep the system running long enough to download DDS and save it to your desktop. If you cannot do it in normal mode, try Safe mode with networking.

  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Click Yes at the next prompt for Optional Scan.
  • Save both reports to your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE.

---------------------------------------------------
Please include the contents of the following logs by copying and pasting the text of each into your next reply:

DDS.txt
Attach.txt

5 Posts

August 30th, 2011 06:00

Thank you for your help and here the things.

I did do sfc /scannow but it stopped at 34% and said " Window Resource Protection could not perform the requested operation", even i tried 3 times :(

And here the text :

DDS:

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_24

Run by Welcome at 14:16:43 on 2011-08-30

Microsoft Windows 7 Professional   6.1.7601.1.1258.84.1033.18.3061.2076 [GMT 2:00]

.

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\atieclxx.exe

C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

C:\Windows\system32\WLANExt.exe

C:\Windows\system32\conhost.exe

C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\System32\svchost.exe -k Akamai

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\taskeng.exe

C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE

C:\Program Files\Dell\QuickSet\quickset.exe

C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

C:\Program Files\3G USB Modem\HSDPALauncher.exe

D:\iTunes\iTunesHelper.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\UniKey\UniKeyNT.exe

C:\Program Files\Internet Download Manager\IDMan.exe

C:\Program Files\Internet Download Manager\IEMonitor.exe

C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\System32\alg.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\WUDFHost.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\sppsvc.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\sfc.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\conhost.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://google.com.vn/

uSearch Bar = Preserve

mStart Page = hxxp://www.yahoo.com

uInternet Settings,ProxyOverride = *.local

uInternet Settings,ProxyServer = 82.67.32.120:4151

uURLSearchHooks: H - No File

mURLSearchHooks: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - c:\program files\utorrentbar\tbuTor.dll

BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll

TB: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - c:\program files\utorrentbar\tbuTor.dll

TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

uRun: [UniKey] c:\program files\unikey\UniKeyNT.exe

uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet

uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot

mRun: [Broadcom Wireless Manager UI] c:\program files\dell\dw wlan card\WLTRAY.exe

mRun: [QuickSet] c:\program files\dell\quickset\QuickSet.exe

mRun: [IAStorIcon] c:\program files\intel\intel(r) rapid storage technology\IAStorIcon.exe

mRun: [HSDPALauncher] c:\progra~1\3gusbm~1\HSDPAL~1.EXE

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "d:\itunes\iTunesHelper.exe"

mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm

IE: Download with IDM - c:\program files\internet download manager\IEExt.htm

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office11\REFIEBAR.DLL

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

TCP: DhcpNameServer = 212.27.40.240 212.27.40.241

TCP: Interfaces\{E4A74587-FE2B-4C89-BEFF-95E67B198976} : DhcpNameServer = 212.27.40.240 212.27.40.241

TCP: Interfaces\{E4A74587-FE2B-4C89-BEFF-95E67B198976}\6427565675966696 : DhcpNameServer = 212.27.40.241 212.27.40.242

Hosts: 74.208.10.249 gs.apple.com

.

============= SERVICES / DRIVERS ===============

.

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-1-25 218688]

R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]

R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2009-7-14 20992]

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-8-18 176128]

R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\intel\intel(r) rapid storage technology\IAStorDataMgrSvc.exe [2010-12-17 13336]

R2 IDMWFP;IDMWFP;c:\windows\system32\drivers\idmwfp.sys [2011-7-18 89376]

R3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\drivers\bcmvwl32.sys [2010-12-17 17144]

R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-12-17 132480]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2010-12-17 65576]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]

S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-12-21 45352]

S3 DAEDriver54;DAEDriver54;c:\windows\softwaredistribution\datastore\logs\dak32.sys [2011-3-31 29696]

S3 hm;hmdrv;c:\windows\system32\drivers\HMDriver.sys [2011-1-17 4608]

S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]

S3 qcusbser;Mobile Connector USB Device for Legacy Serial Communication;c:\windows\system32\drivers\cmusbser.sys [2007-10-16 97408]

S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]

S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-7-1 52224]

S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2011-1-13 1343400]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-7-14 311296]

S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2008-7-11 47128]

S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [2008-7-10 242712]

S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2008-7-11 369688]

.

=============== Created Last 30 ================

.

2011-08-27 11:56:34 4915024 ------w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll

2011-08-27 11:56:32 7152464 ------w- c:\programdata\microsoft\windows defender\definition updates\{58fa6ae9-71c7-4509-970a-0c3dd1d9a55a}\mpengine.dll

2011-08-27 00:48:14 -------- d-----w- C:\Boot

2011-08-24 16:55:21 2048 ----a-w- c:\windows\system32\tzres.dll

2011-08-24 16:32:10 -------- d-----w- c:\users\welcome\appdata\roaming\Realm of the Titans

2011-08-24 16:27:05 -------- d-----w- c:\windows\system32\directx

.

==================== Find3M  ====================

.

2011-08-26 13:08:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-07-16 04:27:30 290816 ----a-w- c:\windows\system32\KernelBase.dll

2011-07-16 02:17:19 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2011-07-16 02:17:19 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 02:17:19 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 02:17:19 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2011-07-09 02:30:00 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys

2011-07-06 15:14:42 89376 ----a-w- c:\windows\system32\drivers\idmwfp.sys

2011-07-06 11:37:36 152576 ----a-w- c:\windows\system32\msclmd.dll

2011-06-24 04:27:01 169984 ----a-w- c:\windows\system32\winsrv.dll

2011-06-24 04:22:20 271360 ----a-w- c:\windows\system32\conhost.exe

2011-06-23 04:33:57 3967872 ----a-w- c:\windows\system32\ntkrnlpa.exe

2011-06-23 04:33:57 3912576 ----a-w- c:\windows\system32\ntoskrnl.exe

2011-06-21 05:34:23 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys

2011-06-15 08:55:19 86016 ----a-w- c:\windows\system32\odbccu32.dll

2011-06-15 08:55:19 81920 ----a-w- c:\windows\system32\odbccr32.dll

2011-06-15 08:55:19 319488 ----a-w- c:\windows\system32\odbcjt32.dll

2011-06-15 08:55:19 163840 ----a-w- c:\windows\system32\odbctrac.dll

2011-06-15 08:55:19 122880 ----a-w- c:\windows\system32\odbccp32.dll

2011-06-11 02:29:25 2334208 ----a-w- c:\windows\system32\win32k.sys

.

============= FINISH: 14:18:18.08 ===============

Attach:

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows 7 Professional

Boot Device: \Device\HarddiskVolume3

Install Date: 12/17/2010 1:23:11 PM

System Uptime: 8/30/2011 2:12:56 PM (0 hours ago)

.

Motherboard: Dell Inc. |  | 00FR73

Processor: Intel(R) Core(TM) i5 CPU       M 460  @ 2.53GHz | U2E1 | 2534/133mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 98 GiB total, 72.93 GiB free.

D: is FIXED (NTFS) - 195 GiB total, 190.072 GiB free.

E: is FIXED (NTFS) - 171 GiB total, 159.407 GiB free.

F: is FIXED (FAT) - 0 GiB total, 0.038 GiB free.

G: is FIXED (FAT32) - 2 GiB total, 1.949 GiB free.

H: is CDROM ()

I: is Removable

J: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

.

==== Installed Programs ======================

.

µTorrent

3G USB Modem

7-Zip 9.20

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Akamai NetSession Interface

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver

AVG 2011

Bonjour

Call of Duty(R) - World at War(TM) 1.1 Patch

Cisco EAP-FAST Module

Cisco LEAP Module

Cisco PEAP Module

Conduit Engine

DAEMON Tools Lite

DAEMON Tools Toolbar

DW WLAN Card Utility

Foxit Reader

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB945282)

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946040)

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946308)

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947540)

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947789)

Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB948127)

Intel(R) Management Engine Components

Intel(R) Rapid Storage Technology

Intel(R) Turbo Boost Technology Driver

Internet Download Manager

iTunes

Java Auto Updater

Java(TM) 6 Update 24

K-Lite Codec Pack 5.4.4 (Basic)

League of Legends

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft .NET Framework 4 Multi-Targeting Pack

Microsoft Application Error Reporting

Microsoft Help Viewer 1.0

Microsoft Office Professional Edition 2003

Microsoft Silverlight

Microsoft SQL Server 2008

Microsoft SQL Server 2008 Browser

Microsoft SQL Server 2008 Common Files

Microsoft SQL Server 2008 Database Engine Services

Microsoft SQL Server 2008 Database Engine Shared

Microsoft SQL Server 2008 Management Objects

Microsoft SQL Server 2008 Native Client

Microsoft SQL Server 2008 RsFx Driver

Microsoft SQL Server 2008 Setup Support Files (English)

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft SQL Server VSS Writer

Microsoft Text-to-Speech Engine 4.0 (English)

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Express Edition with SP1 - ENU

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974

Microsoft Visual C++ 2010 Express - ENU

Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu

Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32

Pando Media Booster

QuickSet32

QuickTime

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Sql Server Customer Experience Improvement Program

SQL Server System CLR Types

UniKey 4.0 NT

Uninstall LAC VIET mtd2002-EVA

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

uTorrentBar Toolbar

Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (03/24/2010 6.3.0.2501)

WinRAR archiver

Yahoo! Messenger

.

==== End Of File ===========================

20.5K Posts

August 30th, 2011 14:00

Please see if you are able to run the following. If not in Normal Mode, try it in Safe Mode:

* If you are unable to download or install MBAM on your computer, see if you can use a friend's or family member's computer to download MBAM. Use the update link mentioned below to manually update. Once downloaded, rename the program installer "mbam-setup.exe" file to something else like "lookinhere.exe". Copy the installer file and the update file to a CD or flash drive. Transfer the files to the infected computer. Install the "lookinhere.exe" file, then run the update so that you will have the current definitions. After that, run a full system scan and select to have the program REMOVE whatever it finds.

Please download the FREE version of Malwarebytes Anti-Malware and save it to your desktop.
Alternate link: Malwarebytes Anti-Malware

  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

    • If an update is found, the program will automatically update itself.
    • Press the OK button to close that box and continue.
    • If you encounter any problems while downloading the updates,

manually download them from here
and just double-click on mbam-rules.exe to install.
Alternatively, you can update through MBAM's interface from a clean computer,
copy the definitions (rules.ref) located in
C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes'
Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.

On the Scanner tab:

    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
    • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
    • The scan will begin and "Scan in progress" will show at the top.
    It may take some time to complete so please be patient.

    • When the scan is finished, a message box will say "The scan completed successfully.

Click 'Show Results' to display all objects found

  • Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report along with any other requested logs into your next reply and exit MBAM.

Note:-- If MBAM encounters a file that is difficult to remove,
you may be asked to reboot your computer so it can proceed with the disinfection process.
Regardless if prompted to restart the computer or not, please do so immediately.
Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

-- MBAM may make changes to your registry as part of its disinfection routine.
If you're using other security programs that detect registry changes (like Spybot's Teatimer),
they may interfere with the fix or alert you after scanning with MBAM.
Please disable such programs until disinfection is complete or permit them to allow the changes.

**If you need to re-install MBAM but encounter issue in re-installing, try using the MBAM Cleanup Utility by downloading it from HERE

5 Posts

August 31st, 2011 05:00

I did exactly what you said, and it found 3 objects.

Malwarebytes' Anti-Malware 1.51.1.1800

www.malwarebytes.org

Database version: 7619

Windows 6.1.7601 Service Pack 1

Internet Explorer 9.0.8112.16421

8/31/2011 1:55:46 PM

mbam-log-2011-08-31 (13-55-46).txt

Scan type: Quick scan

Objects scanned: 176467

Time elapsed: 3 minute(s), 40 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\Windows\Tasks\{62c40aa6-4406-467a-a5a5-dfdf1b559b7a}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\Windows\Tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

After the scan, it asked me to restart the computer, and i did "Ok" then i came back to desktop and try to right click on some icon, but it took me 1 min, then Pop-up Window has stopped working again

20.5K Posts

August 31st, 2011 08:00

It appears that you have or had a malware issue and will need more work. We will need to confirm by running additional diagnostics.

* If you have disabled System Restore in an attempt to begin cleaning malware, please enable it now. We will flush System Restore when we are finished cleaning and we are sure that everything is running smoothly.

* If you are using any cracked software, please remove it. In addition to being illegal, when you install cracked software, you are running executable files from dubious, unknown sources. You are giving these sources access to information on your hard disk, and potential control over operation of your computer. Definition of cracked software HERE.

* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.  The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state. That includes BitTorrent and similar programs. There is a partial list HERE.    

* Please be aware that if your issue involves Windows error codes the chances of resolution may be slim because some of these infections corrupt .exe files. The presence of windows error codes may also indicate hardware problems and could limit the success of infection removal.

* If this computer belongs to someone else, do you have authority to apply the fixes we will use?

* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that I have instructed you to use because this may cause conflicts with the tools that I am using. Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate, and depending on the extent of  infection, I may need to send you to another site

* During the course of our cleanup please do not do any additional online work or surfing.

* We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case. Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.

*Please note also that not all of our tools work on 64-bit systems, so we may be limited in our procedures.

Please let me know after you have removed uTorrent and P2P as described above.

No Reply within 3 days will result in my removal of this from my subscriptions. If you require more time, please let me know.

Instructions posted for this user are customized for this user only. The tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post on the Virus and Spyware Discussions forum to start a new forum topic.

5 Posts

September 1st, 2011 07:00

I have deleted uTorrent and some crackeds programe ( IDM ect..), and im able to open 4 tabs on I.E without freeze or not responding, but i right click to some icon, it still takes from me 20 sec to show the menus

17 Posts

September 24th, 2015 09:00

Cause
This issue can be caused due to any of the following issues:
You may be using an outdated or corrupted video driver
System files on your PC may be corrupt or mismatched with other files
You may have a Virus or Malware infection on your PC
Some applications or services running on your PC may be causing Windows Explorer to stop working


http://www.deskdecode.com/how-to-fix-windows-explorer-has-stopped-working/

1 Message

September 8th, 2020 23:00

Symptoms of Windows Explorer Has Stopped Working
 
When the error occurs, a warning prompt pops up. It reads, “Windows Explorer has stopped working.” Besides, there are other error messages you may receive that refer to this error.
 
  • Windows can check online for a solution to the problem and try to restart the program.
  • Windows is checking for a solution to the problem.
  • Windows can try to restart the program.
  • Windows is collecting more information about the problem. This might take several minutes.
Possible Causes to Windows Explorer Has Stopped Working
 
Since this error is universal, the causes can be numerous and specific. The following list concludes several common causes that face Windows users.
 
  • The use of outdated or corrupted system files.
  • Corrupted Display drivers.
  • Virus or Malware infection in the system.
  • Faulty RAM.
  • Incompatible drivers causing conflict with Windows.
Basic Solutions to Fix Windows Explorer Has Stopped Working Error

    Solution 1: Restart the Windows Explorer Process
    Solution 2: Copy the Explorer.exe to System32 Folder
    Solution 3: Perform a Clean Boot
    Solution 4: Disable Thumbnails
    Solution 5: Run Windows Memory Diagnostic
    Solution 6: Update Graphics Card Driver

Advanced Solutions to Fix Windows Explorer Has Stopped Working Error

    Retrieve Inaccessible/Deleted Data With Bitwar Data Recovery
    Solution 7: Run System File Checker (SFC)
    Solution 8: Perform System Error Checking
    Solution 9: Run Antivirus Software on Your PC
    Solution 10: Restore to the Previous Version
 
 
No Events found!

Top