Window Explorer problem

View previous topic View next topic Go down

Solved Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:02 pm

Anytime I tell the comp to shut down instead of the option to shut down comes..instead I get a box saying Microsof Windows Explorer encountered a problem and hence needs to close. I have run Antivir Virus, Hijack This but yet it has detected nothing. First it used to happen when I run my Total Video Converter or Realplayer but a couple days now I have seen it doing it almost everyday. This problem has been happening for 2 months now

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by Belahzur on Sun Feb 01, 2009 8:03 pm

Hello again.
This might not be a malware issue, lets see what this says.

  • Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
    Link 1
    Link 2
    Link 3
  • Double click DDS.scr to run
  • When complete, DDS.txt will open.
  • Click No for Optional Scan.
  • Save the report to your Desktop.
  • Copy and paste DDS.txt back here, I don't need to see attach.txt.


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:27 pm

ok here it is

DDS (Ver_09-02-01.01) - NTFSx86
Run by Deepa at 14:23:29.15 on Sun 02/01/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.959.158 [GMT -6:00]

AV: ZoneAlarm Security Suite Antivirus *On-access scanning disabled* (Outdated)
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\PSIService.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Nova Development\Photo Explosion Deluxe 3.0\calcheck.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\2Wire Wireless\Client Manager\CMTWO.EXE
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
C:\Documents and Settings\Deepa\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://www.yahoo.com
uInternet Connection Wizard,ShellNext = hxxp://www.averatec.com/
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.0.926.3450\swg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
uRun: [Power2GoExpress] "c:\program files\cyberlink\power2go\Power2GoExpress.exe" /Startup
uRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [Yahoo! Pager] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [AdobeUpdater] c:\program files\common files\adobe\updater5\AdobeUpdater.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [PRISMSVR.EXE] "c:\windows\system32\PRISMSVR.EXE" /APPLY
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Corel Photo Downloader] "c:\program files\common files\corel\corel photodownloader\Corel PhotoDownloader.exe" -startup
mRun: [Corel File Shell Monitor] c:\program files\corel\corel paint shop pro photo x2\CorelIOMonitor.exe
mRun: [avgnt] "c:\program files\avira\antivir personaledition classic\avgnt.exe" /min
mRun: [PhotoExplosionCalCheck] c:\program files\nova development\photo explosion deluxe 3.0\calcheck.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\2wirew~1.lnk - c:\program files\2wire wireless\client manager\CMTWO.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ralink~1.lnk - c:\program files\ralink\common\RaUI.exe
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\windows\system32\imslsp.dll
LSP: c:\windows\system32\zonelabs\vetredir.dll
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1150798476425
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\deepa\applic~1\mozilla\firefox\profiles\42cws0hp.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1399.3742\npCIDetect13.dll

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-02-01 14:00
--d----- C:\From My Heart
2009-01-30 16:36 72 a------- c:\windows\Pex.INI
2009-01-30 16:30 54,156 a---h--- c:\windows\QTFont.qfn
2009-01-30 16:30 1,409 a------- c:\windows\QTFont.for
2009-01-30 16:05
--d----- c:\program files\common files\Nova Development
2009-01-30 16:03
--d----- c:\program files\common files\Ulead Systems
2009-01-30 15:39
--d----- c:\program files\Nova Development
2009-01-30 15:37
--d----- c:\program files\Web Publish
2009-01-29 14:33
--d----- C:\Close to My Heart
2009-01-27 14:10
--d----- C:\pdpixs
2009-01-20 16:05
--d----- c:\program files\Avira
2009-01-20 16:05 --d----- c:\docume~1\alluse~1\applic~1\Avira
2009-01-16 14:02 664 a------- c:\windows\system32\d3d9caps.dat
2009-01-10 08:05 --d----- c:\program files\Total Video Converter
2009-01-08 15:18 --d----- c:\program files\common files\Corel
2009-01-06 22:23 --d----- C:\_OTMoveIt
2009-01-06 18:45 --d----- c:\docume~1\deepa\applic~1\Malwarebytes
2009-01-06 18:45 15,504 a------- c:\windows\system32\drivers\mbam.sys
2009-01-06 18:45 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-06 18:45 --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-01-06 18:45 --d----- c:\program files\Malwarebytes' Anti-Malware
2009-01-03 22:49 685,112 a------- c:\windows\system32\rn.tmp

==================== Find3M ====================

2009-02-01 00:33 2,828 a--sh--- c:\windows\system32\KGyGaAvL.sys
2009-01-30 19:55 7,168 a--sh--- c:\program files\Thumbs.db
2009-01-13 20:29 30,616 a------- c:\docume~1\deepa\applic~1\GDIPFONTCACHEV1.DAT
2008-12-13 11:23 44,944 -------- c:\windows\system32\drivers\pxhelp20.sys
2008-12-11 05:57 333,184 a------- c:\windows\system32\drivers\srv.sys
2008-11-20 17:05 158,456 a------- c:\windows\system32\pxwma.dll
2008-07-29 18:48 88 ---shr-- c:\windows\system32\96BED014D3.sys

============= FINISH: 14:26:28.76 ===============

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by Belahzur on Sun Feb 01, 2009 8:31 pm

Hello.
What are these three folders?
C:\From My Heart
C:\Close to My Heart
C:\pdpixs

Please delete this file in bold:
c:\windows\system32\rn.tmp

Please delete this folder in bold:
C:\_OTMoveIt


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:33 pm

I have moved the picture folder to my pics folder

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:35 pm

These three files...2 has music and one has pictures

Have moved them

How do I delete
Please delete this file in bold:
c:\windows\system32\rn.tmp

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by Belahzur on Sun Feb 01, 2009 8:36 pm

Using Windows Explorer, navigate to the system32 folder and delete that file.

If no improvement, it could be Zonealarm causing it.
Were you running the trial version? because it's out of date and disabled anyway.


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:43 pm

Ok there was something called rn.tmp and I deleted that and also deleted the OTMoveIt Folder

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 8:57 pm

As for Zone Alarm...the only thing I used on that is the firewall

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by Belahzur on Sun Feb 01, 2009 9:08 pm

Ah.
Then it's not a malware issue.
Moving to software forum.


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by uvita on Sun Feb 01, 2009 9:42 pm

Ok....Thanks

uvita
Intermediate
Intermediate

Posts Posts : 163
Joined Joined : 2009-01-06
OS OS : Windows Vista with Media Edition
Points Points : 29840
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: Window Explorer problem

Post by Doctor Inferno on Mon Feb 02, 2009 8:47 am

Let's try Digitalocksmith's earlier solution on some else's topic for the explorer crashes.

@Digitalocksmith wrote:Ok......Often Windows Explorer crashes are also caused by 3rd party shell extensions that are not functioning properly.

To try and find if a 3rd party shell extension is causing your Windows Explorer to crash on certain actions, you'll need to download this file below.

It will let you view & disable shell extensions.

http://www.snapfiles.com/get/shellexview.html

After you downloaded & executed it, ShelExView will show all shell extensions installed on your system.

You could sort the entries so that you'll have all non Microsoft shell extensions grouped together.

Next, select all these non Microsoft shell extensions, and disable them.

If this does not help with the issue then we need to go to the next level and do some debugging!

From: http://www.geekpolice.net/operating-systems-f20/windows-explorer-again-t5370.htm#30780

Let us know how you go.


Please be a GeekPolice fan on Facebook!



Have we helped you? Help us! | Doctor by day, ninja by night.

Doctor Inferno
Administrator
Administrator

Posts Posts : 12017
Joined Joined : 2007-12-26
Gender Gender : Male
OS OS : Windows 7 Home Premium and Ultimate X64
Protection Protection : Kaspersky PURE and Malwarebytes' Anti-Malware
Points Points : 104584
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum