Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


RUN CMD.EXE causes Explorer to Crash - CLosed? is unresolved!

  • Please log in to reply
1 reply to this topic

#1 protonic


  • Members
  • 1 posts
  • Local time:09:40 PM

Posted 17 April 2009 - 02:25 AM


I am very surprised to see the above thread closed as there is no fix available - I hope I am not rude opening another thread related to the one mentioned.

I have a computer showing the same issue and as far I was able to find in Drivers folder an Winmm78.sys - identified by Kaspersky as Trojan.Downloader.Win32.Mutant.aim
There were two more registered driver files with no description, but they were already missing from the folder.
Trojan.Downloader.Win32.Mutant.byq was also detected among System Restore files - 3 times.

Right now I have one more issue: I used Avira rescue CD and REMOVED some bad code - as a result the partition is damaged and not bootable anymore ;)

So I am scanning the HDD using another PC.

Just my 2 cents about this malware - it could be the one identified by Kaspersky.

I'll be back with some more.

The thread I am mentioning here is:http://www.bleepingcomputer.com/forums/lofiversion/index.php/t206736.html

Beware of ComboFix! I was trying to download ComboFix (I don't remember the site, the history is on the other HDD) which was infected with Parite - both AVG, Kaspersky say so.
Later I checked the ComboFix I have on my thumb - that was OK.

Edited by protonic, 17 April 2009 - 02:35 AM.

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:40 PM

Posted 17 April 2009 - 12:45 PM

The reason the thread was closed is because there were too many people and some were giving improper advice

People are just too anxious to fix their computer without taking the time to follow the correct procedures

It was stated to them many times to post in Am I Infected?, where we could start the process and refer them to the HJT forum if necessary
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users