Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

logonui.exe - Application error


  • Please log in to reply
21 replies to this topic

#1 JackandCoke

JackandCoke

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 19 December 2009 - 10:28 PM

hey guys, found this site through searching google, hoping to get some help.

My problem started just with error messages telling something like "Just in time for debugging". To get rid of it, I decided to try system restore... mistake.

Now I try to turn on my computer and I get:

"logonui.exe - Application Error
The instruction at "0x006402e1" referenced memory at "0x006420e1". The memory could not be "written".
Click on OK to terminate the program
Click on CANCEL to debug the program"
With a black screen.


I can click and nothing will happen. If I click many times I get the "log on to windows" screen and when I press ok without a password, my desktop will appear but won't load.

How can I fix this problem?

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,805 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:12:19 PM

Posted 19 December 2009 - 10:42 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 19 December 2009 - 10:48 PM

Sorry about that, didn't really know where to post.

While I was sitting here on the laptop and watching hockey, computer sat for about 30 mins on blank desktop. "system restore" complete message came on, I clicked ok and it seems to have loaded like normal, apart from a "data execution Prevention - Microsoft Windows" window that says "to help protect your computer, Windows has closed this program
Name: Microsoft Help Center Service
Publisher: Microsoft Corporation
Close message"

I suppose something still isn't right?

Edit: Closed that message and now the same thing keeps popping up but name is Windows Logon UI instead. I click close message, then it tells me "Windows Logon UI encoutered a problem and needed to close" message, I click "don't send" and it comes back.

Edited by JackandCoke, 19 December 2009 - 10:51 PM.


#4 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 19 December 2009 - 11:53 PM

Went to install ad aware, had to restart the computer. Same black screen came up with error, click many times and blank desktop again.

#5 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 20 December 2009 - 12:47 PM

no idea guys? :thumbsup:

#6 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 20 December 2009 - 04:09 PM

It doesn't seem to let me download combo fix either.

Edited by JackandCoke, 20 December 2009 - 04:09 PM.


#7 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 20 December 2009 - 10:00 PM

As soon as I try to open with safemode, it restarts also.

#8 MATTSPCHELP

MATTSPCHELP

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:05:19 PM

Posted 20 December 2009 - 10:05 PM

Hi, Jack and coke . It certainly sounds like you've got a virus that immediately
breaks any av installed. This could happen if you had an older
antivirus version, weren't updating its definitions or didn't renew
your subscription.

1) Take the infected machine off the Internet and any lan immediately.
2) From a different, clean machine download Stinger here:

(http://vil.nai.com/vil/stinger/)

and run it in Safe Mode if possible , if not normal mode will do. Stinger is a limited virus checker, but its
advantage is that it is standalone and doesn't need to be installed.
3) Hope that Stinger cleans up the machine enough to be able to
reinstall your av or install a new, current one. Update its definitions
and do a full scan.
4) Continue the cleaning process by removing any spyware with Spybot
Search & Destroy (http://www.safer-networking.org) and Ad-aware
(http://www.lavasoftusa.com). Be sure to update these programs before
running them. These programs are free, so run them both since they
complement each other. It is best to run antivirus and spyware removal
tools in Safe Mode.

Good luck,
Microsoft Certified Desktop Support Technician

#9 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 20 December 2009 - 11:37 PM

First of all, I can't get to safemode, I have to try for about 2 hours to get it to load my desktop in normal mode.

I tried putting stinger on by usb key and i get "error Stinger may be infected, cannot continue" message and same thing when I try downloading on this computer.

Also when i do get the computer's desktop to load, I get two other error messages:

RUNDLL error loading C:/WINDOWS/system32/msrwskkg.dll The specified module could not be found

RUNDLL error loading C:/WINDOWS/system32/msgmegdj.dll The specified module could not be found

I have already tried downloading and running spybot and ad-aware on this computer. They both found a lot but did not fix my problem.

I've also tried running malaware without success, giving up hope.

Edited by JackandCoke, 20 December 2009 - 11:47 PM.


#10 MATTSPCHELP

MATTSPCHELP

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:05:19 PM

Posted 20 December 2009 - 11:47 PM

Can you open msconfig by doing start run type msconfig ?if so can you list everything inside the startup tab
Microsoft Certified Desktop Support Technician

#11 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 20 December 2009 - 11:56 PM

yup, everything thats checked off or everthing everything?

#12 MATTSPCHELP

MATTSPCHELP

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:05:19 PM

Posted 20 December 2009 - 11:58 PM

everything thats checked
Microsoft Certified Desktop Support Technician

#13 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 21 December 2009 - 12:02 AM

252
mbam
msrwskkg
notepad
qttask
msgmegdj
dumprep 0 -u
ctfmon
google toolbar modifier
msnmsgr
teatimer
qtplugin
adobe gamma loader
adobe gamma
HP Digital Imaging
Microsoft office
Windows desktop search
.
.

#14 MATTSPCHELP

MATTSPCHELP

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:05:19 PM

Posted 21 December 2009 - 12:11 AM

untick the following

252
msrwskkg
msgmegdj
google toolbar modifier
Microsoft Certified Desktop Support Technician

#15 JackandCoke

JackandCoke
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:11:19 AM

Posted 21 December 2009 - 12:17 AM

and restart the pc like it tells me too? I would think my problem extends further?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users