Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7. Explorer.exe restarts constantly after Malewarbytes removal.


  • Please log in to reply
16 replies to this topic

#1 financeyoda

financeyoda

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 11 January 2013 - 09:12 PM

I'm sending this from safe mode! I have been getting assisted with this since before the Holidays. I was sent to the Windows 7 forum to get some insight on
why my CPU usage was clocking 100% no matter what I did. I ran several scans and combofixes and nothing seemed to work. I ran Malewarebytes and
removed the items and explorer.exe will not run. Please help!

http://www.bleepingcomputer.com/forums/topic477718.html/page__p__2915410#entry2915410

BC AdBot (Login to Remove)

 


#2 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 12 January 2013 - 08:53 PM

Please post the computer model/brand next time. Try running a clean boot to check on the difference. Check your hardware temps for any possible heating problem. A bad or failing drive could also be worth checking. Please run a diagnostic test by the HD manufacturing support site.

Tekken
 


#3 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 14 January 2013 - 01:07 AM

Emachines EL 1320-01

I ran the clean boot and explorer.exe is still resetting.

Not sure how to check my hardware temps. Which diagnostic test are you speaking of?

#4 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 14 January 2013 - 08:21 PM

A high CPU usage and explorer crash might also be related or not. An explorer crash might be cause of a third party media software as posted by this thread.Some high CPU usage are also due to thermal paste is needed to be reapplied on processor, heat sink is not properly contacting with the CPU or an overall heating problem with the unit itself. Download CPUID HW Monitor or Speedfan to check on your hardware temps. http://www.cpuid.com/softwares/hwmonitor.html Post the results next time. The Hard drive brand could be seen by your device manager - disk drives. There are mostly hard drive testing support for every brand nowadays along with instructions on how to run these utilities.
You can try looking it here http://www.tacktech.com/display.cfm?ttid=287

Tekken
 


#5 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 15 January 2013 - 01:06 AM

Not able to to the drive testing in safe mode. Here is the CPUID

CPUID HWMonitor Report
-------------------------------------------------------------------------

Binaries
-------------------------------------------------------------------------

HWMonitor version 1.2.1.0

Monitoring
-------------------------------------------------------------------------

Mainboard Model EMCP61M (0x000001D9 - 0x005F326D)

LPCIO
-------------------------------------------------------------------------

Hardware Monitors
-------------------------------------------------------------------------


Processors
-------------------------------------------------------------------------

Number of processors 1
Number of threads 1

APICs
-------------------------------------------------------------------------

Processor 0
-- Core 0
-- Thread 0 0

Timers
-------------------------------------------------------------------------

HPET timer 0.506 MHz
Perf timer 25.000 MHz
Sys timer 1.000 KHz


Processors Information
-------------------------------------------------------------------------

Processor 1 ID = 0
Number of cores 1 (max 1)
Number of threads 1 (max 1)
Name AMD Athlon Neo MV-28
Codename Huron
Specification AMD Athlon™ Processor 2850e
Package Socket AM2 (940)
CPUID F.F.2
Extended CPUID F.7F
Brand ID 8
Core Stepping DH-G2
Technology 65 nm
Core Speed 1810.0 MHz
Instructions sets MMX (+), 3DNow! (+), SSE, SSE2, SSE3, x86-64, AMD-V
L1 Data cache 64 KBytes, 2-way set associative, 64-byte line size
L1 Instruction cache 64 KBytes, 2-way set associative, 64-byte line size
L2 cache 512 KBytes, 16-way set associative, 64-byte line size
FID/VID Control yes


K8 Thermal sensor yes


Thread dumps
-------------------------------------------------------------------------

CPU Thread 0
APIC ID 0
Topology Processor ID 0, Core ID 0, Thread ID 0
Type 0200200Ah
Max CPUID level 00000001h
Max CPUID ext. level 80000018h
Cache descriptor Level 1, I, 64 KB, 1 thread(s)
Cache descriptor Level 1, D, 64 KB, 1 thread(s)
Cache descriptor Level 2, U, 512 KB, 1 thread(s)

CPUID
0x00000000 0x00000001 0x68747541 0x444D4163 0x69746E65
0x00000001 0x00070FF2 0x00000800 0x00002001 0x078BFBFF
0x80000000 0x80000018 0x68747541 0x444D4163 0x69746E65
0x80000001 0x00070FF2 0x0000504D 0x0000011D 0xEBD3FBFF
0x80000002 0x20444D41 0x6C687441 0x74286E6F 0x5020296D
0x80000003 0x65636F72 0x726F7373 0x35383220 0x00006530
0x80000004 0x00000000 0x00000000 0x00000000 0x00000000
0x80000005 0xFF08FF08 0xFF20FF20 0x40020140 0x40020140
0x80000006 0x00000000 0x42004200 0x02008140 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x0000007F
0x80000008 0x00003028 0x00000000 0x00000000 0x00000000
0x80000009 0x00000000 0x00000000 0x00000000 0x00000000
0x8000000A 0x00000001 0x00000040 0x00000000 0x00000002
0x8000000B 0x00000000 0x00000000 0x00000000 0x00000000
0x8000000C 0x00000000 0x00000000 0x00000000 0x00000000
0x8000000D 0x00000000 0x00000000 0x00000000 0x00000000
0x8000000E 0x00000000 0x00000000 0x00000000 0x00000000
0x8000000F 0x00000000 0x00000000 0x00000000 0x00000000
0x80000010 0x00000000 0x00000000 0x00000000 0x00000000
0x80000011 0x00000000 0x00000000 0x00000000 0x00000000
0x80000012 0x00000000 0x00000000 0x00000000 0x00000000
0x80000013 0x00000000 0x00000000 0x00000000 0x00000000
0x80000014 0x00000000 0x00000000 0x00000000 0x00000000
0x80000015 0x00000000 0x00000000 0x00000000 0x00000000
0x80000016 0x00000000 0x00000000 0x00000000 0x00000000
0x80000017 0x00000000 0x00000000 0x00000000 0x00000000
0x80000018 0x00000000 0x00000000 0x00000000 0x00000000




Storage
-------------------------------------------------------------------------

USB Device USB Composite Device, class=0x00, subclass=0x00, vendor=0x040A, product=0x4043
USB Device Belkin USB Wireless Adaptor, class=0x00, subclass=0x00, vendor=0x050D, product=0x845A

Graphic APIs
-------------------------------------------------------------------------


Display Adapters
-------------------------------------------------------------------------


ACPI
-------------------------------------------------------------------------

ACPI Tree

#6 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 18 January 2013 - 04:16 AM

Please run a hard drive diagnostic test

You can try looking it here http://www.tacktech.com/display.cfm?ttid=287



Try downloading Speccy and then install the program. To post and publish a snapshot of your PC.
. In the Menu bar, click File -> Publish Snapshot
. Click Yes > then Copy to Clipboard
. On your next reply, right-click on a empty space and click Paste on reply box then click Post.

Tekken
 


#7 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 18 January 2013 - 11:58 AM

Windows installer not available in safe mode. Speecy keeps crashing

#8 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 18 January 2013 - 12:18 PM

http://speccy.piriform.com/results/aldSjRmrmRFS48SvjA2zM1w

#9 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 19 January 2013 - 12:25 AM

When you say explorer.exe restarts/does not open, what literally happens or means? Download Gsmartcontrol -0.8.7 exe (Installer) for Windows here

Run the exe setup and open Gsmartcontrol. Wait as it load and locate the drives. Right-click your drive and choose View Details. Click View Ouput and then Save As - highlight Desktop on the left column and click 'Save'. Copy/paste the report on your next reply.

If in any case you can't run Windows with gsmartcontrol, download the DOS image http://www.tacktech.com/display.cfm?ttid=287 (Hitachi Drive Fitness Test v4.16 b00 CD image) and burn using http://www.imgburn.com/index.php?act=download

Tekken
 


#10 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 21 January 2013 - 09:36 AM

smartctl 5.43 2012-06-30 r3573 [i686-w64-mingw32-win7-sp1] (sf-5.43-1)
Copyright © 2002-12 by Bruce Allen, http://smartmontools.sourceforge.net

=== START OF INFORMATION SECTION ===
Device Model: Hitachi HDT721016SLA
Serial Number: [No Information Found]
Firmware Version: ST1O
Device is: Not in smartctl database [for details use: -P showall]
ATA Version is: [No Information Found]
ATA Standard is: [No Information Found]
Local Time is: Mon Jan 21 06:35:50 2013 PST
SMART support is: Available - device has SMART capability.
Enabled status cached by OS, trying SMART RETURN STATUS cmd.
SMART support is: Enabled

Error SMART Thresholds Read failed: Function not implemented
Smartctl: SMART Read Thresholds failed.

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status: (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 2371) seconds.
Offline data collection
capabilities: (0x5b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
No General Purpose Logging support.
Short self-test routine
recommended polling time: ( 1) minutes.
Extended self-test routine
recommended polling time: ( 40) minutes.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000b 100 100 --- Pre-fail Always - 0
2 Throughput_Performance 0x0005 100 100 --- Pre-fail Offline - 0
3 Spin_Up_Time 0x0007 118 118 --- Pre-fail Always - 197 (Average 225)
4 Start_Stop_Count 0x0012 100 100 --- Old_age Always - 1782
5 Reallocated_Sector_Ct 0x0033 100 100 --- Pre-fail Always - 0
7 Seek_Error_Rate 0x000b 100 100 --- Pre-fail Always - 0
8 Seek_Time_Performance 0x0005 100 100 --- Pre-fail Offline - 0
9 Power_On_Hours 0x0012 097 097 --- Old_age Always - 22472
10 Spin_Retry_Count 0x0013 100 100 --- Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 100 100 --- Old_age Always - 1767
192 Power-Off_Retract_Count 0x0032 098 098 --- Old_age Always - 2628
193 Load_Cycle_Count 0x0012 098 098 --- Old_age Always - 2628
194 Temperature_Celsius 0x0002 142 142 --- Old_age Always - 42 (Min/Max 18/58)
196 Reallocated_Event_Count 0x0032 100 100 --- Old_age Always - 0
197 Current_Pending_Sector 0x0022 100 100 --- Old_age Always - 0
198 Offline_Uncorrectable 0x0008 100 100 --- Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x000a 200 200 --- Old_age Always - 0

Error SMART Error Log Read failed: Function not implemented
Smartctl: SMART Error Log Read Failed
Error SMART Error Self-Test Log Read failed: Function not implemented
Smartctl: SMART Self Test Log Read Failed
Error SMART Read Selective Self-Test Log failed: Function not implemented
Smartctl: SMART Selective Self Test Log Read Failed

#11 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 21 January 2013 - 10:07 AM

I don't see any problem atleast with the Gsmart readings. Do you experience any lags or any specific issue?

When you say explorer.exe restarts/does not open, what literally happens or means?


Tekken
 


#12 financeyoda

financeyoda
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:23 PM

Posted 23 January 2013 - 08:25 PM

It was running 100% cpu usage not matter what was running. I rebooted and it seems to be running fine and usage is normal. I did nothing other than run the scans that were requested. I did notice that my resolution
looks different. Not sure if its related.

#13 Joseph Edwards VIII

Joseph Edwards VIII

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:08:23 PM

Posted 23 January 2013 - 09:15 PM

Try reinstalling Explorer. If that doesn't work install 'IOBit uninstaller' and reinstall Malwarebytes. Then uninstall Malwarebytes using IOBit uninstaller program instead of Windows Control Panel. Then reinstall Explorer again.

BTW have you done a virus check lately?

#14 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 AM

Posted 24 January 2013 - 01:35 AM

Do you experience any lags or any specific issue? I see two sticks of RAM installed with different specification speeds.
Use insert code snippet <>
Download Process Explorer on your desktop.
Right-click extract all the zip file then navigate to the extracted ProcessExplorer folder and double click procexp or procexp64.
Go to View Menu - Select Columns... Checkmark Command Line under Process Image tab.
Under File menu - Save as File Name : System Idle Process
Save as type : Process Explorer Data (*.TXT) -> OK. Save the text file on your desktop and copy/paste the result on your next reply.

Tekken
 


#15 bloopie

bloopie

    Bleepin' Sith Turner


  • Malware Response Team
  • 7,927 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York
  • Local time:11:23 PM

Posted 24 January 2013 - 06:48 PM

Hi financeyoda,

Try reinstalling Explorer. If that doesn't work install 'IOBit uninstaller' and reinstall Malwarebytes. Then uninstall Malwarebytes using IOBit uninstaller program instead of Windows Control Panel. Then reinstall Explorer again.

For what it's worth, I don't recommend using any IObit software. In the past, IObit has been seen "stealing" Malwarebytes' antimalware definitions and using them for their own ends. This has been stopped now, but for that reason alone, I wouldn't use their products.

Of course, that is just my own opinion on IObit. :thumbup2:

bloopie




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users