Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 Windows Explorer Has Stopped Working


  • Please log in to reply
27 replies to this topic

#1 jacobus5566

jacobus5566

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 08 September 2015 - 05:26 AM

I've been advised to post here by "usasma," John, Microsoft MVP - Windows Experience, from the Windows Crashes, BSOD, and Hangs Help and Support forum...

Running Windows 7 Home Premium 64 bit 6.1.7601 SP1 Build 7601 on a Custom Built Laptop, CLEVO P370EM x64 based PC, BIOS American Megatrends Inc. 4.6.5, 16/11/2012, SMBIOS Version 2.7. DDR3 Dual Channel 32GB (16GB Usable). NVIDIA GeForce GTX 680M. NVIDIA High Definition Audio / Realtek High Definition Audio / USB Audio DAC.

A much-beloved laptop running some assistive technology for a disabled user.

Please excuse me if this topic has come up before, and apologies in advance for my absolute lack of technical knowledge - please be patient with me!

Every time I launch Windows Explorer, after just a minute or so, it hangs/greys out and displays a small window that says, "Windows Explorer Has Stopped Working" ...this then changes to, "checking for a solution," or, "restarting Windows Explorer."

During this hang (usually 1 to 2 minutes) nothing else on the desktop or taskbar can be altered or launched. When Windows rights itself, all the desktop icons have been moved to different positions, the taskbar tray goes blank and then some of the tray icons reappear (as if Windows is restarting) - but many tray icons are now missing.

I have updated my video drivers, etc. etc. and run sfc /scannow, which reports no issues. I've run Microsoft Security Essentials and Malwarebytes - all clean. Windows updates are all current at time of posting.

Other recent symptoms: Windows itself is running very slow with some freezes and jerky mouse movement, quite often the little spinning circle-thingy is on next to the mouse pointer. Start up is now extremely slow. Laptop fan comes on and off rather more often than it used to.

Addendum to the above: Windows Explorer now crashes as above when I try to access its drop-down menus or right click on a file or folder - especially infuriating as these features are used extensively by the Assistive Technology! :((

I've tried to include as much relevant information as possible - please don't hesitate to ask for more!

In anticipation of help from a kind soul...  Jake.



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 08 September 2015 - 05:52 AM

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

After running a scan to clean up the computer.....

Post the three lists mentioned below using CCleaner:

 

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.

 

Open CCleaner and click on Tools. Choose Uninstall. On that page you will see a list of programs installed on your computer and at the bottom right of that page you

will see a button when clicked will allow you to Copy and Paste that list in your next post. Please do that.

 

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 09 September 2015 - 06:21 AM

Hello Buddy215. Thank you very much for replying.

I've downloaded and run the programs you asked me to - here are the log files requested.

 

Yes    HKCU:Run    AdobeBridge        
Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKLM:Run    AdobeAAMUpdater-1.0    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
Yes    HKLM:Run    AdobeCS6ServiceManager    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
Yes    HKLM:Run    AthBtTray    Atheros Commnucations    "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
Yes    HKLM:Run    AtherosBtStack    Atheros Commnucations    "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
Yes    HKLM:Run    DriveUtilitiesHelper    Western Digital Technologies, Inc.    C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
Yes    HKLM:Run    HP Software Update    Hewlett-Packard    C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Yes    HKLM:Run    IAStorIcon    Intel Corporation    C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
Yes    HKLM:Run    IFXSPMGT    Infineon Technologies AG    "C:\Program Files (x86)\Infineon\Security Platform Software\ifxspmgt.exe" /NotifyLogon
Yes    HKLM:Run    iTunesHelper    Apple Inc.    "C:\Program Files\iTunes\iTunesHelper.exe"
Yes    HKLM:Run    KeepSafe    Authentec    "C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe" /startup
Yes    HKLM:Run    MSC    Microsoft Corporation    "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
Yes    HKLM:Run    NvBackend    NVIDIA Corporation    "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
Yes    HKLM:Run    RTHDVCPL    Realtek Semiconductor    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
Yes    HKLM:Run    RunDLLEntry    Microsoft Corporation    C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
Yes    HKLM:Run    ShadowPlay    Microsoft Corporation    C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
Yes    HKLM:Run    SwitchBoard    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
Yes    HKLM:Run    SynTPEnh    Synaptics Incorporated    %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
Yes    HKLM:Run    THX Audio Control Panel    Creative Technology Ltd    "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" /r
Yes    HKLM:Run    THXCfg64    Microsoft Corporation    C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
Yes    HKLM:Run    UpdReg    Creative Technology Ltd.    C:\Windows\UpdReg.EXE
Yes    HKLM:Run    USB3MON    Intel Corporation    "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
Yes    HKLM:Run    WD Drive Unlocker    Western Digital Technologies, Inc.    C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
Yes    HKLM:Run    WD Quick View    Western Digital Technologies, Inc.    C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
Yes    Startup Common    Hotkey.lnk        C:\Program Files (x86)\Hotkey\Hotkey.exe
Yes    Startup User    Monitor Ink Alerts - HP Photosmart 5520 series (Network).lnk    Microsoft Corporation    C:\Windows\system32\RunDll32.exe
Yes    Startup User    Point-N-Click.LNK    Polital Enterprises LLC    C:\Program Files (x86)\Point-N-Click\Point-N-Click.exe
 

--

 

Yes    Task    Adobe Acrobat Update Task    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Yes    Task    Adobe Flash Player PPAPI Notifier    Adobe Systems Incorporated    C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe -check pepperplugin
Yes    Task    AutoKMS        C:\Windows\AutoKMS\AutoKMS.exe
Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\System32\browserchoice.exe /launch
Yes    Task    Hybrid        C:\IORRT\IORRT.bat
Yes    Task    IORRT        C:\IORRT\IORRT.bat
Yes    Task    Opera scheduled Autoupdate 1423146482    Opera Software    C:\Program Files (x86)\Opera\launcher.exe --scheduledautoupdate
 

--

 

7-Zip 9.20        16/01/2013        
Adobe Flash Player 18 NPAPI    Adobe Systems Incorporated    28/08/2015    17.8 MB    18.0.0.232
Adobe Flash Player 18 PPAPI    Adobe Systems Incorporated    15/08/2015    18.3 MB    18.0.0.232
Adobe Photoshop CS6    Adobe Systems Incorporated    01/08/2015    2.85 GB    13.0
Adobe Reader XI (11.0.12)    Adobe Systems Incorporated    16/07/2015    184 MB    11.0.12
Amazon Music    Amazon Services LLC    08/08/2014        3.2.0.591
Apple Application Support (32-bit)    Apple Inc.    07/02/2015    94.3 MB    3.1.1
Apple Application Support (64-bit)    Apple Inc.    07/02/2015    107 MB    3.1.1
Apple Mobile Device Support    Apple Inc.    07/02/2015    27.9 MB    8.1.0.18
Apple Software Update    Apple Inc.    07/02/2015    2.38 MB    2.1.3.127
Atheros Bluetooth Suite (64)    Atheros    19/12/2012    96.4 MB    7.4.0.122
Audacity 2.0.3    Audacity Team    11/04/2013    44.1 MB    2.0.3
AuthenTec TrueSuite    AuthenTec, Inc.    24/09/2012    98.2 MB    5.2.0.642
Avid HFS+ Disk Support        24/09/2012        
AviSynth 2.5        13/04/2015        
AVStoDVD 2.8.1    MrC    13/04/2015        2.8.1
BisonCam    BisonCam    24/09/2012        
Bonjour    Apple Inc.    07/02/2015    2.00 MB    3.0.0.10
Bonjour Print Services    Apple Inc.    15/03/2015    3.21 MB    2.0.2.0
CCleaner    Piriform    09/09/2015        5.09
Click-N-Type    Lake Software    26/02/2015    1.17 MB    3.03.0415
Clock Screen Saver    ABF software    26/12/2012        1.6
DAEMON Tools Pro    Disc Soft Ltd    21/12/2014        6.0.0.0444
Exact Audio Copy 1.0beta4    Andre Wiethoff    24/02/2015        1.0beta4
FBReader for Windows        24/12/2014        
FLAC 1.2.1b (remove only)    Xiph.org    03/11/2013        1.2.1b
foobar2000 v1.3.4    Peter Pawlowski    23/10/2014    16.1 MB    1.3.4
Fraps        08/02/2015        
GIMP 2.8.14    The GIMP Team    27/10/2014    268 MB    2.8.14
GNU Backgammon (Version 1_04_000, 20141021)    Free Software Foundation    14/12/2014    77.2 MB    
GOM Player    Gretech Corporation    13/04/2015        2.2.69.5227
GrabIt 1.7.3 Beta (build 1010)    Ilan Shemes    27/12/2014    7.77 MB    
Hotkey 6.0058    NoteBook    24/09/2012    16.3 MB    6.0058
HP FWUpdateEDO2    Hewlett-Packard    12/08/2015    1.53 MB    1.2.0.0
HP Photo Creations    HP    29/07/2015    14.6 MB    1.0.0.7702
HP Photosmart 5520 series Basic Device Software    Hewlett-Packard Co.    29/07/2015    120 MB    28.0.1315.0
HP Photosmart 5520 series Help    Hewlett Packard    29/07/2015    12.1 MB    27.0.0
HP Update    Hewlett-Packard    05/08/2015    3.99 MB    5.005.002.002
ImgBurn    LIGHTNING UK!    31/03/2015        2.5.8.0
Infineon TPM Professional Package    Infineon Technologies AG    24/09/2012    89.8 MB    3.7.000
Intel® Management Engine Components    Intel Corporation    01/08/2015        8.0.12.1498
Intel® Rapid Storage Technology    Intel Corporation    01/08/2015        11.0.0.1032
Intel® USB 3.0 eXtensible Host Controller Driver    Intel Corporation    01/08/2015        1.0.5.235
iTunes    Apple Inc.    07/02/2015    234 MB    12.1.0.71
LAV Filters 0.64    Hendrik Leppkes    13/04/2015    28.2 MB    0.64
LibreOffice 3.6    The Document Foundation    24/01/2013    583 MB    3.6.4.3
LibreOffice 3.6 Help Pack (English (United Kingdom))    The Document Foundation    28/01/2013    20.8 MB    3.6.4.3
LightScribe System Software    LightScribe    07/01/2013    26.3 MB    1.18.26.7
LightScribe Template Designs - Art Pack 1    LightScribe    07/04/2015    2.60 MB    1.10.16.1
LightScribe Template Designs - Music Pack 1    LightScribe    07/04/2015    3.12 MB    1.15.0.0
LightScribe Template Designs - Tattoo Pack 1    LightScribe    07/04/2015    3.30 MB    1.13.0.0
LightScribe Template Designs - With The Band    LightScribe    07/04/2015    1.40 MB    1.18.8.110
LightScribe Template Labeler    LightScribe    08/01/2013    22.6 MB    1.18.26.7
LMMS 0.4.13    LMMS Developers    11/04/2013        0.4.13
MakeMKV v1.9.2    GuinpinSoft inc    13/04/2015        v1.9.2
Microsoft .NET Framework 4.5.2    Microsoft Corporation    15/01/2015    38.8 MB    4.5.51209
Microsoft Office 365 - en-us    Microsoft Corporation    24/08/2015        15.0.4745.1002
Microsoft OneDrive    Microsoft Corporation    31/07/2015    30.6 MB    17.3.4604.0120
Microsoft Security Essentials    Microsoft Corporation    13/05/2015        4.8.204.0
Microsoft Silverlight    Microsoft Corporation    06/09/2015    398 MB    5.1.40728.0
Microsoft SQL Server 2005 Compact Edition [ENU]    Microsoft Corporation    24/09/2012    1.69 MB    3.1.0000
Microsoft Visual C++ 2005 Redistributable    Microsoft Corporation    04/04/2015    290 KB    8.0.61001
Microsoft Visual C++ 2005 Redistributable (x64)    Microsoft Corporation    24/09/2012    620 KB    8.0.61000
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17    Microsoft Corporation    03/03/2015    252 KB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148    Microsoft Corporation    03/12/2014    784 KB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161    Microsoft Corporation    04/12/2014    786 KB    9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17    Microsoft Corporation    03/03/2015    240 KB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148    Microsoft Corporation    03/12/2014    586 KB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161    Microsoft Corporation    04/12/2014    598 KB    9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219    Microsoft Corporation    25/02/2015    13.8 MB    10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219    Microsoft Corporation    25/02/2015    11.1 MB    10.0.40219
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)    Microsoft Corporation    25/02/2015        10.0.50903
Monkey's Audio        14/01/2013    3.10 MB    
Mozilla Firefox 40.0.3 (x86 en-GB)    Mozilla    06/09/2015    85.8 MB    40.0.3
Mozilla Maintenance Service    Mozilla    13/08/2015    228 KB    40.0.0.5697
Mp3tag v2.69    Florian Heidenreich    11/04/2015        v2.69
My Net View    Western Digital    23/03/2015    7.08 MB    1.0.12.0
News File Grabber 4.6.0.4    RSBR-Software    08/02/2013        
NVIDIA 3D Vision Controller Driver 352.65    NVIDIA Corporation    06/09/2015        352.65
NVIDIA 3D Vision Driver 355.82    NVIDIA Corporation    06/09/2015        355.82
NVIDIA GeForce Experience 2.5.14.5    NVIDIA Corporation    06/09/2015        2.5.14.5
NVIDIA Graphics Driver 355.82    NVIDIA Corporation    06/09/2015        355.82
NVIDIA HD Audio Driver 1.3.34.3    NVIDIA Corporation    06/09/2015        1.3.34.3
NVIDIA PhysX System Software 9.15.0428    NVIDIA Corporation    06/09/2015        9.15.0428
Opera Stable 31.0.1889.174    Opera Software    19/08/2015        31.0.1889.174
Point-N-Click    Polital Enterpriese, LLC    17/09/2014    988 KB    2.10.3
PokerStars.uk    PokerStars.uk    05/02/2015        
PowerISO    Power Software Ltd    20/12/2014        6.1
Qualcomm Atheros Killer Network Manager    Qualcomm Atheros    19/12/2012    159 MB    6.1.0.395
QuickPar 0.9    Peter B. Clements    13/03/2013        0.9
Realtek Ethernet Controller Driver    Realtek    24/09/2012        7.54.309.2012
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    19/12/2012        6.0.1.6581
Realtek PCIE Card Reader    Realtek Semiconductor Corp.    24/09/2012        6.2.8400.27024
Revo Uninstaller 1.95    VS Revo Group    28/07/2015        1.95
SES Driver    Western Digital    23/03/2015    28.0 KB    1.0.0
Skype Click to Call    Microsoft Corporation    27/05/2015    10.0 MB    7.4.0.9058
Skype™ 7.8    Skype Technologies S.A.    30/08/2015    71.1 MB    7.8.102
Snowie Version 4        14/12/2014        
Sound Blaster X-Fi MB 2    Creative Technology Limited    19/12/2012        1.04.00
Synaptics Pointing Device Driver    Synaptics Incorporated    24/09/2012    46.4 MB    16.2.4.0
SYSM Monitor    SYSM Monitor    16/08/2015    45.3 MB    
Tau Analyzer (remove only)        19/06/2015        
True Image WD Edition    Acronis    15/03/2015    341 MB    16.0.5962
WD Discovery    Western Digital Technologies, Inc.    23/03/2015    7.33 MB    102.0.1.10
WD Drive Utilities    Western Digital Technologies, Inc.    23/03/2015    19.3 MB    1.1.0.51
WD My Cloud    Western Digital Technologies, Inc.    23/03/2015    50.3 MB    1.0.7.5
WD Quick View    Western Digital Technologies, Inc.    07/09/2015    13.0 MB    2.4.12.1
WD Security    Western Digital Technologies, Inc.    23/03/2015    27.7 MB    1.1.1.3
WD SmartWare    Western Digital Technologies, Inc.    07/09/2015    72.2 MB    2.4.12.1
WD SmartWare Installer    Western Digital Technologies, Inc.    23/03/2015    104 MB    2.4.10.17
WD SmartWare Installer    Western Digital Technologies, Inc.    07/09/2015    113 MB    2.4.12.1
WebCam Installer    WebCam    24/09/2012    11.9 MB    4.04
WinDjView 2.1    Andrew Zhezherun    05/07/2015        2.1
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM  (01/19/2011 1.0.0009.0)    Western Digital Technologies    23/03/2015        01/19/2011 1.0.0009.0
Windows Live Essentials    Microsoft Corporation    24/09/2012        15.4.3502.0922
Windows Live Mesh ActiveX Control for Remote Connections    Microsoft Corporation    24/09/2012    5.57 MB    15.4.5722.2
µTorrent    BitTorrent Inc.    10/05/2015        3.4.2.38397
 

--

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.0 (08.31.2015:1)
OS: Windows 7 Home Premium x64
Ran by James on 09/09/2015 at 11:56:47.87
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\IORRT



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\James\AppData\Roaming\mozilla\firefox\profiles\btm0n833.default\minidumps [3 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09/09/2015 at 11:58:36.88
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

--

 

Back to you!

Regards, Jake.



#4 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 09 September 2015 - 08:09 AM

I don't see the AdwCleaner results.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 09 September 2015 - 08:50 AM

Disable These Windows Startups: Use CCleaner by clicking on each item to highlight and then choosing on the right to Disable, Remove or Uninstall

Yes    HKCU:Run    AdobeBridge        
Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKLM:Run    AdobeAAMUpdater-1.0    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
Yes    HKLM:Run    AdobeCS6ServiceManager    Adobe Systems Incorporated    "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin

Yes    HKLM:Run    HP Software Update    Hewlett-Packard    C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

Yes    HKLM:Run    IAStorIcon    Intel Corporation    C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

Yes    HKLM:Run    iTunesHelper    Apple Inc.    "C:\Program Files\iTunes\iTunesHelper.exe"

Yes    HKLM:Run    ShadowPlay    Microsoft Corporation    C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
Yes    HKLM:Run    SwitchBoard    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

Yes    HKLM:Run    UpdReg    Creative Technology Ltd.    C:\Windows\UpdReg.EXE

 

Disable these Tasks:

Yes    Task    Adobe Acrobat Update Task    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Yes    Task    Adobe Flash Player PPAPI Notifier    Adobe Systems Incorporated    C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe -check pepperplugin
Yes    Task    AutoKMS        C:\Windows\AutoKMS\AutoKMS.exe
Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\System32\browserchoice.exe /launch
Yes    Task    Hybrid        C:\IORRT\IORRT.bat
Yes    Task    IORRT        C:\IORRT\IORRT.bat
Yes    Task    Opera scheduled Autoupdate 1423146482    Opera Software    C:\Program Files (x86)\Opera\launcher.exe --scheduledautoupdate
 

Uninstall These Programs:

LibreOffice 3.6    The Document Foundation    24/01/2013    583 MB    3.6.4.3 (OR UPDATE)
LibreOffice 3.6 Help Pack (English (United Kingdom))    The Document Foundation    28/01/2013    20.8 MB    3.6.4.3 (OR UPDATE)

Skype Click to Call    Microsoft Corporation    27/05/2015    10.0 MB    7.4.0.9058 (Unless you actually click on phone numbers in ads)

µTorrent    BitTorrent Inc.    10/05/2015        3.4.2.38397 (Dangerous to use to download free stuff....lots of adware and malware often bundled with downloads)

 

 

 

What is this used for?....SYSM Monitor    SYSM Monitor    16/08/2015    45.3 MB....Any problems using it?


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#6 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 09 September 2015 - 11:38 AM

I'm so sorry - I ran them strictly in the order you gave, but just overlooked the log... here it is:

 

# AdwCleaner v5.007 - Logfile created 09/09/2015 at 11:28:56
# Updated 08/09/2015 by Xplode
# Database : 2015-09-08.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : James - LAPTOP-PC
# Running from : C:\Users\James\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

Folder Found : C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [628 bytes] ##########
 

--

 

Apologies again - thanks for your forebearence... Jake.



#7 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 09 September 2015 - 11:41 AM

Should I still follow your next set of instructions?



#8 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 09 September 2015 - 12:55 PM

Yes, do the disable/ uninstall bit with CCleaner.

 

Due to adware and some bit of shady software....run a scan using Eset Online Scanner. This scan can take more than an hour depending on computer resources and size of files.

 

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#9 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 10 September 2015 - 05:36 AM

Hello again - OK, this is how far along I am so far:
 
All requested Windows Startups disabled with CCleaner - OK

All requested Tasks disabled with CCleaner, except
"Yes    Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\System32\browserchoice.exe /launch"

When I highlight this one and click on "disable," CCleaner returns the error message, "Failed to enable/disable startup item: No mapping between account names and security IDs was done."

- please advise?

All requested Programs uninstalled with CCleaner.
Query: LibreOffice up to now has been my go-to program for documents, spreadsheets, etc. Will it be OK to re-install this after we've finished, or can you suggest alternatives? I have Microsoft Office 2013 which waas a friend's "spare" install from their batch of 5 - I've never used it, cannot authorize it and would LOVE to uninstall it!! Will CCleaner do this cleanly or will there be a lot of "leftovers" (I've heard this is the case when uninstalling Office)?

Re. "What is this used for?....SYSM Monitor    SYSM Monitor    16/08/2015    45.3 MB....Any problems using it?"
I've absolutely no idea what it is! Should I uninstall it?

Back to you... Jake.
 



#10 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 10 September 2015 - 06:20 AM

After highlighting Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\System32\browserchoice.exe /launch" if the option is given to REMOVE...choose that.

 

I suggested Uninstall of Libre Office or to Update it. If it presently does everything you need it to do....I suggest leaving it....but there is a much newer version.

LibreOffice 5.0 Review & Rating | PCMag.com  If you decide to get the newer version you will need to uninstall the old one first. Suggest using Download Revo Uninstaller Freeware

in Advanced Mode for uninstalling it.

 

Yes, uninstall SYSM Monitor using Revo Uninstaller.

 

There is one item in the AdwCleaner scan that needs removing. Please rerun it and be sure to choose CLEAN when the scan finishes.

 

Have you scanned using the Eset Online Scanner...if so....what were the results?

 

 

EDIT: FROM THE WEB:

Uninstall Office 2013 or 365

To make sure your uninstall goes successfully, Microsoft has made a Fix it tool for everyone. Download this Fix it solution (kb 2739501) and launch it.

Start-Fix-it.png

Follow along with the onscreen instructions of the wizard. They’re straightforward and easy to do. The first option will be to apply a fix or skip the fix and continue troubleshooting. The tool will run for a few minutes.

After the problem is identifies and fixed, you can drill down deeper and get specific details about what caused the problems.

troubleshooting-report.png

After it’s done, Office 2013 will be completely uninstalled from your computer and then you can go back and reinstall it if you want.


Edited by buddy215, 10 September 2015 - 06:30 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#11 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 10 September 2015 - 11:20 AM

Hello again - latest update.

Re.  "After highlighting Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\System32\browserchoice.exe /launch" if the option is given to REMOVE...choose that." Done - highlighed in CCleaner and then "Delete." Gone!

I'd already uninstalled LibreOffice using CCleaner, along with uTorrent and Skype Click-To-Call. Hope that is OK.

Uninstalled SYSM Monitor using Revo Uninstaller - OK.

Reran AdwCleaner - pressed "SCAN"...followed by "CLEAN" and allowed restart of my laptop. Here's the log for this:

# AdwCleaner v5.007 - Logfile created 10/09/2015 at 13:46:00
# Updated 08/09/2015 by Xplode
# Database : 2015-09-08.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : James - LAPTOP-PC
# Running from : C:\Users\James\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C5].txt - [622 bytes] ##########

--

I will run the Eset Online Scanner overnight tonight (GMT) and post the results ASAP Friday.

 

Kind regards... Jake.

-



#12 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 10 September 2015 - 11:27 AM

Okay...sounds good....please comment on IE problems after running the Eset scan.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#13 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 11 September 2015 - 05:29 AM

Hello again...

 

Ran the Eset Online Scanner as previously instructed. Here's the log:
 

C:\Windows\System32\LavasoftTcpService64.dll    a variant of Win64/Packed.Komodia.A suspicious application    cleaned by deleting - quarantined
C:\Windows\SysWOW64\LavasoftTcpService.dll    a variant of Win32/Packed.Komodia.A suspicious application    cleaned by deleting - quarantined
G:\BACKUPS\bitcomet_ultra_accelerator_free.exe    Win32/DownWare.L potentially unwanted application    deleted - quarantined
G:\BACKUPS\cbsidlm-tr1_13-Logitech_Drivers_Download_Utility-ORG-75914921.exe    Win32/DownloadAdmin.G potentially unwanted application    deleted - quarantined
G:\BACKUPS\isobuster_install.exe    Win32/SmartFileAdvisor.A potentially unwanted application    deleted - quarantined
G:\BACKUPS\Newsbin Pro 5.35 Build 1842.rar    a variant of Generik.FQUZTDJ trojan    deleted - quarantined
G:\BACKUPS\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    deleted - quarantined
G:\BACKUPS\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\run-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    cleaned by deleting - quarantined
G:\BACKUPS\DAEMON Tools Pro Advanced 6.0.0.0444 Final Incl. Crack [ATOM]\DTPro600-0444.exe    Win32/DownWare.L potentially unwanted application    deleted - quarantined
G:\BACKUPS\Music Apps\wpsetup.exe    a variant of Win32/Toolbar.Conduit.H potentially unwanted application    deleted - quarantined
G:\BACKUPS\Music Apps\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    deleted - quarantined
G:\BACKUPS\Music Apps\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\run-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    cleaned by deleting - quarantined
G:\BACKUPS\PowerISO 6.1 Multilingual (x86-x64) + Crack [ATOM]\PowerISO6-x64.exe    a variant of Win32/ClientConnect.A potentially unwanted application    deleted - quarantined
G:\BACKUPS\PowerISO 6.1 Multilingual (x86-x64) + Crack [ATOM]\PowerISO6-x86.exe    a variant of Win32/ClientConnect.A potentially unwanted application    deleted - quarantined
G:\BACKUPS\WINDOWS 7 Anti-virus Apps\zaSetupWeb_110_000_020.exe    Win32/Toolbar.Conduit potentially unwanted application    deleted - quarantined
J:\BACKUPS\cbsidlm-tr1_13-Logitech_Drivers_Download_Utility-ORG-75914921.exe    Win32/DownloadAdmin.G potentially unwanted application    deleted - quarantined
J:\BACKUPS\isobuster_install.exe    Win32/SmartFileAdvisor.A potentially unwanted application    deleted - quarantined
J:\BACKUPS\Newsbin Pro 5.35 Build 1842.rar    a variant of Generik.FQUZTDJ trojan    deleted - quarantined
J:\BACKUPS\bitcomet_ultra_accelerator_free.exe    Win32/DownWare.L potentially unwanted application    deleted - quarantined
J:\BACKUPS\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    deleted - quarantined
J:\BACKUPS\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\run-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    cleaned by deleting - quarantined
J:\BACKUPS\DAEMON Tools Pro Advanced 6.0.0.0444 Final Incl. Crack [ATOM]\DTPro600-0444.exe    Win32/DownWare.L potentially unwanted application    deleted - quarantined
J:\BACKUPS\Music Apps\wpsetup.exe    a variant of Win32/Toolbar.Conduit.H potentially unwanted application    deleted - quarantined
J:\BACKUPS\Music Apps\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    deleted - quarantined
J:\BACKUPS\Music Apps\Cubase 7.0 Original (x64-x86)[Licence Key - Full version] Official Software\run-setup.exe    NSIS/TrojanDownloader.Adload.N trojan    cleaned by deleting - quarantined
J:\BACKUPS\PowerISO 6.1 Multilingual (x86-x64) + Crack [ATOM]\PowerISO6-x64.exe    a variant of Win32/ClientConnect.A potentially unwanted application    deleted - quarantined
J:\BACKUPS\PowerISO 6.1 Multilingual (x86-x64) + Crack [ATOM]\PowerISO6-x86.exe    a variant of Win32/ClientConnect.A potentially unwanted application    deleted - quarantined
J:\BACKUPS\WINDOWS 7 Anti-virus Apps\zaSetupWeb_110_000_020.exe    Win32/Toolbar.Conduit potentially unwanted application    deleted - quarantined
J:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP125\A0029030.exe    Win32/Toolbar.AskSBar potentially unwanted application    deleted - quarantined
 

--

 

Will happily give IE a run out today - however, I normally only ever use Firefox, or occasionally Opera.

As I posted originally, it was Windows Explorer ("file manager") that was affected mainly - hanging, closing down and restarting, while scrambling the desktop icons  / clearing and only partly reloading the taskbar tray. It did this mostly every time I right-clicked on a file or folder within Explorer, or when I tried to access the drop-down menus.

Interestingly, the problem abated somewhat after I selected "Always show icons, never thumbnails" within Control Panel > Folder Options > View > Files and Folders (this option is now set to ON). However, I really miss this feature and would love to be able to change it back again, without starting off all the crashes once more!!

 

Back 2U... Jake.



#14 buddy215

buddy215

  • Moderator
  • 13,313 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:54 AM

Posted 11 September 2015 - 09:02 AM

You can forgo the IE test....I was mistaken in thinking IE instead of Windows Explorer.

 

What are the J and G drives that so much bad software was found on by Eset?

 

The Windows Repair tools may help. Be sure to perform Option 3 and Option 4.

Windows Repair (All In One) Download

 

Windows Repair is a utility that contains numerous mini-fixes for Windows.  This tool will allow you to repair common issues with your computer such as firewall, file permission, and Windows Update problems.  When using this tool you can select the particular fixes you would like to launch and start the repair process.  This tool also comes in a portable version that allows you to use the program from a portable device such as a USB flash drive.

Allow Windows Repair to perform the following tasks:

  • Reset Registry Permissions
  • Reset File Permissions
  • Register System Files
  • Repair WMI
  • Repair Windows Firewall
  • Repair Internet Explorer
  • Repair MDAC & MS Jet
  • Repair Hosts File
  • Remove Policies Set By Infections
  • Repair Icons
  • Repair Winsock & DNS Cache
  • Remove Temp Files
  • Repair Proxy Settings
  • Unhide Non System Files
  • Repair Windows Updates
  • Repair CD/DVD Missing/Not Working

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#15 jacobus5566

jacobus5566
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:05:54 AM

Posted 12 September 2015 - 09:12 AM

Back again - sorry for the delay - major issues this end!!

 

Firstly - those two drives are old external hdds that are still connected to my USB hub and which contain loads of old junk, most of which wasn't mine to begin with - have now used the ESET logfile to delete all flagged up folder, all of which were copies of dowloaded program installations. Hope this suffices?

 

HOWEVER! Ran Windows Repair as instructed in Safe Mode With Networking... when laptop rebooted, I couldn't use any of my Assistive Tech, ie Point-To-Click on screen mouse buttons, and having Windows on screen keyboard and magnyfier on - both of which are essential to me - prevents me from clicking on anything else. Also, some of the secondary pop-up selection window (ie. things like, "Are you sure you want to delete? YES NO" are now inaccesible via a mouse click... serious difficulties! I'm only able to get this to you with the aid of my carer and a very clunky old on-screen keyboard that still works! BTW orry 4 any typos. Tried going back to the restore point it created, but still the same...

 

Am now seriously considering restoring to the full PC Backup I created when I first bought this laptop, and/or using Windows 7 disc to run repairs? Any other suggestions welcome too, of course... Jake.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users