Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

All PDF, word , Excel , Rar had corrupted by eset nod32 antivirus


  • Please log in to reply
7 replies to this topic

#1 abidnaif

abidnaif

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Iraq
  • Local time:07:26 AM

Posted 21 July 2016 - 06:54 AM

 Hello All

I faced problem when I updated my ESET Smart security 4.2 suddenly appear virus in  computer , then the NOD Start remove all software exe in my computer , D , E,F,G . after removing all programs these partitions the NOD start to remove the fixed software in C: System , it remove file from word , pdf , rar …etc . the fixed program now not working and all files ( word , excel , pdf , rar ) now not working . after that I am formatted the c: and scan with intivrous , the computer be good but files corrupted . I Still tried to open with other computers but I cant open any one .

My problem now with the damaged files and corrupted I tried to resolve the problem in multi methods of software but without benefit . so my files in normal sizes and formatted and not shortcut , so  I can't open these files  .

 

please advice me and help to open my files if possible , all my files had corrupted . 


Edited by hamluis, 21 July 2016 - 10:06 AM.
Moved from Encryption to XP - Hamluis.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,113 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:26 PM

Posted 21 July 2016 - 09:26 AM

I don't believe this topic belongs in this forum, I will move when I see some data.

 

1.  Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
2.  Please download and install Speccy to provide us with information about your computer.  Clicking on this link will automatically initiate the download.  
 
When Speccy opens you will see a screen similar to the one below.
 
speccy9_zps2d9cdedc.png
 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 
speccy7_zpsfa02105f.png
 
The following screen will appear, click on Copy to Clipboard.
 
speccy3_zps1791b093.png
 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
Louis


#3 abidnaif

abidnaif
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Iraq
  • Local time:07:26 AM

Posted 21 July 2016 - 11:00 AM

MiniToolBox by Farbar  Version: 17-06-2016
Ran by abid (administrator) on 21-07-2016 at 19:54:53
Running from "C:\Documents and Settings\abid\My Documents\Downloads"
Microsoft Windows XP Professional Service Pack 2 (X86)
Model: Inspiron 1520 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (07/16/2016 11:40:35 AM) (Source: Application Error) (User: )
Description: Faulting application explorer.exe, version 6.0.2900.2180, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x0004eb28.
Processing media-specific event for [explorer.exe!ws!]
 
Error: (07/15/2016 12:00:57 PM) (Source: Application Hang) (User: )
Description: Hanging application wordpad.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (07/15/2016 12:00:55 PM) (Source: Application Hang) (User: )
Description: Hanging application wordpad.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (07/14/2016 03:01:20 PM) (Source: Application Hang) (User: )
Description: Hanging application Acrobat.exe, version 7.0.0.1333, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (07/14/2016 03:00:01 PM) (Source: Application Hang) (User: )
Description: Hanging application EXCEL.EXE, version 11.0.5612.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (07/13/2016 03:27:03 PM) (Source: Application Hang) (User: )
Description: Hanging application explorer.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
System errors:
=============
Error: (07/21/2016 07:30:02 PM) (Source: Dhcp) (User: )
Description: The IP address lease 192.168.0.113 for the Network Card with network address 001E4C8D12BB has been
denied by the DHCP server 172.20.10.1 (The DHCP Server sent a DHCPNACK message).
 
Error: (07/21/2016 06:19:07 PM) (Source: Dhcp) (User: )
Description: Your computer has lost the lease to its IP address 192.168.0.113 on the
Network Card with network address 001E4C8D12BB.
 
Error: (07/21/2016 11:26:00 AM) (Source: Dhcp) (User: )
Description: Your computer has lost the lease to its IP address 192.168.0.113 on the
Network Card with network address 001E4C8D12BB.
 
Error: (07/20/2016 08:35:34 PM) (Source: W32Time) (User: )
Description: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible. 
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.
 
Error: (07/20/2016 08:35:34 PM) (Source: W32Time) (User: )
Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)
 
Error: (07/20/2016 08:33:23 PM) (Source: W32Time) (User: )
Description: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible. 
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.
 
Error: (07/20/2016 08:33:23 PM) (Source: W32Time) (User: )
Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)
 
Error: (07/20/2016 08:23:29 PM) (Source: W32Time) (User: )
Description: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible. 
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.
 
Error: (07/20/2016 08:23:29 PM) (Source: W32Time) (User: )
Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)
 
Error: (07/20/2016 08:14:44 PM) (Source: W32Time) (User: )
Description: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible. 
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.
 
Microsoft Office Sessions:
=========================
Error: (07/16/2016 11:40:35 AM) (Source: Application Error)(User: )
Description: explorer.exe6.0.2900.2180ntdll.dll5.1.2600.21800004eb28
 
Error: (07/15/2016 12:00:57 PM) (Source: Application Hang)(User: )
Description: wordpad.exe5.1.2600.2180hungapp0.0.0.000000000
 
Error: (07/15/2016 12:00:55 PM) (Source: Application Hang)(User: )
Description: wordpad.exe5.1.2600.2180hungapp0.0.0.000000000
 
Error: (07/14/2016 03:01:20 PM) (Source: Application Hang)(User: )
Description: Acrobat.exe7.0.0.1333hungapp0.0.0.000000000
 
Error: (07/14/2016 03:00:01 PM) (Source: Application Hang)(User: )
Description: EXCEL.EXE11.0.5612.0hungapp0.0.0.000000000
 
Error: (07/13/2016 03:27:03 PM) (Source: Application Hang)(User: )
Description: explorer.exe6.0.2900.2180hungapp0.0.0.000000000
 
=========================== Installed Programs ============================
Adobe Acrobat 7.0 Professional (HKLM\...\{AC76BA86-1033-0000-7760-000000000002}) (Version: 7.0.0 - Adobe Systems) Hidden
Adobe Acrobat 7.0 Professional (HKLM\...\Adobe Acrobat 7.0 Professional) (Version: 7.0.0 - Adobe Systems)
Adobe Photoshop 7.0.1 ME (HKLM\...\Adobe Photoshop 7.0.1 ME) (Version: 7.0.1 ME - Adobe Systems, Inc.)
AIMP3 (HKLM\...\AIMP3) (Version: v3.60.1492, 24.04.2015 - AIMP DevTeam)
Baidu Browser (HKLM\...\Spark) (Version: 40.16 Preview - Baidu Inc.)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.217 - ALPS ELECTRIC CO., LTD.)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.13 - Synaptics Incorporated)
Dell Wireless WLAN Card (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.170.25.12 - Dell Inc.)
ESET NOD32 Antivirus (HKLM\...\{EFA800BF-C5C8-46D1-B49D-13920D05417C}) (Version: 4.0.467.0 - ESET, spol s r. o.)
Google Chrome (HKCU\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 6.14.10.5218 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM\...\ProInst) (Version: 11.01.0000 - Intel Corporation)
Laptop Integrated Webcam Driver (1.04.01.1011)   (HKLM\...\Creative OEM002) (Version:  - )
mCore (HKLM\...\{E81667C6-2856-46D6-ABEA-6A2F42166779}) (Version: 9.24.0000 - Intel Corporation) Hidden
mDriver (HKLM\...\{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}) (Version: 9.24.0000 - Intel) Hidden
mDrWiFi (HKLM\...\{F6090A17-0967-4A8A-B3C3-422A1B514D49}) (Version: 9.24.0000 - Intel Corporation) Hidden
mHlpDell (HKLM\...\{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}) (Version: 9.24.0000 - Intel) Hidden
Microsoft Office Professional Edition 2003 (HKLM\...\{90110401-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
mIWA (HKLM\...\{3E9D596A-61D4-4239-BD19-2DB984D2A16F}) (Version: 9.24.0000 - Intel Corporation) Hidden
mLogView (HKLM\...\{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}) (Version: 9.24.0000 - Intel Corporation) Hidden
mMHouse (HKLM\...\{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}) (Version: 9.24.0000 - Intel Corporation) Hidden
Mozilla Firefox 37.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 37.0.2 (x86 en-US)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
mPfMgr (HKLM\...\{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}) (Version: 9.24.0000 - Intel Corporation) Hidden
mPfWiz (HKLM\...\{90B0D222-8C21-4B35-9262-53B042F18AF9}) (Version: 9.24.0000 - Intel Corporation) Hidden
mProSafe (HKLM\...\{23FB368F-1399-4EAC-817C-4B83ECBE3D83}) (Version: 9.00.0000 - Intel) Hidden
mSCfg (HKLM\...\{829CD169-E692-48E8-9BDE-A3E8D8B65538}) (Version: 9.24.0000 - Intel Corporation) Hidden
mSSO (HKLM\...\{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}) (Version: 9.24.0000 - Intel Corporation) Hidden
MSXML 6.0 Parser (HKLM\...\{AEB9948B-4FF2-47C9-990E-47014492A0FE}) (Version: 6.00.3883.8 - Microsoft Corporation) Hidden
mWlsSafe (HKLM\...\{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}) (Version: 9.00.0000 - Intel) Hidden
mWMI (HKLM\...\{63DB9CCD-2B56-4217-9A3D-507AC78320CA}) (Version: 9.24.0000 - Intel Corporation) Hidden
mZConfig (HKLM\...\{94658027-9F16-4509-BBD7-A59FE57C3023}) (Version: 9.24.0000 - Intel Corporation) Hidden
pdfFactory Pro (HKLM\...\pdfFactory Pro) (Version: 5.12 - FinePrint Software, LLC)
Remo Repair Word (HKLM\...\{D3A5E63A-5648-48D8-9283-149D9BFE44E9}_is1) (Version: 2.0.0.26 - Remo Software)
SigmaTel Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 5.10.5102.0 - SigmaTel)
SysInfoTools PDF Repair Demo v3.0 (HKLM\...\{1F080AF3-1286-43F7-A4E3-7867621A99E1}_is1) (Version:  - SysInfoTools)
UltraISO Premium V9.62 (HKLM\...\UltraISO_is1) (Version:  - )
USB Disk Security 5.1.0.15 (HKLM\...\USB Disk Security_is1) (Version:  - zbshareware, Inc.)
VLC media player 2.1.0-git-20120313-0005 (HKLM\...\VLC media player) (Version: 2.1.0-git-20120313-0005 - VideoLAN)
WebFldrs XP (HKLM\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden
WinRAR 5.21 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
المورد القريب (HKLM\...\المورد القريب) (Version:  - )
حزمة التوافق لنظام Office 2007 (HKLM\...\{90120000-0020-0401-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)
 
========================= Memory info: ===================================
Percentage of memory in use: 82%
Total physical RAM: 1013.97 MB
Available physical RAM: 178.19 MB
Total Virtual: 2441.15 MB
Available Virtual: 623.4 MB
 
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:34.18 GB) (Free:24.63 GB) NTFS
2 Drive d: () (Fixed) (Total:48.83 GB) (Free:1.96 GB) NTFS
3 Drive e: () (Fixed) (Total:48.83 GB) (Free:2.78 GB) NTFS
4 Drive f: () (Fixed) (Total:48.83 GB) (Free:3.18 GB) NTFS
5 Drive g: () (Fixed) (Total:52.21 GB) (Free:2.73 GB) NTFS
8 Drive k: (HP v165w) (Removable) (Total:7.48 GB) (Free:5.31 GB) FAT32
 
========================= Users: ========================================
User accounts for \\ABID-D6C20C5E6B
 
abid                     Administrator            Guest                    
HelpAssistant            SUPPORT_388945a0         
 
========================= Minidump Files ==================================
No minidump file found
 
========================= Restore Points ==================================
13-07-2016 08:10:49 System Checkpoint
13-07-2016 08:21:40 DriverPack Solution 14.14
13-07-2016 08:26:55 Installed Windows XP Wdf01009.
13-07-2016 08:50:08 Installed ESET NOD32 Antivirus
13-07-2016 10:32:19 تم تثبيته Microsoft Office Professional Edition 2003
13-07-2016 10:38:01 تم تثبيته حزمة التوافق لنظام Office 2007
13-07-2016 10:49:36 Installed Adobe Acrobat 7.0 Professional
13-07-2016 11:15:36 Printer Driver pdfFactory 5 Installed
13-07-2016 12:40:39 Installed SigmaTel Audio
14-07-2016 22:05:22 System Checkpoint
18-07-2016 18:37:18 System Checkpoint
19-07-2016 19:27:31 System Checkpoint
21-07-2016 08:16:35 System Checkpoint
 
**** End of log ****

Edited by hamluis, 21 July 2016 - 11:16 AM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,113 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:26 PM

Posted 21 July 2016 - 12:27 PM

Please...follow the instructions previously provided for the Speccy Snapshot.

 

Louis



#5 abidnaif

abidnaif
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Iraq
  • Local time:07:26 AM

Posted 22 July 2016 - 03:20 AM

http://speccy.piriform.com/results/Ly2V8aTPl4aRk3M2fHTwPw2



#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,113 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:26 PM

Posted 22 July 2016 - 09:32 AM

The data reflected for your hard drive doesn't look good, IMO.  Drive reflects a status of "Warning", which is not good.

 

Before doing anything else...I suggest that you move any valued files from that hard drive, storing them somewhere else/using different storage media.

 

Louis



#7 abidnaif

abidnaif
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Iraq
  • Local time:07:26 AM

Posted 22 July 2016 - 09:56 AM

Dear Sir,

 

thank you very much to your care and help .

    I will move all my data to another external drive , but my files ( pdf,word, excl , rar ) dosent open until with other computers . all files take me the file corrupted . my big problem with files more than the computer . do you have method or program can open the files after infected .  



#8 hamluis

hamluis

    Moderator


  • Moderator
  • 56,113 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:26 PM

Posted 22 July 2016 - 11:58 AM

Well...any file corruption could be the result of hard drive problems, not necessarily malware (as you seem to suppose).  If the hard drive is the root cause, then it's unrealistic to expect to be able to properly run Windows or do any other normal activities with files which are on that hard drive.

 

We can check the hard drive for functional capability and then determine the next ste...after you move your valued files from the hard drive.  We want to move the files to different storage media because, at this moment, the functional status of the hard drive is in question.

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users