explorer.exe not responding when loging off

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by cj08, Nov 25, 2005.

  1. cj08

    cj08 Private E-2

    I posted in the software forum but got no responce so I thought I'd try here.

    I have a Dell pc with Windows XP. McAffe virus scan and firewall.

    Every time I try to logoff of Windows I get "explorer.exe" is not responding error. I also noticed that I cannot disable my windows firewall or virus protection. I get these same errors in safe mode if that helps.

    Help???
     
    cj08, Nov 25, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Let's see if we can figure out if this is malware or not.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
    chaslang, Nov 26, 2005
    #2
  3. cj08

    cj08 Private E-2

    Ok, I ran all the virus scans and tools. Microsoft Antispyware found 2 items. Web hancer (medium risk) and Search Assistant (high risk). I removed them both. Other than that, everything seemed to be in order.

    I'm still having the same problem with explorer not responding when I try to log off and windows firewall and virus protection will not turn off. I also noticed that when I put my mouse pointer over the start menu and other buttons on the tool bar, a small hidden window appears behind them. VERY strange.

    I will attach the Hijack This log since I'm still having problems.

    Thank you for your response and if I need to do anything else, just let me know! :)
     
    Last edited: Nov 5, 2006
    cj08, Nov 27, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This is a bad place to install programs:
    C:\Documents and Settings\chad\My Documents\virus tools\gcasDtServ.exe

    You really should use their defaults under C:\Program Files The way you installed this only chad can run it and also it is in a spot where malware likes to insert itself which makes it looks suspicious to anyone looking at logs. We would wonder if this is the REAL MS Antispyware or a malware program pretending to be MS Antispyware.
    You should fix the below but this will not fix your problems.

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)

    After clicking Fix, exit HJT.
     
    chaslang, Nov 27, 2005
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You have McAfee's Firewall installed. Did you disable the WinXP SP2 firewall?

    Try ending ALL McAfee running items and then shutting down your PC. Does that work?
     
    chaslang, Nov 27, 2005
    #5
  6. cj08

    cj08 Private E-2

    I did not know that was a bad place to install programs. I will use the defaults from now on.
    I fixed the lines you asked me to fix.
    I think my windows xp firewall is disabled. When I click on the firewalls icon on the security center screen it says it's off, but the green light on the main securty center screen stays on. It will not go to red like it has done in the past. Neither will the virus protection. I think they are disabled, but I'm not 100% sure because those lights won't go to red.

    The little windows that were hiding behind the taskbar are no longer hiding, but the other problems still exist.
     
    cj08, Nov 27, 2005
    #6
  7. cj08

    cj08 Private E-2

    Ok, the General tab of the windows xp firewall says the fire wall is OFF. I think the green light stays on because my other firewall is running.

    So to finally answer your question... YES, windows XP firewall is off.
     
    cj08, Nov 27, 2005
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    When did this problem begin? Had you installed anything or downloaded any Windows patches or other software recently before this began?

    I have seen people report a similar problem when using a program named: Wormguard
     
    chaslang, Nov 27, 2005
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds