C++ Runtime error, no calendar for sys Restore

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Aim4WhirledPeas, Jan 18, 2006.

  1. Aim4WhirledPeas

    Aim4WhirledPeas Private E-2

    Hi- I'm not the most techno-savy person, so I'm going to try my best here. I've recently been receiving errors when I start my computer, including "Runtime Error! Program: C:\WINDOWS\explorer.exe" When I thought I had a problem, I went to do System Restore, but oops! No calendar shows up... I have no idea if these problems are connected in any way. Any help would be much appreciated.

    -Amanda
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    Also make sure you pay attention to step 3 because you have multiple antivirus applications installed.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
  3. Aim4WhirledPeas

    Aim4WhirledPeas Private E-2

    Sorry about that. I forgot that my college installed an anti-virus program on my computer along with AVG.

    Some spyware was found during the scans, as well as several trojans by BitDefender (I included the log). However, I don't know what to do about them now. I was able to complete everything else as asked and download all tools. The C++ Runtime error was solved, but I still can't view the calendar in system restore.

    Thanks,
    Amanda
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your BitDefender log is not a complete log. It only shows malware names and does not show where problems were found. You did not save it properly. You did not run PandaActiveScan log (also required) from step 6.

    Make sure viewing of hidden files is enabled (per the tutorial).

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    O2 - BHO: (no name) - {023BB2E5-2F56-2685-2EF6-2E879CF5EABF} - C:\WINDOWS\system32\sial.dll (file missing)
    O2 - BHO: (no name) - {96761A1B-D0A2-DD70-D149-804D81A32FE2} - C:\WINDOWS\system32\fshclz.dll (file missing)
    O2 - BHO: (no name) - {E64D8D52-48E2-166E-CBA6-4E81ECC058EF} - C:\WINDOWS\system32\mbu.dll (file missing)

    After clicking Fix, exit HJT.
    Boot into safe mode and use Windows Explorer to delete (if found):
    C:\WINDOWS\system32\sial.dll
    C:\WINDOWS\system32\fshclz.dll
    C:\WINDOWS\system32\mbu.dll

    If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

    Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.
    Now run Ccleaner (installed while running the READ ME FIRST).


    Now reboot in normal mode and post a new HJT log. And tell us how things are working.

    Reminder Note: Once we have determined you are malware free you will need to disable System Restore, reboot, and re-enable system restore per step 1 of the READ & RUN ME. This only applies to if using WinXP or WinMe.
     
  5. Aim4WhirledPeas

    Aim4WhirledPeas Private E-2

    Done. However, I still don't see the calendar when I go to system restore. Any ideas?

    thanks,
    Amanda
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It is probably not a malware problem. Do you mean a blank calendar? Check out the below:

    http://www.dougknox.com/xp/utils/xp_sysrestore_blank.htm
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  8. Aim4WhirledPeas

    Aim4WhirledPeas Private E-2

    I've actually tried both, along with the solution on the Microsoft website that involves changing some things in the registry. I'm honestly not sure of what else to do at this point. However, everything else seems great right now :)
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Both the links I gave you involved registry changes! Did you use them to merge fixes into the registry? I'm not saying that they will definitely resolve the problem but rather question whether you did them correctly.

    Do you have System Restore enabled?
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try doing the below.

    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now reboot your PC. Let me know if there is any change.

    Make sure you read the below quote from Microsoft.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds