Pls.!!!badly Need Help For Pop-up Problem,,(helppane.exe, Explore.exe, Dllhost.exe, Etc..)

Discussion in 'Malware Help (A Specialist Will Reply)' started by alex02, Dec 16, 2015.

  1. alex02

    alex02 Private E-2

    Good day Admin/s as well as all members of this site!! I'm glad and found a new hope as i found this site to help me out for my long time problem here in my laptop.. I am using Lenovo laptop, Windows 7 32bit,. My problem is this very annoying pop-ups everytime I open such program, apps like INTERNET EXPLORER, which always re direct random tabs fast and simultaneously, also pop ups randomly helpPane.exe..i really don't know what exactly the cause of this..I've tried different anti virus/anti malware, system tools, cleaning tools before but problem still exist until now!!! (unfortunately, i do not have a print output or save their report logs) as of now, I use bitdefender but still, this problem still exist..Pls,pls, pls, pls. i am badly needed help..thanks in advance and more power!! I will really appreciate what ever help you can give to me, thanks a lot!!! (Honestly, i just only repost it here, i post it yesterday in other computer help forum site (i think it's in-appropriate to name that site), unfortunately, one of the member there who trying to help me, did not fix/resolved my problem.. http://www.bleepingcomputer.com/forums/public/style_emoticons/default/sad.png ) so i repost it here hoping to fix, resolved, or somehow minimized my problem, pls. i desperately need help coz this problem affecting some application that i always use and this laptop is the only one i use in my small home business, and as of now i do not have sufficient money to buy and replace it (incase the problem do not fix)..thanks so much in advance and more power!!)
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

  3. alex02

    alex02 Private E-2

    Hi good day again, i finished the READ AND RUN ME FIRST guide last night, as i observed several hours past and still the problem that i stated above still exist,..As part of the step the series of results is here:

    (unfortunately, the hitman pro result was failed. i try to re-run the test twice but still failed and always leads me to restart so i didn't force the scan)
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Did you have a problem running MGLogs? It is incomplete. Please make sure UAC is turned off and disable your protection programs. Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7,or Win8 don't double click, use right click and select Run As Administrator).Make sure that you watch for the license agreement for TrendMicro HijackThis and click on the Accept button TWICE to accept ( yes twice ).
     
  5. alex02

    alex02 Private E-2

    i think i have problem running it, coz when the time i run it only the cmd appears for so long time (i think about 4 to 5 hrs),..do think there's something wrong sir? (btw i just save it on my desktop..but as i knew my desktop is in c: (location)
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please click Start, All Program, Accessories and you will see ( among other things ) a Command Prompt entry.
    • Right click the Command Prompt entry and select Run As Administrator.
      • It is critical that you run it this way.
    • If you do this properly, a command prompt window will open with a title of Administrator Command Prompt.
    • Enter the below commands at the command prompt each followed by the enter key. The bold black are commands. The purple/brown is merely informational.
    cd \MGtools <-- this changes to the MGtools folder and the prompt should change to C:\MGtools>
    GetRunKey<-- this will try to run all one scan from MGtools. Tell me what error messages, if any, you see.
    ShowNew<-- this will try to run all one scan from MGtools. Tell me what error messages, if any, you see.
     
  7. alex02

    alex02 Private E-2

    yes sir, i double check the uac and its turned off since before i run mglogs..is that normal sir, running this for so long hrs.?
     
  8. alex02

    alex02 Private E-2

    ok sir, i will do your step gave to me..thanks..
     
  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    This is sounding more like a system issue than malware, other than the pop up.
     
  10. alex02

    alex02 Private E-2

    good day again sir, these are the results of the last step that you've given to me..

    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\ALPHA>cd \MGtools

    C:\MGtools>GetRunKey


    GetRunKey.bat - 08/06/2015 Version 2.75

    NOTE: Ignore any error messages about not finding registry keys!
    Just wait for the program to finish running!!

    The system cannot find the file specified.
    Zipping runkeys.txt
    Finished Zipping runkeys.txt

    C:\MGtools>GetRunKey


    GetRunKey.bat - 08/06/2015 Version 2.75

    NOTE: Ignore any error messages about not finding registry keys!
    Just wait for the program to finish running!!

    The system cannot find the file specified.
    Zipping runkeys.txt
    Finished Zipping runkeys.txt

    C:\MGtools>
    C:\MGtools>
    C:\MGtools>ShowNew


    ShowNew.bat - 10/14/2015 Version 3.21


    ************************** WARNING **************************
    If you see a popup saying that:

    SteelWerX WhoAmI application has stopped working

    do not click the Cancel button that first appears. Wait for
    the Close program button to appear and click it to continue
    ************************** WARNING **************************

    Scanning please Wait.
    ============= Finding copies of actxprxy.dll
    ============= Finding copies of csrss.exe
    ============= Finding copies of ctfmon.exe
    ============= Finding copies of cngaudit.dll
    ============= Finding copies of explorer.exe
    ============= Finding copies of kernel32.dll
    ============= Finding copies of lsass.exe
    ============= Finding copies of netlogon.dll
    ============= Finding copies of ntfs.sys
    ============= Finding copies of powrprof.dll
    ============= Finding copies of proquota.exe
    ============= Finding copies of regedit.exe
    ============= Finding copies of scecli.dll
    ============= Finding copies of services.exe
    ============= Finding copies of spoolsv.exe
    ============= Finding copies of svchost.exe
    ============= Finding copies of termsrv.dll
    ============= Finding copies of userinit.exe
    ============= Finding copies of user32.dll
    ============= Finding copies of winlogon.exe
    ============= Finding copies of ws2_32.dll
    Checking for .COM files to Delete. They will only print if deleted

    Listing COM, DLL, EXE, and SYS file in C:\Windows
    Locating COM files in C:\Windows\system32 - recursive
    Locating DLL files in C:\Windows
    Locating DLL files in C:\Windows\system32 - recursive
    Locating EXE files in C:\Windows
    Locating EXE files in C:\Windows\system32 - recursive
    Locating SYS files in C:\Windows
    Locating SYS files in C:\Windows\system32 - recursive
    Zipping newfiles.txt
    Finished Zipping newfiles.txt
    Zipping ffdata.txt
    Finished Zipping ffdata.txt
    Zipping winfiles.txt
    Finished Zipping winfiles.txt

    C:\MGtools>
     
  11. alex02

    alex02 Private E-2

    i just hit the enter key accidentally in getrunkey.. (sorry for that sir)
     
  12. alex02

    alex02 Private E-2

    waiting for further instruction sir, thanks for helping me out and more power!!!
     
  13. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Let's see if we can fix some system errors:

    Download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.
    • Now run Repair_Windows.exe by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)
    • Now select the + Repairs tab.
    • Then click the + Open Repairs button down on the bottom right.
    • This will automatically begin a registry backup, so wait for it to complete and when it finishes, you will see a list of many possible different repairs and they are all selected by default. At the bottom of this form there is a not so obvious Unselect All Repairs check box which is to the right of a check box with a green check mark in it. Please click the Unselect All Repairs box. The green check mark box is to Select All Repairs. The ony way you see what these boxes are is when your mouse hovers over them.
    • Now select the following repair options ( the numbers at the begin are the current repair numbers but this is subject to change.)
      • 01 - Reset Registry Permissions
      • 02 - Reset File Permissions
      • 03 - Reset Service Permissions
      • 04 - Register System Files
      • 05 - Repair WMI
      • 06 - Repair Windows Firewall
      • 10 - Remove Policies Set By Infections
      • 13 - Network
      • 14 - Repair Proxy Settings
      • 15 - Repair Windows Updates
      • 21 - Repair MSI (Windows Installer)
      • 23 - Repair File Associations (12 )
      • 26 - Restore Important Windows Services
      • 27 - Set Windows Services To Default Startup
    • Now on the right side under the When Repairs Complete title, check the box for Restart/Shutdown System and then make sure the Restart System radio button is enabled not the Shutdown System button.
    • Shutdown any other programs that you are running now before continuing.
    • Now click the Start Repairs button at the lower right.
    • Be patient while the tool repairs the selected items.
    • It should reboot automatically when finished. If it does not then reboot it yourself.
     
  14. alex02

    alex02 Private E-2

    ok sir i will do it right away, and be right back very soon when it finished, thanks for helping me this far sir, :)
     
  15. alex02

    alex02 Private E-2

    sir, i just finished the scan just right now..what's the next thing we do sir?
     
  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Attach the logfile to your next next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
     
  17. alex02

    alex02 Private E-2

    ok sir, thank you so much, i really do appreciate your help and giving attention to my problem,,i will do that a.s.a.p. sir, brb.. thanks! :)
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What malware problem are we trying to fix here?? The processes in the title ( helppane.exe, Explore.exe, Dllhost.exe ) are all legit Windows processes!

    Sometimes when helppane.exe keeps running, it is a sign of a stuck key on a key board. Whether this is the reason or not, it is more than likely not an issue for the malware removal forum.
     
  19. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    The only issue I see is with a popup problem.
     
  20. alex02

    alex02 Private E-2

    result of jrt scan sir:

    >>>>>>>>>>>>>>>>>>>>>>>>
     

    Attached Files:

    • JRT.txt
      File size:
      1.1 KB
      Views:
      4
  21. alex02

    alex02 Private E-2

    yes sir, pop up problem mostly, and not just these .exe processes i notice these fast few days, (im sorry for i am clueless and desperate so didn't mention it earlier), some sort of comsurrogate.exe, smss.exe, spoolsv.exe, (several svchost.exe) ("etc.", kind of processes that i can't distinguish whether good or bad, safe or not, malware or not) and one thing i notice that every time occurs these pop ups, especially this helpane.exe (mostly even not in open browser/s, but every time i open such app/program like winrar, or simply looking at the properties of one's app/program), and when i seeking for it using task mngr, when i open its location and see this/these properties, i notice this "trusted intaller" always as an owner of these stubborn processes..and as of the day passes by, these pop ups processes thing getting worse (so for like me as an average p.c. user, i suspect it to be as an virus/malware,).
     
  22. alex02

    alex02 Private E-2

    as i checked my keybord sir, this last days (also got this idea while browsing, <to check whether there are stuck keys that causes problem/s), as i test it all keys on my keybord working fine..
     
    Last edited: Dec 17, 2015
  23. alex02

    alex02 Private E-2

    also sometimes,randomly, this "trustedinstaller.exe" appears on my taskbar, sir..
     
  24. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    What about the ADW Log? You need to tell me how things are running.
     
  25. alex02

    alex02 Private E-2

    and most of these .exe processes eating up large amount of memory sir, without particular order and randomly disappear, or sometimes appearing (a now you see me, now you don't act/s)
     
  26. alex02

    alex02 Private E-2

    ok sir, wait for a while, i will going to run it (sorry for waiting sir as i answering your questions)
     
  27. alex02

    alex02 Private E-2

    currently running sir as of now, it says "wating for action, pls. uncheck elements you want to keep"
     
  28. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    There is no popup ( as in malware/adware ). I believe that alex02 is not talking about malware popups but rather a system process starting up!
     
  29. alex02

    alex02 Private E-2

    how about this "help" windows sir? what's the cause of this, specially when i am trying to open a program or application,,it keeps on popping, and if i try to close or minimized it, nothing happend, keeps coming back.. :(
     
  30. alex02

    alex02 Private E-2

    oopps i almost forgot sir, im using "process blocker" to temporarily block these activity, is this maybe the reason why it cant be seen i the scan,logs or report?
     
  31. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you are referring to helppane.exe then this was already answered. It is not a popup as in malware or adware. It is a Windows system process. See the below link:

    http://answers.microsoft.com/en-us/...p/0884e105-0187-4e8f-a99b-13ddc0ad42da?auth=1
     
  32. alex02

    alex02 Private E-2


    :( thanks for giving me this information sir, as for me,i didn't know exactly what they are specially those .exe processes that i've never heard before,but what ever they are i am so hoping that these annoying things get fix for me to continue working fine with my laptop..(i'm so sorry sir if i tag/post my topic in a wrong place? if this so, pls. continue to help me fix these things.. :( ) thank you so much sir @chaslang and sir @TimW
     
  33. alex02

    alex02 Private E-2

    @TimW, sir, the ADW is currently running so far, it says "wating for action, pls. uncheck elements you want to keep" ,, is this still currently scanning?
     
  34. alex02

    alex02 Private E-2

    this is the log of ADW sir:
     

    Attached Files:

  35. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Since you are not having malware issues, I suggest that any other issues be addressed in the software forum.

    You can delete any programs we had you download.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds