Pls.!!!badly Need Help For Pop-up Problem,,(helppane.exe, Explore.exe, Dllhost.exe, Etc..)

alex02 · Dec 16, 2015

Good day Admin/s as well as all members of this site!! I'm glad and found a new hope as i found this site to help me out for my long time problem here in my laptop.. I am using Lenovo laptop, Windows 7 32bit,. My problem is this very annoying pop-ups everytime I open such program, apps like INTERNET EXPLORER, which always re direct random tabs fast and simultaneously, also pop ups randomly helpPane.exe..i really don't know what exactly the cause of this..I've tried different anti virus/anti malware, system tools, cleaning tools before but problem still exist until now!!! (unfortunately, i do not have a print output or save their report logs) as of now, I use bitdefender but still, this problem still exist..Pls,pls, pls, pls. i am badly needed help..thanks in advance and more power!! I will really appreciate what ever help you can give to me, thanks a lot!!! (Honestly, i just only repost it here, i post it yesterday in other computer help forum site (i think it's in-appropriate to name that site), unfortunately, one of the member there who trying to help me, did not fix/resolved my problem.. http://www.bleepingcomputer.com/forums/public/style_emoticons/default/sad.png ) so i repost it here hoping to fix, resolved, or somehow minimized my problem, pls. i desperately need help coz this problem affecting some application that i always use and this laptop is the only one i use in my small home business, and as of now i do not have sufficient money to buy and replace it (incase the problem do not fix)..thanks so much in advance and more power!!)

TimW · Dec 16, 2015

If you need malware help, please do the following:

READ & RUN ME FIRST. Malware Removal Guide

alex02 · Dec 16, 2015

Hi good day again, i finished the READ AND RUN ME FIRST guide last night, as i observed several hours past and still the problem that i stated above still exist,..As part of the step the series of results is here:

(unfortunately, the hitman pro result was failed. i try to re-run the test twice but still failed and always leads me to restart so i didn't force the scan)

TimW · Dec 16, 2015

Did you have a problem running MGLogs? It is incomplete. Please make sure UAC is turned off and disable your protection programs. Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7,or Win8 don't double click, use right click and select Run As Administrator).Make sure that you watch for the license agreement for TrendMicro HijackThis and click on the Accept button TWICE to accept ( yes twice ).

alex02 · Dec 16, 2015

i think i have problem running it, coz when the time i run it only the cmd appears for so long time (i think about 4 to 5 hrs),..do think there's something wrong sir? (btw i just save it on my desktop..but as i knew my desktop is in c: (location)

TimW · Dec 16, 2015

Please click Start, All Program, Accessories and you will see ( among other things ) a Command Prompt entry.

Right click the Command Prompt entry and select Run As Administrator.

It is critical that you run it this way.

If you do this properly, a command prompt window will open with a title of Administrator Command Prompt.

Enter the below commands at the command prompt each followed by the enter key. The bold black are commands. The purple/brown is merely informational.

cd \MGtools <-- this changes to the MGtools folder and the prompt should change to C:\MGtools>
GetRunKey<-- this will try to run all one scan from MGtools. Tell me what error messages, if any, you see.
ShowNew<-- this will try to run all one scan from MGtools. Tell me what error messages, if any, you see.

alex02 · Dec 16, 2015

yes sir, i double check the uac and its turned off since before i run mglogs..is that normal sir, running this for so long hrs.?

alex02 · Dec 16, 2015

ok sir, i will do your step gave to me..thanks..

TimW · Dec 16, 2015

This is sounding more like a system issue than malware, other than the pop up.

alex02 · Dec 17, 2015

good day again sir, these are the results of the last step that you've given to me..

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\ALPHA>cd \MGtools

C:\MGtools>GetRunKey

GetRunKey.bat - 08/06/2015 Version 2.75

NOTE: Ignore any error messages about not finding registry keys!
Just wait for the program to finish running!!

The system cannot find the file specified.
Zipping runkeys.txt
Finished Zipping runkeys.txt

C:\MGtools>GetRunKey

GetRunKey.bat - 08/06/2015 Version 2.75

NOTE: Ignore any error messages about not finding registry keys!
Just wait for the program to finish running!!

The system cannot find the file specified.
Zipping runkeys.txt
Finished Zipping runkeys.txt

C:\MGtools>
C:\MGtools>
C:\MGtools>ShowNew

ShowNew.bat - 10/14/2015 Version 3.21

************************** WARNING **************************
If you see a popup saying that:

SteelWerX WhoAmI application has stopped working

do not click the Cancel button that first appears. Wait for
the Close program button to appear and click it to continue
************************** WARNING **************************

Scanning please Wait.
============= Finding copies of actxprxy.dll
============= Finding copies of csrss.exe
============= Finding copies of ctfmon.exe
============= Finding copies of cngaudit.dll
============= Finding copies of explorer.exe
============= Finding copies of kernel32.dll
============= Finding copies of lsass.exe
============= Finding copies of netlogon.dll
============= Finding copies of ntfs.sys
============= Finding copies of powrprof.dll
============= Finding copies of proquota.exe
============= Finding copies of regedit.exe
============= Finding copies of scecli.dll
============= Finding copies of services.exe
============= Finding copies of spoolsv.exe
============= Finding copies of svchost.exe
============= Finding copies of termsrv.dll
============= Finding copies of userinit.exe
============= Finding copies of user32.dll
============= Finding copies of winlogon.exe
============= Finding copies of ws2_32.dll
Checking for .COM files to Delete. They will only print if deleted

Listing COM, DLL, EXE, and SYS file in C:\Windows
Locating COM files in C:\Windows\system32 - recursive
Locating DLL files in C:\Windows
Locating DLL files in C:\Windows\system32 - recursive
Locating EXE files in C:\Windows
Locating EXE files in C:\Windows\system32 - recursive
Locating SYS files in C:\Windows
Locating SYS files in C:\Windows\system32 - recursive
Zipping newfiles.txt
Finished Zipping newfiles.txt
Zipping ffdata.txt
Finished Zipping ffdata.txt
Zipping winfiles.txt
Finished Zipping winfiles.txt

C:\MGtools>

alex02 · Dec 17, 2015

i just hit the enter key accidentally in getrunkey.. (sorry for that sir)

alex02 · Dec 17, 2015

waiting for further instruction sir, thanks for helping me out and more power!!!

TimW · Dec 17, 2015

Let's see if we can fix some system errors:

Download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.

Now run Repair_Windows.exe by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)

Now select the + Repairs tab.

Then click the + Open Repairs button down on the bottom right.

This will automatically begin a registry backup, so wait for it to complete and when it finishes, you will see a list of many possible different repairs and they are all selected by default. At the bottom of this form there is a not so obvious Unselect All Repairs check box which is to the right of a check box with a green check mark in it. Please click the Unselect All Repairs box. The green check mark box is to Select All Repairs. The ony way you see what these boxes are is when your mouse hovers over them.

Now select the following repair options ( the numbers at the begin are the current repair numbers but this is subject to change.)

01 - Reset Registry Permissions

02 - Reset File Permissions

03 - Reset Service Permissions

04 - Register System Files

05 - Repair WMI

06 - Repair Windows Firewall

10 - Remove Policies Set By Infections

13 - Network

14 - Repair Proxy Settings

15 - Repair Windows Updates

21 - Repair MSI (Windows Installer)

23 - Repair File Associations (12 )

26 - Restore Important Windows Services

27 - Set Windows Services To Default Startup

Now on the right side under the When Repairs Complete title, check the box for Restart/Shutdown System and then make sure the Restart System radio button is enabled not the Shutdown System button.

Shutdown any other programs that you are running now before continuing.

Now click the Start Repairs button at the lower right.

Be patient while the tool repairs the selected items.

It should reboot automatically when finished. If it does not then reboot it yourself.

alex02 · Dec 17, 2015

ok sir i will do it right away, and be right back very soon when it finished, thanks for helping me this far sir,

alex02 · Dec 17, 2015

sir, i just finished the scan just right now..what's the next thing we do sir?

TimW · Dec 17, 2015

http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator

Click on the Scan button.

AdwCleaner will begin...be patient as the scan may take some time to complete.

After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).

The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.

Attach the logfile to your next next reply.

A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

alex02 · Dec 17, 2015

ok sir, thank you so much, i really do appreciate your help and giving attention to my problem,,i will do that a.s.a.p. sir, brb.. thanks!

chaslang · Dec 17, 2015

What malware problem are we trying to fix here?? The processes in the title ( helppane.exe, Explore.exe, Dllhost.exe ) are all legit Windows processes!

Sometimes when helppane.exe keeps running, it is a sign of a stuck key on a key board. Whether this is the reason or not, it is more than likely not an issue for the malware removal forum.

TimW · Dec 17, 2015

The only issue I see is with a popup problem.

alex02 · Dec 17, 2015

result of jrt scan sir:

>>>>>>>>>>>>>>>>>>>>>>>>

alex02 · Dec 17, 2015

yes sir, pop up problem mostly, and not just these .exe processes i notice these fast few days, (im sorry for i am clueless and desperate so didn't mention it earlier), some sort of comsurrogate.exe, smss.exe, spoolsv.exe, (several svchost.exe) ("etc.", kind of processes that i can't distinguish whether good or bad, safe or not, malware or not) and one thing i notice that every time occurs these pop ups, especially this helpane.exe (mostly even not in open browser/s, but every time i open such app/program like winrar, or simply looking at the properties of one's app/program), and when i seeking for it using task mngr, when i open its location and see this/these properties, i notice this "trusted intaller" always as an owner of these stubborn processes..and as of the day passes by, these pop ups processes thing getting worse (so for like me as an average p.c. user, i suspect it to be as an virus/malware,).

alex02 · Dec 17, 2015

as i checked my keybord sir, this last days (also got this idea while browsing, <to check whether there are stuck keys that causes problem/s), as i test it all keys on my keybord working fine..

alex02 · Dec 17, 2015

also sometimes,randomly, this "trustedinstaller.exe" appears on my taskbar, sir..

TimW · Dec 17, 2015

What about the ADW Log? You need to tell me how things are running.

alex02 · Dec 17, 2015

and most of these .exe processes eating up large amount of memory sir, without particular order and randomly disappear, or sometimes appearing (a now you see me, now you don't act/s)

alex02 · Dec 17, 2015

ok sir, wait for a while, i will going to run it (sorry for waiting sir as i answering your questions)

alex02 · Dec 17, 2015

currently running sir as of now, it says "wating for action, pls. uncheck elements you want to keep"

chaslang · Dec 17, 2015

TimW said: ↑

The only issue I see is with a popup problem.
Click to expand...

There is no popup ( as in malware/adware ). I believe that alex02 is not talking about malware popups but rather a system process starting up!

alex02 · Dec 17, 2015

how about this "help" windows sir? what's the cause of this, specially when i am trying to open a program or application,,it keeps on popping, and if i try to close or minimized it, nothing happend, keeps coming back..

alex02 · Dec 17, 2015

oopps i almost forgot sir, im using "process blocker" to temporarily block these activity, is this maybe the reason why it cant be seen i the scan,logs or report?

chaslang · Dec 17, 2015

alex02 said: ↑

how about this "help" windows sir? what's the cause of this, specially when i am trying to open a program or application,,it keeps on popping, and if i try to close or minimized it, nothing happend, keeps coming back..
Click to expand...

If you are referring to helppane.exe then this was already answered. It is not a popup as in malware or adware. It is a Windows system process. See the below link:

http://answers.microsoft.com/en-us/...p/0884e105-0187-4e8f-a99b-13ddc0ad42da?auth=1

alex02 · Dec 17, 2015

chaslang said: ↑

If you are referring to helppane.exe then this was already answered. It is not a popup as in malware or adware. It is a Windows system process. See the below link:

http://answers.microsoft.com/en-us/...p/0884e105-0187-4e8f-a99b-13ddc0ad42da?auth=1
Click to expand...

thanks for giving me this information sir, as for me,i didn't know exactly what they are specially those .exe processes that i've never heard before,but what ever they are i am so hoping that these annoying things get fix for me to continue working fine with my laptop..(i'm so sorry sir if i tag/post my topic in a wrong place? if this so, pls. continue to help me fix these things.. ) thank you so much sir @chaslang and sir @TimW

alex02 · Dec 17, 2015

@TimW, sir, the ADW is currently running so far, it says "wating for action, pls. uncheck elements you want to keep" ,, is this still currently scanning?

alex02 · Dec 17, 2015

this is the log of ADW sir:

TimW · Dec 17, 2015

Since you are not having malware issues, I suggest that any other issues be addressed in the software forum.

You can delete any programs we had you download.

Log in or Sign up

Pls.!!!badly Need Help For Pop-up Problem,,(helppane.exe, Explore.exe, Dllhost.exe, Etc..)

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

Attached Files:

rogue report.txt

malwarebytes report2.txt

TDSSKiller.3.1.0.9_17.12.2015_02.10.17_log.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

Attached Files:

JRT.txt

alex02 Private E-2

alex02 Private E-2

alex02 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

alex02 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

alex02 Private E-2

alex02 Private E-2

alex02 Private E-2

Attached Files:

AdwCleaner[C1].txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member