Explorer.exe crashing endlessly!

oldtype1 · Oct 9, 2010

My problem first started yesterday morning when I cancelled a scan that was being done by spybot after I restarted my computer. I cancelled the scan and it seemed to be frozen so I pushed CTRL+ALT+DLT to end the task so I could get to my desktop. Soon after Windows explorer started crashing and has been crashing and restarting ever since, it has become so repeatitive that I decided to just leave stopped for good. I tried every Mal/Spyware scanner this site suggested in the Vista Cleaning Procedures (did all the steps that lead up to the procedures) and my logs are as follows. Only Malwarebyte found something, fully removed it and picked up nothing on a second scan I did. Also, I thought I would note that the error doesn't seem to instantly act up when windows starts, maybe something is triggering it? I am using Windows 7, 64bit. Please help, someone!

TimW · Oct 10, 2010

Why am I not seeing any Anti-virus software on this system?

I am not seeing any malware, but I would like you to run an online scan just to be sure:
eSet Online Scan.

oldtype1 · Oct 12, 2010

There isn't one on the computer. I hadn't downloaded one after trying McAfee offered by comcast and hating it. Any suggestions? I did download the Eset Antivirus for protection for now. I ran the Eset scan twice and restarted, the problem still continues to live on. :cry

TimW · Oct 12, 2010

Please go to start / run / type:
sfc /scannow and have your windows disc handy.

Run it at least twice. Then tell me if it finds anything. We may need to replace your wininit files.

So you have installed an AV program?

oldtype1 · Oct 13, 2010

Ran the scans and it found corrupted files, but couldn't fix some of them. The logs are included in the post.

Yes I do have a AV program now, it's ESET AV. I don't have a restore disk so I downloaded windows on another computer and put it on a flash drive to use. I appreciate all your help!

I can't seem to get the logs to upload to the site. Gives me the following error message: "Your submission could not be processed because a security token was missing.

If this occurred unexpectedly, please inform the administrator and describe the action you performed before you received this error."

Logs: http://www.mediafire.com/?rf8zo88b4b9gdyu
http://www.mediafire.com/?21d2ikpt5aerdr3

TimW · Oct 14, 2010

Please re-run ComboFix and then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

* C:\ComboFix.txt
* C:\MGlogs.zip

Make sure you tell me how things are working now!

What were those logs from?

oldtype1 · Oct 20, 2010

I'm back after being busy and frustrated with the computer to now having it fully working again! I had stopped explorer.exe and just let the computer sleep for a few days until I saw your post about the progress after running the sfc scans. I just decided to install the recent windows updates then restart the computer and TADA! No more errors popping! Thanks so much! Wheres the tip jar?

TimW · Oct 20, 2010

Good to know.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 7 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Support MajorGeeks with Geek Wear!

Log in or Sign up

Explorer.exe crashing endlessly!

oldtype1 Private E-2

Attached Files:

MGlogs.zip

mbam-log-2010-10-08 (19-20-17).txt

SUPERAntiSpyware Scan Log - 10-08-2010 - 16-55-05.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

oldtype1 Private E-2

Attached Files:

EsetScan1.txt

ESETSCAN2.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

oldtype1 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

oldtype1 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member