HelpCtr.exe

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by moondog86, Dec 13, 2004.

  1. moondog86

    moondog86 Private E-2

    Hi;
    I have done three system recoveries, and have attempted all of the procedures you outline in the posting section. My computer first began to respond a bit slowly. There was even a lag when I typed. Sometimes four or five seconds. Then HelpCtr.exe attacked. It was running so many processes that my computer froze. At HP's request, I have done three system recoveries, and I have followed their instructions to the letter. I am still having problems with HelpCtr.exe. I disabled it, but HelpSvc.exe opened about 180 times. Worse than before. I am now somewhat functional, however internet use is practically impossible at best. Whatever program I open, the help files associated with the program also open. If there's any typing involved, forget it. I can't enter passwords, as the help file blocks me. Other than the system recoveries, and turning off system restore for spyware scans, I'm running Norton Internet Security 2004, Spy Sweeper, Ad-Aware Professional, and Spybot. I've scanned with all of these with system restore turned off. I have found that I can boot up and open programs without too much hassle. It's when I close them that the system opens hundreds of help processes. I've had as many as 400 processes running when I checked with task manager. Any ideas?
    Thanks;
    Craig
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should attempt to follow all the steps in this Sticky thread < READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal >

    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

    If still having a problem after the above, you should read the tutorial in this Sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log file as an attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT

    Make sure you have HJT version 1.98.2 and follow the guidelines on where to install it and how to post a log as an attachment.
     
  3. moondog86

    moondog86 Private E-2

    Hi;
    Here is the hijack this logfile.


    Edit by chaslang: Inline log changed to attachment
     
    Last edited by a moderator: Dec 18, 2004
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read the instructions I gave you again.

    Now post a HijackThis log file as an attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT


    Your OS and IE are seriously out of date. You need to get updated when we finish fixing.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I don't see any obvious problems in your log.
    Try the following.

    Download ProcessExplorer from: http://www.sysinternals.com/files/procexpnt.zip
    Unzip it and now run ProcessExplorer and lets configure some options first:
    Click View and select Show Lower Pane. And where it says "Lower Pane View" make sure DLL's is checked. Now click on explorer.exe. Now also under the View menu choose "Select columns" and put a check mark on "Image Path". Now click on File and then Save As. And save the process list. Post it back here as an attachment (call it list1.txt). Also, from now on if I say to kill a process, use ProcessExplorer instead of Task Manager. Sometimes ProcessExplorer can kill things that Task Manager cannot.

    The above attachment should be for when you do not have a problem with all those process.

    Now I want you to leave ProcessExplorer running and cause the problem to occur. When it does, save another process list from ProcessExplore (call this one list2.txt).

    Post both list1.txt and list2.txt back here as attachments to your message.
     
  6. moondog86

    moondog86 Private E-2

    Problem is occuring now. can't type
     

    Attached Files:

  7. moondog86

    moondog86 Private E-2

  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You forgot to attach list2.txt

    But I think you need to go to Windows update an get updated to at least SP1a level.

    Also check this out: http://support.microsoft.com/?kbid=839017
     
    Last edited: Dec 19, 2004
  9. moondog86

    moondog86 Private E-2

    Hi;
    I know I need lots of windows updates, but the reason I don't have them is because of the system recoveries. I can spend another 24 hours downloading, but I'd rather not do that until I solve the problem. I'm at work now, but when I get home I'll try to send list 2 again. I'm in Thailand, so the connection speeds leave a bit to be desired. Thanks for your help.
    Craig
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! I'll wait to see list2 but I thing your problem may be that you need the updates.
     
  11. moondog86

    moondog86 Private E-2

    Hi;
    I've added two more lists, can't type. This is annoying!
     

    Attached Files:

  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I think your problem is may be related to the fact that your Win OS is way out of date. You should go here and get updated to at least WinXP SP1a:
    http://www.microsoft.com/windowsxp/downloads/updates/sp1/network.mspx

    Then make sure you have the any other updates for WinXP (other than SP2 - unless you want SP2) by going here and having it scan your system: Windows Update

    Part of what I am concerned aout it the fact the the helpsvc.exe process is running. See this link:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;839017
     
    Last edited: Dec 28, 2004
  13. moondog86

    moondog86 Private E-2

    Hi Chaslang;
    I've visited the link, and I agree. It looks like the out of date OS is causing the problem. I downloaded 15 of 23 updates, before losing my connection. I restarted and got an error message from help and support, saying it needed to close. It then opened so many times my computer froze. I rebooted several times before being able to use task manager to shut it down. I'll try to download the additional updates.
    Thanks;
    Craig
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay Craig! Let me know when you complete all the updates what the status is.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds