Services and Controller App Error

Discussion in 'Malware Help (A Specialist Will Reply)' started by chicken64, Mar 12, 2009.

  1. chicken64

    chicken64 Private E-2

    MG,
    I fear that I may have whacked out my PC when I changed from a domain controller to a workgroup. This may not have anything to do with my PC problems, however I need to put that out there. I should have researched the topic a bit more. Before I did this, I had a happily running PC. Now, not so happy.

    The Problem:
    As with other threads, I get about two hours of running before I get the titled error followed mostly by a 1 minute shut-down warning. Followed by a offer to send a report. This mostly happens during periods of inactivity. The window offers me a "debug" report which states the following"

    Error Signature:
    szAppName: Services.exe
    szAppVer: 5.1.2600.2180
    szModName: esent.dll
    szModVer: 5.1.2600.2780
    offset: 0001baec

    Error report <included in attached "major geeks.txt">

    To date:
    I have executed the 4 steps program for cleaning my XP (Pro) system. All of the programs ran and performed their task to my satisfaction. (Files included).

    Now what:
    My problem still exists. Perhpas this is not a maleware problem after all. I will look to you experts for any suggestions. Please help if you can as I have been wrestling this demon for several days now.
     

    Attached Files:

    chicken64, Mar 12, 2009
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Why am I not seeing any anti-virus software on this system?

    Unless you are working in a domain, if you are no in a network...changing to a workgroup should make no difference.

    I am not seeing anything so far, but you still need to attach the logs from:
    SAS
    ComboFix
     
    TimW, Mar 14, 2009
    #2
  3. chicken64

    chicken64 Private E-2

    Thank you for ringing in here. I do nave the best explanation for the AV except that I just recently switched from a Domain to a Workgroup. While it may not show up under the Security Console, I am recently using SAS AV software. Perhaps you can offer me a word as to how to be sure that I have an active real-time" AV monitor. I hope that I am not re-infecting.

    See that attached additional logs obtained at the time I followed the MG steps. Being new to forum entries, I was not of firm mind as to how to send multiple files.

    I look forward to your further review and comment. ~Chicken64
     

    Attached Files:

    chicken64, Mar 16, 2009
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    SAS is not an anti-virus program, it is an anti-spyware program.

    I am not seeing any malware on your system...so I suggest that you post in the software forum ( after following the below and installing and AV program):

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They are useful as backup scanners. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

      • Delete the C:\combofix folder from combofix (if it exists)

    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    8. After doing the above, you should work thru the below link:

     
    TimW, Mar 16, 2009
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds