Windows Explorer flashes off/on

Windows Explorer flashes off/on and will often stay off untill I reopen in with Task Manager and will still cycle off/on and eventually will stay off. :cry But my PC doesn't seem to suffer from much of a slow down (just a little).

Been fighting with this flashing for 4 weeks now (trying not to have to reformat and lose all my stuff). Hard to navigate and do stuff with this problem but managed to use Vundo fix HJT and a few other apps to clean most of the bad stuff out. Followed all the Read Me Recomendations, used CCleaner and HJT and still these files and entries keep replicating every time.

ututv.ini
ututv.ini2
vtutu.dll
vtutu.exe
HJT-F3-REG:win.ini: load= C:\windows\system32\
HJT-O2 - BHO: (no name) - {3B600C79-931E-42B6-860A-105789CB8629} - [SASInprocServer32] (file missing)***WHICH CHANGES IT'S #'S EVERY TIME.

I also get different *windows cannot find file* warnings and when I click OK Explorer closes.

I have managed to remove enough BAD stuff so that Explorer will now stay open after BooTing when I open it with Task Manager.

If anyone has the time to assist me with this ( before I do some serious damage), it would be deeply appreciated. Thank You Much...

 

Welcome to MajorGeeks.com,

Do the following. Go to the READ & RUN ME FIRST and follow all the instructions that apply to your operating system. As you work through this, you will find you are already getting some help with the symptoms. When you're finished, someone will look through your logs to see if there is anything still remaining that needs to be fixed. If you have any questions, just ask. When you finish, please attach the requested logs to your next post.

 

As I said in my first post - I did the read me run me stuff - then created the HJT log that I inserted.

Did I miss something?

 

There are more logs than just HijackThis, that need to be posted.

I can tell by reading your HijackThis log, that you did not follow the instructions in the Rad Me first thread, there are entries missing that I should be seeing, and some of the stuff that does show in your log would not be there if the instructions were followed and all the tools ran.

 

OK Puter Dude. I may have missed something so will follow through it again.
I didn't see anything about posting any other logs but the HJT after performing the cleaning...hmm :confused

 

The required logs are:

from the XP specific instructions here: http://forums.majorgeeks.com/showthread.php?t=139313

 

Hi Dude,
I found it in section 3. I thought that was detail for instructions above and didn't even look at it. I had to uninstall Spybot Search and Destroy because i think I had the Teatimer part installed. Taskbar is flashing on/off now and explorer wanted to change my security setting to accept all cookies- I had to allow it to stop the Mcafee notice.
Going to dl and install and run suggested apps now - cya in a bit I hope.

 

Good Mornin...
Well I feel totally stupid for missing that whole step 3. Went to bed for last scan. That seems to have fixed my problem totally. PC Boots fine.
I want to wait a couple of days to make sure, before I delete restore point and cleanup and set up proper security. (is this OK)?
I shall return if things act up again.
Again I Thank You for you help with my problem Shadow_Puter_Dude and have yourself a GREAT DAY!!!

 

Good to hear that the applications in step 3 seem to have fixed your issues. However, if you'll post the logs produced from those applications; I can check and see if there is anything else that needs to be dealt with, or if the system is in fact clean.

 

OK... Thanks for taking a look. Please let me know what you think. :drool

 

Download and save to RenV.exe to your Desktop (must be on the Desktop)

• Doubleclick RenV.exe
  • When finished, it will produce a og named Log.txt on the Desktop.
• Now using your mouse, drag Log.txt onto RenV.exe
• When finished, RenV.exe will produce a new log. Attach the new Log.txt to your next reply.
• Run ComboFix
• Run C:\MGtools\GetLogs.bat by double clicking on it.
• Attach the below new logs:
  • Log.txt
  • C:\ComboFix.txt
  • C:\MGlogs.zip

 

Yes Sir, I have noticed that some of my programs are not as they should be.
Tests completed.
Thnks.

 

Sorry but i ran MGTools to get the log instead of using the .bat file so I am resending a copy of MGlogs.zip, obtained by running the .bat file.

 

Oh, by the way. I did reinstall my Microsoft intellitype keyboard software before running the tests and creating the logs and it seems to be normal for now.
I will do nothing else for now but wait for your input.
Thnks...

 

Copy and paste the below text to notepad and save as Log.txt to the desktop:

Code:

C:\Program Files\ASUS\Ai Booster\OverClk .exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ .exe
C:\Program Files\Microsoft IntelliType Pro\itype .exe
C:\Program Files\NuonSoft\WallpaperCycler3\StartupHelper .exe
C:\Program Files\Radeon Omega Drivers\v3.8.421\ATI Tray Tools\atitray .exe
C:\Program Files\Analog Devices\SoundMAX\Smax4 .exe

• Using your mouse, drag Log.txt onto RenV.exe
• When finished, RenV.exe will produce a new log. Attach the new Log.txt to your next reply.
• Run ComboFix
• Run C:\MGtools\GetLogs.bat by double clicking on it.
• Attach the below new logs:
  • Log.txt
  • C:\ComboFix.txt
  • C:\MGlogs.zip

 

Once again, DONE. I wish I knew what we were doing. :confused

 

Download to your Desktop
- Pocket Killbox

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click Delete Selected Temp Files
Then after it deletes the files click the Exit (Save Settings) button.

NOTE: Pocket Killbox will only list the added files it is able to find on the system. So when you do the below, if some files do not show in the list after pasting them in, just continue..

Select:

• Delete on Reboot
• then Click on the All Files button.
• Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
• Return to Killbox, go to the File menu, and choose Paste from Clipboard.
• Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Do you have a CD with your sound Card drivers available? If so, using Add or Remove Programs in the Control Panel; uninstall SoundMAX.

Delete the following folder: C:\Program Files\Analog Devices\SoundMAX

Reboot the computer and reinstall the drivers for your SoundCard.

• Run ComboFix
• Run C:\MGtools\GetLogs.bat by double clicking on it.
• Attach the below new logs:
  • Log.txt
  • C:\ComboFix.txt
  • C:\MGlogs.zip

 

Ran Pocket Killbox and it seemed to run fine.Did not get prompt for renaming file.
Went to add/remove and got those 2 boxes (attatchments) when trying to uninstall SoundMax.

What should I do? :cry

 

Go ahead and do the rest of the instructions and post the logs.

 

OK, got bored so uninstalled sound card in Device Manager - then ended SMAgent proccess and DELETED Analog Devices folder-restarted PC and installed SoundMax and rebooted. Sound mixer seems fine now.

Ran Como Fix and MGtools.
Here are my logs. Thnks

 

OK, got bored so uninstalled sound card in Device Manager - then ended SMAgent proccess and DELETED Analog Devices folder-restarted PC and installed SoundMax and rebooted. Sound mixer seems fine now.

Ran Como Fix and MGtools.
Here are my logs. Thnks

 

Seem to be having some difficulty attatching log text...

 

OK. Fresh day.PC running pretty well.
Going to try attatching "log.txt" again...

You have already attached this file in thread :
Hmmm... :major

 

Your logs are clean. If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
   • Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix, you can delete the ComboFix.exe file, C:\ComboFix folder, C:\QooBox folder, and the C:\ComboFix.txt and C:\ComboFix-quarantined-files.txt logs that were created.
3. If we used SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used SmitfraudFix by S!Ri, you can delete the SmitfraudFix.exe file , the SmitfraudFix folder and C:\rapport.txt log that was created.
5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
6. If we used FixIEDf you can delete all the FixIEDef related files and folders from your Desktop.
7. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
8. If we had your run Avenger, you can delete all files related to Avenger now.
9. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
10. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
11. If you are running Windows XP or Windows ME, do the below:
    • Go back to step 8 of the READ & RUN ME to Disable System Restore which will flush your Restore Points.
    • Then reboot and Enable System Restore to create a new clean Restore Point.
12. After doing the above, you should work thru the below link:
    • How to Protect yourself from malware!

Safe Surfing!

 

WOW... I sure wish I knew how you did that.. :confused

You guys are the GREATEST...

THANKS A MILLION... Shadow_Puter_Dude :wave

PC is running great- btw / Will do final steps...