Windows Explorer keeps crashing

Discussion in 'Malware Help (A Specialist Will Reply)' started by letsgojets, Jan 22, 2006.

  1. letsgojets

    letsgojets Private E-2

    Not sure if this is the correct forum.......

    Windows Explorer keeps crashing on me. It seems to just hang up and in the Task Manager, it shows a 'Not Responding' status.

    Also, when saving a file and you browse for a folder to save it, the 'Save To' window and all open web browser windows just close. This just happened to me when I attempted to attach my Hijack This log to this message..... I got dumped out of my browser, so I'm typing this again and pasting in the log below.

    Here is some system info:
    Dell 8400, Pentium 4 3ghz, 1 g ram
    Internet Explorer 6.0

    The Hijack This log is below. I would really appreciate any help you could give me. Thanks a lot.
    --JB

    edit: log attached
     

    Attached Files:

    Last edited by a moderator: Jan 22, 2006
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis
     
  3. letsgojets

    letsgojets Private E-2

    OK..... sorry for jumping to the post before doing the 'Read & Run Me First" steps.

    I worked through the steps:

    In the Add/Remove Programs list, I did have Viewpoint Manager and Viewpoint Media Player, which I removed.

    I ran the following in Safe Mode:
    Ccleaner
    Microsoft Windows Malicious Software Removal Tool (nothing found)
    Ad-Aware SE (nothing found)
    Spybot Search & Destroy (nothing found)
    Microsoft Antispyware (found & removed 180Solutions.SearchAssistant)

    I ran the online scans:
    Bitdefender (seemed to find a bunch of stuff - report attached)
    Panda (found Adware/nCase - report attached)

    I followed the Hijack This procedure and the log file is attached.

    I would be very grateful for any help with this and let me know if I didn't do something correct. Thanks a lot for all your help.

    --JB
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you do step 0 of the READ & RUN ME?

    I still see WeatherBug installed. Or do you have a paid version of WeatherBug?
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You do not really show any major malware issues (from these logs) that could be causing you problems with Windows Explorer. The issues could be due to another software of hardware conflict. But we will try two other things before sending you to the Software Forum. I'll discuss these further down.
    The below are mild malware items due to Dell affiliating themselves with MyWay. You can simply fix them using HJT and then set you home page to whatever you really want.
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    You should delete the below file Panda found:
    C:\TEMP\zangoinstaller.exe

    Now I want you to click Start, Run and enter sfc /scannow and click OK. This will check for missing or corrupted systems files. If there are any and the system cannot find replacements on your harddisk, it will ask for your Windows XP SP2 CD (it must be and SP2 CD). So be ready to supply it. Let me know if this finds any problems.
    After doing the above, let's do a check for rootkits.


    Download Blacklight Beta and then run it.
    • Hit I accept. It will take you to download page.
    • Download blbeta.exe and save it to the Desktop.
    • Once saved... double click blbeta.exe to install the program.
    • Click accept agreement and Click scan
      This app too may fire off a warning from antivirus. Let the driver load.
      Wait for it to finish.
    • If it displays any items...don't do anything with them yet. Just hit exit (close)
    • It will drop a log on Desktop that starts with fsbl....big number
    Please post contents of log.
     
  6. letsgojets

    letsgojets Private E-2

    Yeah, I did run through step 0. That's where I found and removed Viewpoint Manager and Viewpoint Media Player. I thought maybe I missed WeatherBug, but it does not show in the list of Add/Remove programs, so I'm not sure what that's all about.

    And I do not have a paid version of WeatherBug

    -JB
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then add the below line to the list to fix with HJT:
    O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.EXE 1

    Then delete the C:\Program Files\AWS if it exists.
     
  8. letsgojets

    letsgojets Private E-2

    OK.....

    I deleted:
    C:\Program Files\AWS
    C:\TEMP\zangoinstaller.exe

    I fixed the following with HJT:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.EXE 1

    I ran sfc /scannow and it found nothing

    I ran Blacklight Beta and the log file is attached.....

    JB
     
  9. letsgojets

    letsgojets Private E-2

    OOps....

    Here is the blbeta log file:
     

    Attached Files:

  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well it would seem my assumption is correct and your problems do not appear to be due to malware.

    How often does explorer hang?
    Does it ever hang in safe mode?

    You could try using msconfig to disable various processes and services from loading at startup. This may lead you to a particular item that is causing the problem.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds