'X' has stopped working. But it hasn't.

Discussion in 'Malware Help (A Specialist Will Reply)' started by Awsomonium, Jul 30, 2009.

  1. Awsomonium

    Awsomonium Private E-2

    Ok, my problem is that when i try to open a program (not all programs, but most) I get a notice from Windows Problem Reporting saying 'X has stopped working'. 'X' being the program. For example, notepad. I click to open notepad, but then it comes up with a window:
    http://i26.tinypic.com/2ii7t39.jpg

    and when i press it, it comes up with this:
    http://i31.tinypic.com/25q6gpi.jpg

    When i close the second one, it just comes straight back up again. I can stop it by going into the processes and ending the process tree of Werfault.exe. Wermgr.exe is there to and goes away when i end Werfault.exe, but does nothing when i end that first. These are both Windows Problem Reporting processes. But the wierd part is, I have turned it off and it still happens.

    While the box in the first picture is up i can press to open the program and it works.

    Its happened with task manager, notepad and several other programs, though i can't remember them right now. I'll post them if I remember later. It also happens with 'COM surrogate' aswell when i'm in things like my computer or my documents. It just happens randomly.

    i've got to go now because i got to go to work really soon, i'll post more info when i get back.

    post my logs then.
     
    Awsomonium, Jul 30, 2009
    #1
  2. Awsomonium

    Awsomonium Private E-2

    Just a bit of extra info, If i leave Windows Problem Reporting has stopped working window (second one pictured) open, it doesn't happen to anything else while its open.
     
    Awsomonium, Jul 31, 2009
    #2
  3. Awsomonium

    Awsomonium Private E-2

    sorry it took so long, been busy anyway, the only log i could get was the HiJack this log and the rootrepeal log. I'll post the others later when i have them. I'd do them now, but i gotta go out again, busy life. Sorry.
     
    Last edited by a moderator: Jul 31, 2009
    Awsomonium, Jul 31, 2009
    #3
  4. Awsomonium

    Awsomonium Private E-2

    sorry it took so long, been busy anyway, the only log i could get was the HiJack this log and the rootrepeal log. I'll post the others later when i have them. I'd do them now, but i gotta go out again, busy life. Sorry.
     

    Attached Files:

    Awsomonium, Jul 31, 2009
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Then leave it open and please follow the instructions in the READ & RUN ME FIRST link given below and attach the requested logs when you finish these instructions. Your problems do not really sound like malware and the below will help us decide for sure.



    READ & RUN ME FIRST. Malware Removal Guide
    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.

    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware, Malwarebytes and Spybot ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
    ​
     
    chaslang, Aug 2, 2009
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds