Can't Open Certain .exe

[Imr102030]

And processes


N zev procesu PID N zev relace Relace PamŘś
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 24 kB
System 4 Services 0 300 kB
smss.exe 396 Services 0 1˙108 kB
csrss.exe 592 Services 0 3˙988 kB
wininit.exe 640 Services 0 4˙132 kB
csrss.exe 664 Console 1 13˙512 kB
services.exe 696 Services 0 9˙356 kB
lsass.exe 732 Services 0 10˙732 kB
lsm.exe 744 Services 0 4˙112 kB
winlogon.exe 836 Console 1 6˙380 kB
svchost.exe 876 Services 0 9˙272 kB
svchost.exe 964 Services 0 7˙636 kB
svchost.exe 416 Services 0 16˙932 kB
svchost.exe 616 Services 0 155˙140 kB
svchost.exe 736 Services 0 14˙844 kB
svchost.exe 980 Services 0 39˙840 kB
svchost.exe 1112 Services 0 5˙332 kB
svchost.exe 1236 Services 0 20˙216 kB
FBAgent.exe 1400 Services 0 7˙228 kB
AsLdrSrv.exe 1480 Services 0 3˙792 kB
GFNEXSrv.exe 1504 Services 0 2˙556 kB
spoolsv.exe 1600 Services 0 9˙916 kB
svchost.exe 1636 Services 0 13˙340 kB
AdobeUpdateService.exe 1764 Services 0 3˙884 kB
AGMService.exe 1816 Services 0 6˙532 kB
AGSService.exe 1868 Services 0 9˙704 kB
InsOnSrv.exe 1904 Services 0 5˙036 kB
Ath_CoexAgent.exe 1932 Services 0 5˙384 kB
AdminService.exe 1972 Services 0 5˙232 kB
svchost.exe 648 Services 0 10˙916 kB
LDSvc.exe 1288 Services 0 5˙504 kB
PnkBstrA.exe 2124 Services 0 4˙088 kB
PnkBstrB.exe 2152 Services 0 4˙224 kB
rpcnetp.exe 2180 Services 0 3˙808 kB
SIONExportService.exe 2204 Services 0 4˙976 kB
svchost.exe 2232 Services 0 5˙468 kB
TurboBoost.exe 2288 Services 0 4˙808 kB
WLIDSVC.EXE 2348 Services 0 9˙396 kB
MBAMService.exe 2404 Services 0 42˙116 kB
WLIDSVCM.EXE 2784 Services 0 3˙156 kB
unsecapp.exe 2840 Services 0 4˙764 kB
WmiPrvSE.exe 2872 Services 0 14˙788 kB
InsOnWMI.exe 3032 Console 1 4˙936 kB
taskhost.exe 3056 Console 1 13˙688 kB
dwm.exe 2568 Console 1 4˙992 kB
explorer.exe 3112 Console 1 97˙872 kB
taskeng.exe 3336 Console 1 5˙632 kB
sensorsrv.exe 3404 Console 1 528 kB
USBChargerPlus.exe 3420 Console 1 1˙112 kB
ACMON.exe 3428 Console 1 528 kB
BatteryLife.exe 3448 Console 1 528 kB
ATKOSD2.exe 3484 Console 1 528 kB
HControl.exe 3492 Console 1 6˙272 kB
ACEngSvr.exe 3584 Console 1 9˙904 kB
alg.exe 3652 Services 0 4˙848 kB
svchost.exe 3764 Services 0 4˙408 kB
WmiPrvSE.exe 3916 Services 0 15˙872 kB
svchost.exe 3984 Services 0 5˙136 kB
svchost.exe 3232 Services 0 9˙824 kB
ATKOSD.exe 4088 Console 1 3˙776 kB
KBFiltr.exe 1444 Console 1 2˙940 kB
WDC.exe 1436 Console 1 4˙240 kB
AsScrPro.exe 2996 Console 1 4˙544 kB

[Imr102030]

Sorry for spamming but this is important :

This tool should show, (i presume) ,why a process terminated unexpectedly. https://www.microsoft.com/en-us/down....aspx?id=58210
the thing is , last time i said it strangely worked, i was running geek
deleting files and i ran this diagnostic tool. i remember joking and saying the virus turned itself off to not be detected by this tool…

The way this tool works is you specify a process in current list of processes,
and if it shuts down unexpectedly it creates a log.(dont quote me on this)

the thing is, i wanted to give you more info, ran the program and when i wanted
recreate the bug…its all working again now…i will not restart this time and if you
need me to do something let me know.

[Malnutrition]

Adware Cleaner Scan.

Please download AdwCleaner by Xplode onto your desktop.

[ul]
[li]Close all open programs and internet browsers.[/li][li]Right Click on adwcleaner.exe and run as admin to run the tool.[/li][li]Click on Scan button.[/li][li]When the scan has finished click on Clean button.[/li][li]Your computer will be rebooted automatically. A text file will open after the restart.[/li][li]Please post the contents of that logfile with your next reply.[/li][li]You can find the logfile at C:\AdwCleaner[S1].txt as well.[/li][/ul]

================================================== =============================

Adware Removal Tool Scan.

Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.

[MEDIA=imgur]LOr0Gd7[/MEDIA]

Hit Ok.

[MEDIA=imgur]sYFsqHx[/MEDIA]

Hit next make sure to leave all items checked, for removal.

[MEDIA=imgur]8NcZjGc[/MEDIA]

The Program will close all open programs to complete the removal, so save any work and hit OK. Then hit OK after the removal process is complete, thenOK again to finish up. Post log generated by tool.

================================================== ===============================================

Auto logger scan!

[ul]
[li]Disable your Antivirus & Anti spyware applications!![/li][li]Download Autologger to your desktop.[/li][li]Unzip it there. – If you are unsure how to unzip a program, then use ---- http://www.7-zip.org/ ----[/li][li]Right click Autologger and run as admin. (Xp user double click)[/li][li]AVZ4 will open and scan your machine, allow this to complete.[/li][li]Upload Collectionlog.zip to your next reply.[/li][li]https://i.imgur.com/KA81Q57.png[/li][/ul]

[Malnutrition]

Anyhow… in the PC hunter on the ‘other’ tab are some thing red.(just a note)

Screen shot this please,and post it here.

[Malnutrition]

Also, please do not run any other tools or download anything else to try and solve this on your own while I am helping you, this will only confuse things.

Please when you are done with my last set of instructions, run FRST in normal mode rather than safe mode.

[Malnutrition]

Alright, continue with the other steps.

[Imr102030]

Adware (from yesterday)
if you want another run for this let me know..
[HEADING=1]-------------------------------[/HEADING]
[HEADING=1]Malwarebytes AdwCleaner 7.4.0.0[/HEADING]
[HEADING=1]-------------------------------[/HEADING]
[HEADING=1]Build: 07-23-2019[/HEADING]
[HEADING=1]Database: 2019-07-22.1 (Cloud)[/HEADING]
[HEADING=1]Support: https://www.malwarebytes.com/support[/HEADING]
[HEADING=1]-------------------------------[/HEADING]
[HEADING=1]Mode: Scan[/HEADING]
[HEADING=1]-------------------------------[/HEADING]
[HEADING=1]Start: 07-30-2019[/HEADING]
[HEADING=1]Duration: 00:05:35[/HEADING]
[HEADING=1]OS: Windows 7 Home Premium[/HEADING]
[HEADING=1]Scanned: 35810[/HEADING]
[HEADING=1]Detected: 37[/HEADING]
***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy C:\rei

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Adware.Heuristic HKLM\Software\Wow6432Node\14919ea49a8f3b4aa3cf1058 d9a64cec
PUP.Optional.Legacy HKCU\Software\dt soft\daemon tools toolbar
PUP.Optional.Legacy HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.e xe
PUP.Optional.Legacy HKLM\Software\Classes\AppID{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
PUP.Optional.Legacy HKLM\Software\Classes\Interface{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
PUP.Optional.Legacy HKLM\Software\Classes\Interface{6C42038D-817A-472C-8C2A-EF46F1DA576D}
PUP.Optional.Legacy HKLM\Software\Classes\Interface{873C7DA8-195D-4D5A-B830-C5E2831901EA}
PUP.Optional.Legacy HKLM\Software\Classes\Interface{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
PUP.Optional.Legacy HKLM\Software\Classes\Prod.cap
PUP.Optional.Legacy HKLM\Software\Classes\TypeLib{1112F282-7099-4624-A439-DB29D6551552}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\AppID{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\Interface{47A1DF 02-BCE4-40C3-AE47-E3EA09A65E4A}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\Interface{FA7B27 95-C0C8-4A58-8672-3F8D80CC0270}
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\TypeLib{1112F282-7099-4624-A439-DB29D6551552}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

PUP.Optional.Babylon Max Start Search
PUP.Optional.Babylon Max Start Search

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Preinstalled Software ] *****

Preinstalled.ASUSFancyStart
Preinstalled.ASUSGames
Preinstalled.ASUSLiveUpdate
Preinstalled.ASUSProductRegistration
Preinstalled.ASUSSplendid
Preinstalled.ASUSVibe
Preinstalled.ASUSVirtualCamera
Preinstalled.ASUSWebStorage
Preinstalled.LenovoPower2Go

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

[Imr102030]

---

Adware Removal Tool 5.1
Time: 2019_07_31_12_42_40
OS: Windows 7 Home Premium - x64 Bit
Account Name: Reed
Adware Definition: 07242019
Elapsed time: 03:48:10
Scan Status:- Automatic Done

\\\\\\\\\\\\ Scan Logs \\\\\\\\\\\

Folder Found : Adware.Chromium : C:\Users\Reed\AppData\Local\Chromium
Browser: Chrome Found : Adware.Dogpile : C:\Users\Reed\AppData\Local\Google\Chrome\User Data\Default\Preferences
Browser: Chrome Found : Adware.BabylonToolbar : C:\Users\Reed\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

[Imr102030]

unfortunaly the “autolagger” started laggin (pc problem,i think not theirs)
after 2 hours cca , and i could not recover log. but there were 3 things found.
one .wav sound file.
some samlib.dll → i run all samlib.dll through VirusTotal (online scan.)
and dunno the third. but i had to reboot hardcore so nothing is working again.

edit 60 seconds later. after i reinstalled (installer not workingt,but it has register.bat and unregister.bat) that diagnose program https://www.microsoft.com/en-us/down....aspx?id=58210 its working again. but the whole pc is lagging the same way it does when some .exe is not working from time to time,again it seems random to me. (that random lagging the same way like exe is not working is nothing new.)

[Malnutrition]

First…
[HEADING=1][ul]
[li]Download CCleaner from here.[/li][li]After install Click Options.[/li][li]Go to monitoring.[/li][li]Uncheck All Monitoring items.[/li][li]Go to advanced – Click close program after cleaning.[/li][li]Go to settings – click run ccleaner when the computer starts.[/li][li]Now that you have ccleaner installed and set-up:[/li][li]Open the program.[/li][li]Go to Tools[/li][li]Go to Startup[/li][li]Now double click each item. To Disable.[/li][li]Leave only your antivirus enabled.[/li][li]Then disable All items in your scheduled task as well.[/li][li]Unless they are related to windows defender.Or your antivirus.[/li][li]Reboot the machine.[/li][/ul][/HEADING]
Run this in safe mode.

Quick Diag Scan.

Download Quick Diag to your desktop.
Very Important!! – Make sure program is on your desktop.
Disable your Antivirus/Antispyware prior to scanning.
Right Click Run as Administrator.
Select the Quick Scan.

https://pchelpforum.net/attachments/upload_2017-2-23_9-27-51-png.1654/

Post the log that is generated in your next post.

[Imr102030]

in options there is no tab called monitoring

[Imr102030]

• in the startup should i turn off ALL(?) even intel and asus stuff? what if thats a bad idea?

[Malnutrition]

It is not a bad idea, turn off everything in your startup except windows defender. There is no need for anything else. Same way my machine is setup. All of my startups are disabled except my antivirus. Machine will run better this way

[Imr102030]

that last diag tool is not running.it just opens and if i click it it freezes,

[Malnutrition]

================================================== ==================

Security Check Scan.
[HEADING=1][ul]
[li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul][/HEADING]
HijackThis.

1- Please click HERE to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.