kamry2009

my pc always crash

Recommended Posts

my laptob is always crash

Moderator Note: Please do not paste logs into a forum post. It makes navigating your forum topic easier if you attach them. Please click the "More Reply Option" button in the lower-right corner to be presented with controls for attachments.

  • Upvote 1

Share this post


Link to post
Share on other sites

I have written a cleanup script for OTL (if you need to, you may download OTL from this link).

  1. Please copy the contents of the following CODE box, and in OTL under the Custom Scans/Fixes box at the bottom, paste in what you just copied from the following CODE box:
    :OTL
    SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) --  File not found
    SRV - (HidServ) --  File not found
    SRV - (gupdatem) خدمة Google Update (gupdatem) --  File not found
    SRV - (gupdate) خدمة Google Update (gupdate) --  File not found
    FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan:  File not found
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3:  File not found
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9:  File not found
    File not found (No name found) -- C:\DOCUME~1\LLLLLL~1\LOCALS~1\TEMP\RAR$EXA0.656\PALEMOON\EXTENSIONS\[email protected]
    [2012/02/01 16:06:46 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\llllllllllllllllllll\Application Data\Mozilla\Firefox\Profiles\4j52sf7g.default\extensions\[email protected]
    [2011/12/27 18:36:05 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
    O3 - HKLM\..\Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No CLSID value found.
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
    [2011/12/27 18:35:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\llllllllllllllllllll\Application Data\Babylon
    [2011/12/29 03:07:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\llllllllllllllllllll\Application Data\BabylonToolbar
    [2011/12/27 18:35:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon


  2. Then click the Run Fix button at the top.
  3. Let the program run unhindered, restart your computer when it is done (it may automatically restart your computer on its own).
  4. After your computer has restarted, please open OTL again and click the Quick Scan button. Attach the log it produces in your next reply (just the OTL log, as I don't need to see the Extras log again). You will need to click the button that says More Reply Options to the lower-right of where you type your reply to be presented with the attachment controls.

Share this post


Link to post
Share on other sites

do you need combofix

ihave trust port internet security 2012 and i cant uinstal it and also comdoo firewall and also ther is left over file and icant remove it i try many programs like Your Uninstaller! 7 and many others can you help my ?

Share this post


Link to post
Share on other sites

Yes, since you already ran ComboFix go ahead and attach the log to a reply for me. You will find it as C:\ComboFix.txt

Share this post


Link to post
Share on other sites

this one??

ComboFix 12-02-13.01 - llllllllllllllllllll 02/14/2012 21:17:55.1.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1256.962.1033.18.1915.794 [GMT 2:00]

Running from: C:\Documents and Settings\llllllllllllllllllll\My Documents\Downloads\Programs\ComboFix.exe

AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}

AV: Emsisoft Anti-Malware *Disabled/Updated* {0F8591BB-342B-4493-91C3-4E948ED21255}

AV: Kaspersky Internet Security *Disabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

FW: Kaspersky Internet Security *Disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

Share this post


Link to post
Share on other sites

Do you recommend any program to solve system crash its happednd

Especially when i yous fire fox i use kasper inter net security 20112 +interner dawnload manger+ admuncher + emsisoft anti mlware + advanced syestem care+ anti crash

always in the front ....this day when i had use combo when syestem re start The blue screen appeared how can i can be sure that this The problem will not happen in the future

Share this post


Link to post
Share on other sites

WHAT THIS ? CAN YOU EXPLAIN WHAT THIS PHOTO MEAN?

There are a few things that can cause that. File permissions may have gotten changed, some software may be denying access to the file, there may be issues with the way Windows is accessing the hard drive that the file is stored on (driver issues for instance), or there may just be errors in the filesystem that are preventing Windows from reading the file.

I'll go ahead and look over your ComboFix log, and see if there may be something malicious that is causing the issue.

Edit: Just taking a look at the list of installed security software has shown a problem. You have Kaspersky Internet Security, and you have COMODO Antivirus and COMODO Firewall. Having all three of those installed could cause problems, and I highly recommend that you either remove the COMODO software entirely (both antivirus and firewall), or if you prefer the COMODO software to the Kaspersky software then I recommend that you remove the Kaspersky Internet Security.

Share this post


Link to post
Share on other sites

OK, I have written a script that will tell ComboFix how to delete some stuff I saw in your log. Here are instructions on what to do with the script:

  1. Turn off your Anti-Virus software.
  2. Click your Start button, go to All Programs (or just Programs on Vista and Windows 7), go to Accessories, and then open Notepad.
  3. Please copy and paste the contents of the box below into Notepad (here is a link to instructions if you do not know how to copy and paste):
    http://support.emsisoft.com/topic/7324-my-pc-always-crash/
    
    KillAll::
    
    Collect::
    c:\windows\TEMP\klsB53F.tmp
    
    Suspect::
    C:\DH Temp.tmp
    c:\windows\atemp.tmp
    c:\program files\Common Files\dx.reg
    
    RegLock::
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b3bb7e0e-aa09-4ffc-be0f-575cce34418d}]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e46a23c3-2958-4f13-93d0-2c67509e02b4}]
    
    DDS::
    uInternet Settings,ProxyOverride = local


  4. Save this as a Text Document named CFScript in the same location as ComboFix (which should be on your desktop).
  5. Close Notepad and verify that the CFScript file is saved on your desktop.
  6. Referring to the animated picture below, click the left mouse button on top of the CFScript icon on your desktop, then holding the mouse button down drag the CFScript icon on your desktop onto the ComboFix icon, and then drop it (let go of the mouse button) on top of the ComboFix icon:
    CFScriptB-4.gif

When finished, it will display a new log in Notepad. Please attach that log to a reply the same way you did before. If you prefer, you can save the log on your desktop to make it easier to find.

Share this post


Link to post
Share on other sites

Also, after running ComboFix with the instructions above, please run CKScanner as well. You can download CKScanner from here.

Important : Save it to your desktop.

  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify that the file is saved.
  • Please attach the file named CKFiles.txt on your desktop to a reply by going to More Reply Option below.

Share this post


Link to post
Share on other sites

I'm sorry, but due to the amount of keygens you have on your computer, I'm not going to be able to continue assisting you until you delete all cracks, keygens, pirated serials, and all of the following software from your computer:

  • Internet Download Manager
  • Ad Muncher
  • Trucks & Trailers
  • Driver Genius Professional Edition
  • RegCure
  • SUPERAntiSpyware
  • Revo Uninstaller

Once you have removed all of these programs, any cracks and keygens, and any other pirated software that you have then go ahead and get me a fresh OTL log and a fresh CKScanner log, and I will be happy to continue assisting you.

Share this post


Link to post
Share on other sites

i do my best

if you find any crack plz tell me and i will remove it

but you dont answer me about my pic that i had send it to you ?

and what i should to do to quarantine? remove all?

Share this post


Link to post
Share on other sites

I'm still seeing the following crack/keygen related files on your computer:

c:\documents and settings\llllllllllllllllllll\desktop\crack\idman.exe
c:\documents and settings\llllllllllllllllllll\desktop\crack\regkey windows 32-bit.reg
c:\documents and settings\llllllllllllllllllll\desktop\crack\regkey windows 64-bit.reg
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\ad_muncher_v4.91_crack.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\crack trucks & trailers.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\crack.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\crack_4.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\driver genius professional v11.0.0.1112 + crack.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\idm-6.07-build-7--+-crack.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\compressed\regcure 3.0.2 + crack.rar
c:\documents and settings\llllllllllllllllllll\my documents\downloads\video\superantispyware professional 5.0.1142.(new keygen) registered for free - youtube.flv

Please remove all cracks and keygens, then rerun OTL and CKScanner, and post new logs for me.

Share this post


Link to post
Share on other sites

OK, that is looking better.

Those screenshots you asked about are not a big deal (I don't even know when Merijn last had a chance to update BugOff). Lets start with ComboFix, and see what it tells us. Since it's been a little while since your last ComboFix log, go ahead and run it again (following the same instructions as last time), and attach the log to a reply.

Share this post


Link to post
Share on other sites

What is the best anti-viruses program؟

...........................................................................................................................................................................................................................

What is the best firewall program؟

............................................................................................................................................................................................................................

http://www.zemana.com/??? do you Recommend using this program??

...........................................................................................................................................................................................................................

Is there a program better than admuncher?http://www.admuncher.com/

...........................................................................................................................................................................................................................

Are there other programs recommended for use؟

...........................................................................................................................................................................................................................

For Firefox Is there a specific settings and add-ons ? you recommended to make firefox faster and secure and more stable?

...........................................................................................................................................................................................................................

Share this post


Link to post
Share on other sites

What is the best anti-viruses program؟

Assuming that you are looking for something that is free, Avira AntiVir and avast! are pretty good.

Edit: Microsoft Security Essentials also has a good detection rate, however it does have trouble removing infections due to lack of drivers.

What is the best firewall program؟

Online Armor, of course. ;)

http://www.zemana.com/??? do you Recommend using this program??

I've never heard of it before, so I can't say whether or not it is any good.

Is there a program better than admuncher?http://www.admuncher.com/

Since you're a Firefox user, try something such as AdBlock Plus. It's free, and it should take care of most of the ads you encounter around the Internet. You may also want to check out the Fanboy Adblock List (I use it in Opera by itself and I rarely see ads).

Are there other programs recommended for use؟

Yes, a program such as HostsMan is a great compliment to any security setup, as it will automatically manage your HOSTS file and update it for you from sources such as hpHosts and MVPS HOSTS. You just have to configure it the way you want it, then make sure it is running in the background, and it will do the rest.

For Firefox Is there a specific settings and add-ons ? you recommended to make firefox faster and secure and more stable?

Firefox has a tendency to slow down a little with each extension/add-on you install. A minimalistic approach tends to be best for performance, and for security as well. Many people consider the 'essential' extensions to be things such as AdBlock Plus and NoScript. Many security experts also recommend the Web Of Trust extension for Firefox, Internet Explorer, Opera, Google Chrome, and Safari.

And now for your ComboFix log. I have written a script that will tell ComboFix how to delete some stuff I saw in your log. Here are instructions on what to do with the script:

  1. Turn off your Anti-Virus software.
  2. Click your Start button, go to All Programs (or just Programs on Vista and Windows 7), go to Accessories, and then open Notepad.
  3. Please copy and paste the contents of the box below into Notepad (here is a link to instructions if you do not know how to copy and paste):
    http://support.emsisoft.com/topic/7324-my-pc-always-crash/
    
    KillAll::
    
    Driver::
    gupdate
    CD-Lock
    gupdatem
    maconfservice
    PROCEXP151
    WinRing0_1_2_0
    
    Suspect::
    c:\documents and settings\llllllllllllllllllll\Local Settings\Application Data\Mac.bat
    c:\documents and settings\llllllllllllllllllll\Local Settings\Application Data\EmptyARP.bat
    c:\documents and settings\llllllllllllllllllll\Local Settings\Application Data\ConfigIP.bat
    
    Registry::
    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "F.lux"=-
    
    DDS::
    IE: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=4KA6912A&id=menu_ie_frame
    IE: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=4KA6912A&id=menu_ie_image
    IE: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=4KA6912A&id=menu_ie_link
    IE: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=4KA6912A&id=menu_ie_exclude
    IE: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=4KA6912A&id=menu_ie_report


  4. Save this as a Text Document named CFScript in the same location as ComboFix (which should be on your desktop).
  5. Close Notepad and verify that the CFScript file is saved on your desktop.
  6. Referring to the animated picture below, click the left mouse button on top of the CFScript icon on your desktop, then holding the mouse button down drag the CFScript icon on your desktop onto the ComboFix icon, and then drop it (let go of the mouse button) on top of the ComboFix icon:
    CFScriptB-4.gif

When finished, it will display a new log in Notepad. Please attach that log to a reply the same way you did before. If you prefer, you can save the log on your desktop to make it easier to find.

Share this post


Link to post
Share on other sites

As far as the other logs, lets refrain from looking at those for the moment. ComboFix and OTL are usually enough, and when they are not then more powerful utilities are required. ;)

Share this post


Link to post
Share on other sites

OK, that's looking better.

Please run an online virus scan through ESET by following the steps below:

  1. Turn off your anti-virus software.
  2. Click on this link.
  3. Click on the ESET Online Scanner button.
  4. Put a check in the box that says YES, I accept the Terms of Use.
  5. Click the 'Start' button just to the right of the checkbox.
  6. Uncheck the box that says Remove found threats (this is very important).
  7. Click on Advanced settings.
  8. Put a check in the box that says Scan for potentially unsafe applications.
  9. Verify that Scan for potentially unwanted applications is also checked.
  10. Verify that Enable Anti-Stealth technology is also checked.
  11. Click the Start button in the lower-right corner of the page, and it will begin downloading it's database, and then it will start scanning.
  12. When the scan is done, if it shows a screen that says Threats found!, then click List of found threats, and then click Export to text file... (if nothing was found, then just let me know that no threats were found).
  13. Save that text file on your desktop, and then attach it to a reply (using the More Reply Options button in the lower-right corner of this forum topic) for me.
  14. Close the ESET online scan.

I will take a look at the log, and let you know if anything needs removed.

Share this post


Link to post
Share on other sites

i did this scan yesterday i had found 30 virus and i remove them! but i didnt save the log it!

Uncheck the box that says Remove found threats (this is very important). :( i checked this box

what i have to do know make new scan?

Share this post


Link to post
Share on other sites

Well, from your logs, it looks like you have Malwarebytes' Anti-Malware installed. Go ahead and make sure that it is completely up to date, and then run a Quick Scan. Remove anything it finds, save the log on your desktop, and then attach it to a reply.

Share this post


Link to post
Share on other sites

Please run a Bitdefender Online Virus Scan by following the instructions below:

  1. Click this link to visit the Bitdeneder Online Virus Scan website.
  2. Click on the green start scanner button in the middle of the screen.
  3. Click the gray Continue button to the left.
  4. Click the green Scan now button (you may need to scroll down to see it).
  5. A little yellowish bar may pop up at the top of the page to notify you that the website is trying to install an add-on. Click on that yellowish bar and select to install the add-on.
  6. If you had to install the add-on, then Internet Explorer will reload the page, and you will be back on step 2. Repeat steps 2 thru 4 again.
  7. You may now be presented with a Security Warning popup asking if you want to install something from Bitdefender. Go ahead and click the Install button.
  8. You should now be asked to accept the license agreement. You will need to click the I ACCEPT box in the lower-left corner before you can click on the OK button to continue.
  9. The scan will begin running. This could take more than a few minutes.
  10. Once it is done, it will tell you whether or not it found anything. Avoid removing anything for now, and click on the View report link.
  11. Notepad will open with a copy of the report. Please save this on your desktop, and attach it to a reply by clicking on the More Reply Options button to the lower-right of where you type out your reply.

Share this post


Link to post
Share on other sites

OK, go ahead and make sure that Emsisoft Anti-Malware is update to date, do a Deep Scan, remove anything it finds, and attach the log to a reply.

Share this post


Link to post
Share on other sites

C:\Documents and Settings\llllllllllllllllllll\My Documents\Downloads\avc-free.exe Win32/OpenCandy application

C:\Documents and Settings\llllllllllllllllllll\My Documents\Downloads\Programs\SmitfraudFix.exe multiple threats

C:\Documents and Settings\llllllllllllllllllll\My Documents\Downloads\Programs\SmitfraudFix_2.exe multiple threats

C:\System Volume Information\_restore{B76DCD6C-F5B9-4E4D-96A4-39C592D5A68F}\RP251\A0052148.exe a variant of Win32/PerfectUninstaller application

C:\System Volume Information\_restore{B76DCD6C-F5B9-4E4D-96A4-39C592D5A68F}\RP267\A0058409.exe Win32/Shutdown.NAA application

C:\System Volume Information\_restore{B76DCD6C-F5B9-4E4D-96A4-39C592D5A68F}\RP267\A0058411.exe Win32/PrcView application

ESET>>>> HOW CAN I REMOVE THEM

EMSISOFT STILL SCANING AND UP TO KNOW THE EMSISOFT DISOVERED 6 VIROUS

Share this post


Link to post
Share on other sites

OK, things are looking pretty good. Is you computer still showing any signs or symptoms of an infection?

Share this post


Link to post
Share on other sites

is avast better than kasper ?

i have kasper do you recommend me to use avast ?

is advanced system care the best registery cleaner?

you told my online armor best firewall but what about my firewall comodo?

also i want to ask you about windows 8? if you have anformation ? when it released? > is windows 8 good?

In the end, my friend, thank you for your help you and i wish you a happy life :) >>>>>>>>

Share this post


Link to post
Share on other sites

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP12\Bases\Cache\mark.kdl.4be5bef41bed32eb3118814f8023c4f4 - File locked, removal on next reboot

C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP12\Data\Updater\Temporary Files\temporaryFolder\bases\av\ark\i386\win\mark.kdl - File locked, removal on next reboot

Share this post


Link to post
Share on other sites

is avast better than kasper ?

i have kasper do you recommend me to use avast ?

If you don't mind paying for Kaspersky, then it is a very good anti-virus. ;)

is advanced system care the best registery cleaner?

That is a difficult subject. Registry cleaners can cause harm to your computer, and many experts recommend that you avoid them. Registry defragmentation does yield some performance benefits, however cleaning does not. Also, Advanced System Care is made by a company with a reputation for stealing technology from other companies, so I do not ever recommend their software. If you want good software like that, then CCleaner from Piriform is a good free one, and TuneUp Utilities is a good premium one. There are other good Windows optimization software out there, however my personal experience is confined mostly to TuneUp Utilities and CCleaner (I've also used NTREGOPT, which is a good little program for optimizing the Windows registry, and some experts recommend it over utilities such as CCleaner and TuneUp Utilities).

you told my online armor best firewall but what about my firewall comodo?

COMODO Firewall is just fine. Online Armor is an Emsisoft product, and a pretty good firewall, so I had to mention it. ;)

also i want to ask you about windows 8? if you have anformation ? when it released? > is windows 8 good?

Those are all difficult questions. Well, except for the "if you have information" question, because we honestly don't have any more information than Microsoft has made public so far. We also don't know when it will be released.

As for whether or not it is any good, that is a matter of some controversy. There are some concerns about Secure Boot technology, and what it will do to the third-party operating system market. There are also concerns that it will be easily and quickly bypassed by authors of malicious software (such as rootkits) and that it may be more difficult to deal with such rootkits on a system protected by Secure Boot. This is, unfortunately, a hardware issue that Microsoft is forcing upon us by requiring Secure Boot compatibility for Windows Logo certification of hardware.

new problem>>>> what this plz see the pic

That picture shows what look like false positives to me. Any possibility that you could get me a scan log and copies of the files?

Share this post


Link to post
Share on other sites

I haven't been able to replicate this in testing. I see you ran a custom scan. What settings did you select when you ran the scan? Was it a scheduled scan?

Share this post


Link to post
Share on other sites

I dont HAVE LICENSE NOW :unsure:

my free license dont work i i dont know why my free period 20 days but i remove it gust to see what happened after that ( your license already used)

can you help my to recover my free license

i need this program know i dont have paypal account so i cant buy it

i do quick and custom the same result >>>>>>>note: emsisoft out of update just today because my internet connection very bad

i check all guard settings and all anti malware configuration

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.