Need help with possible virus

Viruses and worms
1

I keep receiving this message:

Microsoft Visual C++ Runtime Error
Programs:C:\WINDOWS\Explorer.exe
This application has requested the Runtime to terminate it in an unusual way. Please contact the application’s support team for more information.

This happens when I press the delete key on an image (jpeg) or left click on some of the icons in the start menu.

Is this due to a current or former virus on my laptop or is there something else that’s wrong with my computer?

2

There is a Fix it for this problem: http://go.microsoft.com/?linkid=9643461

polonus

3

I ran the fix it, but I still keep getting the error message…

4

Hi aznkitty180,

What did you install shortly before the issue started. A player like Crzay Talk or anything related?

So it must have another reason then, and I have asked a qualified remover to look into this issue.

You could start with providing us with the logs as given here: http://forum.avast.com/index.php?topic=53253.msg451454#msg451454

Then await instructions,

polonus

5

I’m not very sure, this was my parents’ laptop so I don’t really know what they downloaded or when this problem began… Avast didn’t pick up on anything. I’m going to start a Malwarebytes scan, and I’ll attach the log when it finishes…

6

Malwarebytes picked up a PUP.Tool at C:\WINDOWS\system32\cmdow.exe

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.03.16.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.13
大城國際聯合建築事務所 :: 255254FF5A8B41F [administrator]

3/16/2012 5:43:34 PM
mbam-log-2012-03-16 (17-43-34).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 220763
Time elapsed: 36 minute(s), 47 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\WINDOWS\system32\cmdow.exe (PUP.Tool) → Quarantined and deleted successfully.

(end)

7

Hi it is not malware but a software conflict, the only way to track it down is a bit tedious

Step 1:

Start the System Configuration Utility
Click Start, click Run, type msconfig, and then click OK.
The System Configuration Utility dialog box is displayed.

Step 2:

Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, click Restart to restart the computer.

Step 3: Log on to Windows

If you are prompted, log on to Windows.
When you receive the following message, click to select the Don’t show this message or launch the System Configuration Utility when Windows start check box, and then click OK.

You have used the System Configuration Utility to make changes to the way Windows starts. The System Configuration Utility is currently in Diagnostic or Selective Startup mode, causing this message to be displayed and the utility to run every time Windows starts. Choose the Normal Startup mode on the General tab to start Windows normally and undo the changes you made using the System Configuration Utility.

Now we get to the tedious part,:

If windows behaves itself then do the following

Restart MSConfig and select half of the disabled services and reboot

Is the problem still present ?

If Yes then deselect half of the services that you resumed and reboot

If no then select half of the remaining services and reboot

The intention here is to isolate the one service/driver that is causing the problem

8

I unchecked System.INI, WIN.INI, and Load Startup Items. I clicked service tab, and I clicked Disable All, restarted and the problem still persisted…

I noticed how after clicking Disable All, the General Tab reverts to Diagnostic Startup though… Is that a problem?

–

And I found a mistake in my original message, “This happens when I press the delete key on an image (jpeg) or left click on some of the icons in the start menu.”

I meant to say right click, not left.

9

OK reverse the steps to get back to a normal start

I will now have a rethink about this