[B]Background Information:[/B]
My father has had a malware issue for a while, and as a result he asked me to help him out with it. I managed to remove pretty much everything by going into Safe Mode and running a Malwarebytes scan, however a day or so after my "fix" a new error arose. It seems I failed to get rid of some issue with explorer.exe which causes "ghost audio" to play in the background of his computer. I've concluded that the issue is with explorer.exe because when the audio played I was guessing some processes that might be causing it and eventually choose explorer.exe, and ended it, thus stopping the audio. However that is odd to me because explorer.exe (to my knowledge) is required for the task bar as well as some other on-screen elements.
After realizing it was explorer.exe I did some google searches and found this thread:
[url]http://www.geekstogo.com/forum/topic/134583-ghost-audio-virus-on-explorerexe/[/url]
It didn't help much because that was a specific thread for a specific user's computer, however I did try doing what one member on that forum suggested:
[QUOTE]
Please download the Killbox by Option^Explicit.
Note: In the event you already have Killbox, this is a new version that I need you to download.
Save it to your desktop.
Please double-click Killbox.exe to run it.
Select:
Delete on Reboot
then Click on the All Files button.
Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\WINDOWS\system32\WinNB57.dll
C:\WINDOWS\system32\winpfg32.sys
C:\WINDOWS\system32\dailytoolbar.dll
C:\WINDOWS\system32\uolvkmic.exe
C:\WINDOWS\system32\knce836b.sys
C:\WINDOWS\system32\inetcomm.dll
C:\WINDOWS\system32\ppeommoh.dll
C:\WINDOWS\system32\knce836b.dll
C:\WINDOWS\srvbtxvmxw.exe
C:\WINDOWS\srvifugpzh.exe
C:\WINDOWS\system32\iqqr.exe
C:\Program Files\ComPlus Applications\poko.html
C:\Program Files\Movie Maker\mehedy.html
Return to Killbox, go to the File menu, and choose Paste from Clipboard.
Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).
[/QUOTE]
As I proceeded to go through those steps and reaching the part where I was to copy those paths and paste them into Killbox, only one path was shown in the bar/field to enter paths:
"C:\WINDOWS\system32\inetcomm.dll"
I'm not sure whether or not this is because the bar/field only showed one path or because my paste went haywire. I'm also not sure whether or not it's a problem. I bring this up because promptly after clicking the "red-and-white Delete File button" (as mentioned in the above quote) and restarting, my father's computer failed to start-up.
[B]Start-up Issue:[/B]
Concerning the restart after using Killbox to delete said paths, I wanted to go into Safe Mode and run another scan, so I proceeded and pressed F8. Lo and behold I am presented with "Windows Error Recovery" with the options:
Launch Startup Repair (recommended)
Start Windows Normally
I launched Startup Repair and after going through it once and found nothing and said I may have to do it all over again, so I did except at the end of this one it said something along the lines of "Could not find any errors would you like to send this to Microsoft etc" as well as the two options "Send to Microsoft etc, Don't Send."
After that I tried "Start Windows Normally." Well, rather than starting normally it got past the first generic start-up things like the logo, loading bar, the dash (or hyphen?) at the top left, but after all those generic signs of start-up, it just restarts the start-up and asks me all over again whether or not I want to launch Startup Repair or to Start Windows Normally?
So that's it folks, give it to me straight Facepunch, did I completely fuck up with that Killbox program? Do I need to call Dell and pay $59.99? Should I pay to back-up all information and buy a new computer? Or is there a fix, am I in luck? Shit, by the way, if there is a way to fix this and I do manage to fix it with your help, I still have that ghost audio issue :v:
I hope I included enough information, if I failed to so please mention what I should add to further help you decipher the issue.
[B]System Specifications:
[/B][url]http://www.dell.com/us/dfh/p/xps-one-24/pd?cs=22[/url]
That's the exact computer, if you'd rather I go get the booklet and post the exact information from that, please say so and I will.
Pop in your windows install disk and choose "repair installation" - should help.
[QUOTE=FlapadarV2;29449841]Pop in your windows install disk and choose "repair installation" - should help.[/QUOTE]
Ah thanks, but I did try that and "Repair Installation" is the same as Startup Repair (I'm assuming) because it did the exact same thing as Startup Repair and left me with the same result, didn't find anything and whether or not I should send it to Microsoft or not.
[editline]wat[/editline]
Sorry for not mentioning that already.
[editline]26th April 2011[/editline]
[B]Small Update:[/B]
I was tinkering with Startup Repair (just running it over and over again) and I expanded "More Details" and it gave me a new explanation this time:
[QUOTE]
Files that help describe the problem:
C:\Windows\System32\LogFiles\Srt\SrtTraiL.txt
X:\Windows\Temp\StartupRepair.etl
[/QUOTE]
Not sure if that's any help, but yeah.
What Windows OS are you running?
Why not just run "sfc /scannow"
It'll look through all system files and detect modified files and replace them. If you don't have an install disk or anything, just [url=http://neosmart.net/blog/2009/windows-7-system-repair-discs/]download a repair disk[/url] and boot up into it, open command prompt, type in that command.
Sorry, you need to Log In to post a reply to this thread.
