PDA

View Full Version : Google Redirect + persistent DisplayLinkUserAgent.exe window pop up



esgeb
2011-07-14, 00:04
The problems on my brother's laptop keep compounding. Google redirects, extremely slow, fake antivirus windows, and now a persistent window saying "DisplayLinkUserAgent.exe has encountered a problem and needs to close." keeps popping up and will not go away from the middle of the screen at all times. I cannot run any removal software like spybot, hjt, malware, avg, etc. even in safe mode.

The processes listed in the Windows task manager are:
dwwin.exe (~30 times)
DisplayLinkUserAgent.exe (~15 times)
DisplayLinkManager.exe
jucheck.exe
_iu14D2N.tmp
wuauclt.exe
ctfmon.exe
explorer.exe
svchost.exe (6 times)
drwtsn32.exe
alg.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
AdobeARM.exe
smss.exe
igfxsrvc.exe
igfxpers.exe
hkcmd.exe
jusched.exe
scardsvr.exe
spoolsv.exe
System
System Idle Process

The computer is running Windows XP Professional

I appreciate any help!

km2357
2011-07-19, 20:09
Hello and welcome to Safer Networking.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:


Step # 1 Download and run DDS

Download DDS and save it to your desktop from here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.infospyware.net/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.com)
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.



Step # 2: Download and Run Gmer

Please download gmer.zip (http://www.gmer.net/gmer.zip) from Gmer and save it to your desktop.

***Please close any open programs ***

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security Analyst

If possible rootkit activity is found, you will be asked if you would like to perform a full scan. Click No.

If you do not receive notice about possible rootkit activity remain on the Rootkit/Malware tab & make sure that the 'Sections' button is ticked and the 'Show All' button is unticked. Click the Scan button and let the program do its work. GMER will produce a log.

Once the scan is complete, you may receive another notice about rootkit activity.
Click OK.

GMER will produce a log. Click on the Save button, and save the log as gmer.txt somewhere you can easily find it, such as your desktop.

DO NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !

Please post the results from the GMER scan in your reply.


In your next post/reply, I need to see the following:

1. The two DDS Logs (DDS and Attach.txt)
2. The GMER Log

Use multiple posts if you can't fit everything into one post.

km2357
2011-07-22, 20:07
esgeb? Do you still need help?

km2357
2011-07-25, 20:09
This topic has been archived due to inactivity.

If it has been three days or more since your last post, and the helper assisting you
posted a response to that post to which you did not reply, your topic will not be
reopened. At that point, if you still require help, please start a new topic and include
a new DDS log with a link to your previous thread. Please do not add any logs that
might have been requested in the closed topic, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start a new
topic.