Lot of problems, please help me :(

[Gabriela]

Hello,
i have tons of problems,all begun with a error message of logonui.exe which stated 001001649e exception because it made reference to memory 0000000.1e which cannot be "read". i scanned with S&D, it reported 3 trojans, which apparently were fixed, but when i restarted and scanned again, they continue showing, Ad-Aware, MCAcfee also reported events but samething happened. Did the same scans in safe mode and samething happends, and error continue to show during startup.. Also,all the windows XP applications are not working, notepad doesn't even open, therefore when i run the Hijack, it is not letting the report to open in notepad, instead it only gives the option to select lines one by one, and i cannot copy them not even to a word document. Also, at the strat up it asks me to send microsoft a report and even if i click on the send report option,it keeps showing that message box over and over again .
Also, i can enter to all internet sites except to Microsoft related sites, so i cannot see any possible solution for this.

also, my taskmanager dissapeared, even if i press ctrl+alt+del or ctrl+shft+esc, or from the properties bar, it doesn't show. I installed a PRCview and it shows the
Mcshield.exe and winlogon.exe working high and SynTPEnh.EXE above normal

don't know if this is related or not everything else is shown as in a normal prority

All happened from one day to another, any help so i can be able at least to send the HiJack report in some way different of using the notepad which is not working?

thanks

 

[katana]

Please note that all instructions given are customised for this computer only,
the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:

1. Please Read All Instructions Carefully
2. If you don't understand something, stop and ask! Don't keep going on.
3. Please do not run any other tools or scans whilst I am helping you
4. Failure to reply within 5 days will result in the topic being closed.
5. Please continue to respond until I give you the "All Clear"
   (Just because you can't see a problem doesn't mean it isn't there)

If you can do those few things, everything should go smoothly

Some of the logs I request will be quite large, You may need to split them over a couple of replies.

Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe
----------------------------------------------------------------------------------------




Download and Run ComboFix (by sUBs)
Please visit this webpage for instructions for downloading and running ComboFix:

Bleeping Computer ComboFix Tutorial

• You must download it to and run it from your Desktop
• Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
• Double click combofix.exe & follow the prompts.
• When finished, it will produce a log. Please save that log to post in your next reply
• Re-enable all the programs that were disabled during the running of ComboFix..

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper

For instructions on how to disable your security programs, please see this topic
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

 

[katana]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.