June 24th, 2008, 09:55 AM
explorer.exe not executing
This is another abnormal functioning in a series of others.
Today when i booted my PC, the Welcome screen took a little longer to disappear and then, on the desktop there was nothing, absolutely nothing.
I'm using WinXP SP2, its never happened before.
I opened msconfig, to see two new processes,
1) owjokuch rundll32.exe "C:\WINDOWS\system32\owjokuch.dll",s
2) wmjgenhj rundll32.exe "C:\WINDOWS\system32\wmjgenhj.dll",b
i disabled them, and after rebooting, i got the same problem.
Then, i tried starting the explorer.exe from the task manager. It starts, only to get terminated automatically.
June 24th, 2008, 10:26 AM
Now, I see that even the folders or drives are not opening in GUI.
I can access them on DOS only.
June 24th, 2008, 10:45 AM
I would say that you have polymorphic malware onboard.
Try booting into safe mode and running the latest version of your anti-malware applications. Make a note of what they detect, we might need that information later
I would strongly recommend saving any personal data files to external media at this stage.
Try logging on in "safe mode with network support" and running the PC-Cillin and Panda online checks.
Remember: You will need to disable the saved configurations first, then make a manual one when you have cleaned your PC.
June 25th, 2008, 12:43 AM
I think that you got some work in you computer that infected most of files.
Burn som antivirus on the CD and run it from it.
sophos has "sav32cli" that you can put on CD
and Dr.Web has CureIt
Use other computer to download and burn files on CD.
June 26th, 2008, 10:03 AM
But, my novice bro called up someone, who took 200/- to reinstall the OS!!
So, lets forget that and carry on...
June 26th, 2008, 01:09 PM
That was probably the best solution.
It sounds rather like vundo/virtumonde as this trojan goes for explorer.exe and uses random filenames.
I would hazard a guess that it is either a badly coded variant or a screwed up installation. The reason I say that is the usual function of that family of malware is to serve up adware. Obviously it cannot do that if you can't get your PC to work properly.
You need to ask yourself how you got it, as it certainly did not blow in with the wind............. it is a classic trojan for the most part.
Last edited by nihil; June 26th, 2008 at 01:12 PM.
June 27th, 2008, 10:04 AM
I don't know how it came, I was just doing my stuff... And the system hanged for some time, and then it happened.
I think its like some time bomb.
It was a dll which used rundll32.exe to execute.
I must have downloaded some software which activated them..
June 27th, 2008, 12:59 PM
If you have software you saved from the system or anything you downloaded onto external media I would scan it very carefully before trying to use it, or you will just go back to square 1.
July 4th, 2008, 11:00 PM
if it ever happens again and you don't have a desktop or it errors on boot (including safemode) try combofix
just tested it on a customers computer 3 seconds ago
July 15th, 2008, 07:32 PM
Originally Posted by ech0
By al1aprize in forum AntiVirus Discussions
Last Post: August 21st, 2006, 01:33 PM
By ShagDevil in forum General Computer Discussions
Last Post: July 5th, 2006, 10:11 PM
By imported_all_smiles in forum Operating Systems
Last Post: May 2nd, 2006, 09:36 PM
By mrg81 in forum Microsoft Security Discussions
Last Post: June 30th, 2004, 11:17 PM
By TAIWL in forum AntiOnline's General Chit Chat
Last Post: February 11th, 2004, 05:58 PM