Author Topic: Widows Explorer/Dr. Morten (Read 24493 times)

AcesMonkey · « **on:** October 20, 2007, 03:06:24 PM »

I downloaded what I think was a bad file from a torrent about a month ago and now I can't open the folder I downloaded it in. I use Windows XP. I put it in My Documents>My Videos>My Movies. Sometimes I can open my videos, but most of the time I can't. If I try and delete it or open it I get an error message saying that Windows Explorer has encountered a problem and needs to close. Then it freezes up. A couple time it would came up with a Dr. Morten's Postmortem Debugger error message. Can you help me fix it?

I tried to put a hijackthis log in but it exceded the maximum amount of characters, so I attached it in a text file.

Edit: Also I ran a virus scan with McAfee nothing came up

[getting space - attachment deleted by admin]

Broni · « **Reply #1 on:** October 20, 2007, 10:53:56 PM »

You have quiet few bad guys there, but it's getting late, so I'll get back to you tomorrow, unless someone else chimes in.

Broni · « **Reply #2 on:** October 21, 2007, 11:55:33 AM »

Did you turn your firewall on, yet?

AcesMonkey · « **Reply #3 on:** October 21, 2007, 01:53:19 PM »

Yeah the firewall is and has been on.

Broni · « **Reply #4 on:** October 21, 2007, 02:27:33 PM »

Let me check your HJT log...

Broni · « **Reply #5 on:** October 21, 2007, 02:48:44 PM »

1. Print this post out, since you won't have an access to it, at some point.

2. Download, and install Spybot (if you don't have it) from here: http://www.safer-networking.org/en/download/index.html

3. Close all windows, except for HJT.

4. Put a checkmark next to following HJT entries:

- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html

- O2 - BHO: (no name) - {A6ACAE64-F798-4930-AD86-BD3FB32038DB} - C:\Program Files\Video Access ActiveX Object\isadd.dll (file missing)

- O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - C:\PROGRA~1\MORPHE~1\MORPHE~1.DLL (file missing)

- O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll (file missing)

- O3 - Toolbar: (no name) - {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - (no file)

- O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot (remove from "msconfig/startup")

- O4 - HKLM\..\Run: [StopSignSsTsMon] Rundll32.exe "C:\Program Files\Acceleration Software\Anti-Virus\sstsmon.dll",VerifyStatus

- O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll (file missing)

- O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll (file missing)

- O9 - Extra button: Start EasyFreeWebCam - {ECC5777A-6E88-BFCE-13CE-81F134789E8B} - C:\PROGRA~1\EASYWE~1\easywebcam.exe (file missing)

- O9 - Extra 'Tools' menuitem: &EasyFreeWebCam - {ECC5777A-6E88-BFCE-13CE-81F134789E8B} - C:\PROGRA~1\EASYWE~1\easywebcam.exe (file missing)

- O22 - SharedTaskScheduler: homina - {df8c3aed-b58e-4bcb-96b3-aa1b7bbdbbd4} - C:\WINDOWS\system32\oyopu.dll (file missing)

***Is "RIPE Network Coordination Centre" your ISP provider?***

5. Click on "Fix It" button.

6. Restart your computer in Safe Mode (F8)

7. Run Spybot (click on updates, first), and fix whatever it asks you to fix.

8. Open Windows Explorer. Go Tools>Folder Options, put a checkmark next to "Show hidden files, and folders".

9. Delete following files (if they still exist):

nothing to delete, for now

10. Turn off System Restore.

11. Restart in Normal Mode.

12. Turn System Restore on.

13. Run HJT again, and post back its log back here.

AcesMonkey · « **Reply #6 on:** October 21, 2007, 06:13:41 PM »

I did as you said, but I don't think it did much. I attached the log again.

[getting space - attachment deleted by admin]

Broni · « **Reply #7 on:** October 21, 2007, 07:27:24 PM »

I'm not sure what you did, because basically everything is back, nothing was fixed.
Follow EXACT steps from my previous post with couple of extra steps:

While in "Safe Mode", go Start>Control Panel>Add/Remove, and look for:
Acceleration Software, or Stop Sign program
If exist, uninstall.
Then...
Open Windows Explorer, navigate to:
C:\Program Files\Acceleration Software\ directory, right click on Acceleration Software, and click "Delete".

Post new HJT log.

AcesMonkey · « **Reply #8 on:** October 26, 2007, 02:22:35 PM »

Alright I did as you said here's the new log. It didn't fix the problem I was having though. Also the StopSign and Accelleration wasn't there.

[getting space - attachment deleted by admin]

Broni · « **Reply #9 on:** October 26, 2007, 07:30:26 PM »

OK...your HJT log is clean, now, so the culprit must be somewhere else.
Do you still have that "bad" downloaded file on your computer, and still can't delete it?

AcesMonkey · « **Reply #10 on:** October 26, 2007, 10:34:04 PM »

Yeah I'm pretty sure it's there still I can't get to the file to check though. Also if I try and delete any folder that contains it, it freezes up.

patio · « **Reply #11 on:** October 27, 2007, 08:34:48 AM »

Remove the offending folder and it's contents in safemode...

AcesMonkey · « **Reply #12 on:** October 27, 2007, 08:37:45 AM »

I've tried that it doesn't work, the same thing happens.

Broni · « **Reply #13 on:** October 27, 2007, 08:54:03 AM »

Does freezing happen in Safe Mode, too?
Did you try to access that folder from Command Prompt?

patio · « **Reply #14 on:** October 27, 2007, 08:56:29 AM »

Move On Boot...

Make sure to read the tutorial at the bottom of the DLoad page.

Broni · « **Reply #15 on:** October 27, 2007, 09:12:40 AM »

He can't open that folder... MoveOnBoot won't remove folder. It removes files only.

AcesMonkey · « **Reply #16 on:** October 27, 2007, 12:04:29 PM »

I tried all the things you said delete it in safe mode, open from the command prompt (that's one under the start menu right?), and that program. No of them worked.

Broni · « **Reply #17 on:** October 27, 2007, 01:25:29 PM »

Quote

open from the command prompt (that's rune under the start menu right?)

Did you go Start, typed: cmd, hit Enter, and Command Prompt window opened?
Did you navigate to the folder in question, and were you able to see the file in question?

AcesMonkey · « **Reply #18 on:** October 28, 2007, 11:47:39 AM »

Yeah that wasn't what I was doing... How do you navigate through the files with the command box?
I know how to open it just not navigate.

Broni · « **Reply #19 on:** October 28, 2007, 02:08:20 PM »

To make things simple, you can use "cd" command to walk around your computer. After entering a command, you hit Enter, which will take you to next line. This is an example:

or you can use a whole path, at once:

In the above example, I used dir command to display all files in "Backup 9" folder.
Lower/upper case letters don't matter.

AcesMonkey · « **Reply #20 on:** October 29, 2007, 06:26:11 PM »

Alright that wasn't what I was doing, but when I did it the right way it was weird. I got to the folder that contained what I think is the bad file, but when I entered dir to see what files were in the folder, the command box just closed out.

Broni · « **Reply #21 on:** October 29, 2007, 07:13:13 PM »

Try same thing in Safe Mode.
If this doesn't work, and you don't think, you have any important files in that directory, navigate to that directory, and type in:
del *.*
It'll delete all files in that directory. You may perform it in Safe Mode, as well.

AcesMonkey · « **Reply #22 on:** November 04, 2007, 06:40:44 PM »

Yeah it did the same thing again, I tried deleting it. That didn't work either.

Broni · « **Reply #23 on:** November 06, 2007, 12:02:27 AM »

You tried it in Safe Mode?

AcesMonkey · « **Reply #24 on:** November 06, 2007, 06:49:22 AM »

Yeah I was in safe mode.

patio · « **Reply #25 on:** November 06, 2007, 07:53:42 AM »

Unlocker

Make sure to read the Help section.

Broni · « **Reply #26 on:** November 06, 2007, 03:16:52 PM »

patio
I've never used this program, but I just got it, and it looks better, then "MoveOnBoot", because apparently it's able to remove whole folder, while MOB is not.

patio · « **Reply #27 on:** November 07, 2007, 09:30:30 AM »

Yep.
I had forgotten about it until i scanned thru my vast utilities archive...

AcesMonkey · « **Reply #28 on:** November 20, 2007, 04:19:45 PM »

I didn't have the time to try this out for a while, but I finally did. I can't use this because I can't right click on the file to try to delete it. Windows explorer just freezes.

evilfantasy · « **Reply #29 on:** November 20, 2007, 04:51:56 PM »

What is the path of the folder?

C:\??

AcesMonkey · « **Reply #30 on:** November 20, 2007, 04:58:43 PM »

I can't tell you for sure, but I think it's:
C:\Documents and Settings\Patrick Crean.THRIDFLOOR\My Documents\My Videos\Movies\Fantastic Four\(something else that I can't remember).

evilfantasy · « **Reply #31 on:** November 20, 2007, 05:14:25 PM »

Need the entire exact path to use a tool that will hopefully work.

AcesMonkey · « **Reply #32 on:** November 25, 2007, 11:52:55 AM »

I can figure the exact path out. Just tell me the tool and I'll try it out.

Broni · « **Reply #33 on:** November 25, 2007, 02:32:33 PM »

patio suggested "Unlocker". Did you try it?

AcesMonkey · « **Reply #34 on:** November 25, 2007, 03:49:09 PM »

Quote from: AcesMonkey on November 20, 2007, 04:19:45 PM

I didn't have the time to try this out for a while, but I finally did. I can't use this because I can't right click on the file to try to delete it. Windows explorer just freezes.

Already posted it up a little while ago. No, it didn't work.

Broni · « **Reply #35 on:** November 25, 2007, 03:50:47 PM »

Try Safe Mode.

evilfantasy · « **Reply #36 on:** November 25, 2007, 03:57:02 PM »

Try using Pocket killbox

Killbox Tutorial

Computer Hope Forum

News:

Author Topic: Widows Explorer/Dr. Morten (Read 24493 times)

AcesMonkey

Broni

Broni

AcesMonkey

Broni

Broni

AcesMonkey

Broni

AcesMonkey

Broni

AcesMonkey

patio

AcesMonkey

Broni

patio

Broni

AcesMonkey

Broni

AcesMonkey

Broni

AcesMonkey

Broni

AcesMonkey

Broni

AcesMonkey

patio

Broni

patio

AcesMonkey

evilfantasy

AcesMonkey

evilfantasy

AcesMonkey

Broni

AcesMonkey

Broni

evilfantasy