Right clicking on Desktop or in Windows Explorer hangs up computer!

[CindyM]

Help!  My computer hangs up and I have to reboot each time I try to right click on something on my desktop, such as a folder or a file.  I have run all the suggested scans and will attach them here in hopes someone can help me!

Thanks,
Cindy

[Saving space, attachment deleted by admin]

[harry 48]

you have a number of issues with your pc wait for a malware expert to help you

in the mean time you have 2 anti-virus you should only have one , keep avast read below

It appears as if you may have multiple antivirus programs running on the computer (Alwil / Symantec) if this is the case please uninstall one of them. Running multiple antivirus programs on the computer can cause a lot of different issues.

http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039/

removal tool above

[SuperDave]

Hello CindyM and welcome to Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

It appears that you're running two Anti-Virus programs (Avast & Symantec) on your computer which is a no-no. One will have to go. It also appears that Symantec was removed but some  bits are left. If you can't find it in the Add/Remove programs, let me know and I'll send you a tool to remove all traces of it.

Open HijackThis and select Open the Misc Tools section. Select open process manager. select
C:\WINDOWS\ALCXMNTR.EXE
and click on kill process.

Click Start. My Computer.
Select the Tools menu Folder Options. Select the View Tab.
Under the Hidden files and folders heading select "Show hidden files and folders".
Uncheck the "Hide protected operating system files (recommended)" option.
Uncheck the "Hide file extensions for known file types" option.
Click Yes to confirm. Click OK.

Click Start, Search, select All Files and Folders. Copy and paste

Code: [Select]

C:\WINDOWS\ALCXMNTR.EXE

and click search. Delete this file.

Download Disable/Remove Windows Messenger to the desktop to remove Windows Messenger.

Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Unzip the file on the desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.

Exit out of MessengerDisable then delete the two files that were put on the desktop.

Open HijackThis and select Do a system scan only

Place a check mark next to the following entries: (if there)

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (file missing)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O15 - Trusted Zone: http://www.dmoz.org
O15 - Trusted Zone: *.inquiero.com
O15 - Trusted Zone: *.mdnetwork.com
O15 - Trusted Zone: *.mtvscript.com
O15 - Trusted Zone: *.mtvscript.md
O15 - Trusted Zone: *.netopia.com
O15 - Trusted Zone: http://www.spantel.net
This zone has the lowest security and allows scripts and applications from sites in this zone to run without your knowledge. It is therefore a popular setting for malware sites to use so that future infections can be easily done on your computer without your knowledge as these sites will be in the Trusted Zone..

O16 - DPF: {1B635029-8269-11D8-9E2B-004005A9ABD2} (TX - ButtonBar Control) - https://md.mtvscript.com/tx.cab
O16 - DPF: {7CB08DCD-1FB4-4E22-BA29-6EA8DB05192B} (JmFtc Control) - http://www.spantel.net/WOMCab/JMFTC.cab
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

Important: Close all open windows except for HijackThis and then click Fix checked.

Once completed, exit HijackThis.

Download ComboFix by sUBs from one of the below links.  Be sure to save it to the Desktop.

link # 1
link #2

Close any open web browsers (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your anti-virus, and any anti-spyware real-time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Vista users Right-click combofix.exe and select Run as Administrator and follow the prompts.
Double-click combofix.exe and follow the prompts.
When finished, ComboFix will produce a log for you.
Post the ComboFix log and a new HijackThis log in your next reply.

NOTE: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your anti-virus and anti-spyware protection when ComboFix is complete.

[CindyM]

Thank you SD!  I will work on this today.  Is there a different Norton removal tool other than the link that was given in the previous post?  I noticed that one would blow away Norton Password Manager, which I do use and would like to keep.  However, if it is an all or nothing deal, I will get rid of it!

Thanks again,
Cindy

[CindyM]

Okay, I have done everything in your instructions, with the exception of using the Norton removal tool (see above post).  I have attached my log from ComboFix and HijackThis. 

Of note, I was trying to work with my auto text in MS Word the other day and noticed that it would let me go thru the steps of revising or adding auto text, but when I tried to use the auto text, the changes had not actually taken place.  Do you think this could actually be from a corrupt user profile?

Thanks a million for your help on this.

-Cindy

[Saving space, attachment deleted by admin]

[harry 48]

http://www.avast.com/eng/avast-uninstall-utility.html

if you want to keep norton thats fine , here is the avast removal tool , harry 

[SuperDave]

Ok Cindy. Your ComboFix log shows only the Avast anti-virus. You can check in Add/Remove programs but I think it's the Norton Password Manager that was showing up in the logs. Let's run one more scan.

ESET Online Scan

Scan your computer with the ESET FREE Online Virus Scan

* Click the ESET Online Scanner button.

* For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
* Click on the esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop
* Double click on the esetsmartinstaller_enu.exe icon on your desktop.
* Place a check mark next to YES, I accept the Terms of Use.

* Click the Start button.
* Accept any security warnings from your browser.
* Leave the check mark next to Remove found threats and place a check next to Scan archives.
* Click the Start button.
* ESET will then download updates, install, and begin scanning your computer. Please be patient as this can take some time.
* When the scan completes, click List of found threats.
* Next click Export to text file and save the file to your desktop using a name such as ESETScan. Include the contents of this report in your next reply.
* Click the <<Back button then click Finish.

In your next reply please include the ESET Online Scan Log

[CindyM]

The ESET scan log is attached. 

Thanks again Super Dave!

-Cindy

[Saving space, attachment deleted by admin]

[SuperDave]

Download DrWeb CureIt & save it to your desktop. Scan with DrWeb-CureIt as follows:

•Double-click on drweb-cureit.exe and then click Start

•An information notice will appear, click OK.

•This starts a short scan that will scan the files currently running in memory.
•If you get a prompt to buy the full version just exit out of the window. The scanner will still work without buying the full version

•If or when something is found, click the Yes button when it asks you if you want to cure it.
•Once the short scan has finished, Click Settings > Change Settings

•Under the Scanning tab UNcheck Heuristic analysis and click OK

•Back at the main window, select the Complete scan button and then click the Green Arrow Start Scanning button on the right and the scan will start.

•Click Yes to all if it asks if you want to cure/move any file(s).

•When the scan is done.
•In the Dr.Web CureIt menu on top left, click File and choose Save report list.

•Save the DrWeb.csv report to your Desktop.

•Exit Dr.Web Cureit.
•Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
* After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
* Copy and paste that log in the next reply