Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: problem about program in startup

11 Jun 2010   #11
sabajordan

windows 7
 
 
for my country everything doesn't do

Quote   Quote: Originally Posted by WindowsStar View Post
I have never seen these: 0A6A7.exe.exe , 0A6E6.exe.exe , 0A008.exe.exe , 0A197.exe.exe before. The naming looks like a BAD virus. I would build a boot CD off another known clean machine and boot off the CD and do a complete virus scan before doing anything else.

Downloadable Computer Repair CDs | Technibble
http://www.microsoft.com/security_essentials/
Malwarebytes
in website microsoft this warning appear "You appear to be in a country or region where Microsoft Security Essentials is not available. Thank you for your interest in Microsoft Security Essentials." thx for your rep


My System SpecsSystem Spec
.
11 Jun 2010   #12
Thorsen

Win7 Home Premium 64x
 
 

Did you try Malwarebytes? The free version can scan your comp and probably will correct it. I would also so as soon as you install AV, update it so it has the latest virus definitions. This is ensure you find all the stuff on your comp.

Also, MS has support for Iraq: Microsoft Iraq Home Page
MSE is listed in the "Using your computer" section
There might be another reason why you are getting this message. If you are behind a proxy or firewall and MS is not able to see your computer or ip address, then this might be messing it up. Try disabling proxy or allowing access through firewall.

another thing to check would be in Control Panel > Regional Settings Make sure your time zone is set to your region correctly.
My System SpecsSystem Spec
11 Jun 2010   #13
sabajordan

windows 7
 
 

Quote   Quote: Originally Posted by Corrine View Post
Hi, sabajordan.

Indeed, those random file names are indicative of an infection. With Windows 7, you may want to first try System Restore to a point prior to when those files started appearing. Windows 7 has a much more robust System Restore than Windows XP and Windows Vista. If that doesn't work, I suggest an on-line scan. Since you have already scanned with NOD32, try F-Secure :

Go here and run an on-line scan with the F-Secure scanner .
  • Use IE (Internet Explorer), accept the license terms, and allow the Active-X controls to load.
  • Click Full System Scan and allow the components to download and the scan to complete.
  • If malware is found during the scan, check Submit samples to F-Secure and Automatic cleaning.
I suggest following that with an MBAM scan:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, be sure Quick scan is selected, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, EXCEPT items in System Restore as shown in this sample:
  • Click Remove Selected.

Let us know how you make out.
this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
My System SpecsSystem Spec
.

11 Jun 2010   #14
sabajordan

windows 7
 
 

Quote   Quote: Originally Posted by Thorsen View Post
Did you try Malwarebytes? The free version can scan your comp and probably will correct it. I would also so as soon as you install AV, update it so it has the latest virus definitions. This is ensure you find all the stuff on your comp.

Also, MS has support for Iraq: Microsoft Iraq Home Page
MSE is listed in the "Using your computer" section
There might be another reason why you are getting this message. If you are behind a proxy or firewall and MS is not able to see your computer or ip address, then this might be messing it up. Try disabling proxy or allowing access through firewall.

another thing to check would be in Control Panel > Regional Settings Make sure your time zone is set to your region correctly.
thx for your piteous but i 'm living in IRAN and no iraq many years ago iraq attached to iran and now it's seperate region anyway i download process monitor and active it but i can't save results in txt file and the software saved to xml & PML & csv so i can't send any information but malware found result and i tell about it in other post if you help me i 'm very gartefull
My System SpecsSystem Spec
11 Jun 2010   #15
Corrine

Windows 7 & Windows Vista Ultimate
 
 

Quote   Quote: Originally Posted by sabajordan View Post
this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
Hi, sabajordan.

Yes, that is a trojan agent.

When you say you can't update the software to the most recent signature, do you mean MBAM (Malwarebytes)? If that is what you mean, please do the following to get the latest signature:

Download the latest MBAM update from here http://www.gt500.org/malwarebytes/database.jsp and manually install it. After updating, run a new scan. When the results appear, be sure that everything is checked and then click Remove Selected.

When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found at C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.

Please post the contents of that file in your next reply.
My System SpecsSystem Spec
12 Jun 2010   #16
sabajordan

windows 7
 
 

Quote   Quote: Originally Posted by Corrine View Post
Quote   Quote: Originally Posted by sabajordan View Post
this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
Hi, sabajordan.

Yes, that is a trojan agent.

When you say you can't update the software to the most recent signature, do you mean MBAM (Malwarebytes)? If that is what you mean, please do the following to get the latest signature:

Download the latest MBAM update from here http://www.gt500.org/malwarebytes/database.jsp and manually install it. After updating, run a new scan. When the results appear, be sure that everything is checked and then click Remove Selected.

When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found at C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.

Please post the contents of that file in your next reply.
thx for your help you want contents of this file & i show these contents :
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4189
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
06/12/2010 03:03:50 ?.?
mbam-log-2010-06-12 (15-03-50).txt
Scan type: Quick scan
Objects scanned: 125671
Time elapsed: 12 minute(s), 53 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll (Trojan.Agent) -> Delete on reboot.
i hope those files in my startup created by this trojan & i hope with delete this trojan my problem disapper
My System SpecsSystem Spec
12 Jun 2010   #17
Corrine

Windows 7 & Windows Vista Ultimate
 
 

Hi, sabajordan.

After restarting your computer, I suggest you clear temp files. This simple tool does a nice job. With Windows 7, right-click and run as Administrator.

Please download ATF Cleaner by Atribune from ATF-Cleaner.exe - www.atribune.org . Save it to your Desktop.

Run ATF Cleaner
  • Right-click ATF-Cleaner.exe and select Run as Administrator.
  • Click Select All found at the bottom of the list.
  • Click the Empty Selected button.
  • Click Exit on the Main menu to close the program.
  • Shutdown/restart the computer.


Following that, I suggest you check that ESET NOD32 is updated and run a full system scan.

Let us know how you make out.
My System SpecsSystem Spec
16 Jun 2010   #18
sabajordan

windows 7
 
 
thx

Quote   Quote: Originally Posted by Corrine View Post
Hi, sabajordan.

After restarting your computer, I suggest you clear temp files. This simple tool does a nice job. With Windows 7, right-click and run as Administrator.

Please download ATF Cleaner by Atribune from ATF-Cleaner.exe - www.atribune.org . Save it to your Desktop.


Run ATF Cleaner
  • Right-click ATF-Cleaner.exe and select Run as Administrator.
  • Click Select All found at the bottom of the list.
  • Click the Empty Selected button.
  • Click Exit on the Main menu to close the program.
  • Shutdown/restart the computer.

Following that, I suggest you check that ESET NOD32 is updated and run a full system scan.

Let us know how you make out.
hi
i did your suggest and thankyou if you have time plz other post i wrote i 'm studing class MCSA and my teacher wanted that install VMware but i can't install it if you can help me i 'm gratful from you problem to install vmware
My System SpecsSystem Spec
16 Jun 2010   #19
Thorsen

Win7 Home Premium 64x
 
 

Did Corrine's instructions solve problem? clean up your computer completely?
My System SpecsSystem Spec
17 Jun 2010   #20
sabajordan

windows 7
 
 

Quote   Quote: Originally Posted by Thorsen View Post
Did Corrine's instructions solve problem? clean up your computer completely?
i don't know exactly .everything is ok now & i think i 'm free from preproblem
My System SpecsSystem Spec
Reply

 problem about program in startup




Thread Tools




Similar help and support threads
Thread Forum
Program Execution on Windows 7 Startup [Problem]
Hi, I drop a link inside the Program Execution on Windows Startup Folder but that program can't start on startup. Program is this HWiNFO64 Download Do you have an idea? Thanks!
System Security
startup problem - startup loop/corrupt registry
I am trying to fix my sisters laptop, which is a hp pavilion dv6 2100nr. She told me she dropped it while it was turned on and it wont start up anymore, it also has a new issue causing the system to only power on or stay on when the laptop is charging. I started by running windows start up which...
BSOD Help and Support
startup program problem
hi. i have a problem with my startup programs. i've just installed the same version of windows that i had till now. the problem is that it won't run one of my shotcuts in the startup folder. it's the connection to the internet. it used to work, i just drag and dropped it in the startup folder in...
General Discussion
Program will not run at startup
I'm running Windows 7 Pro 64-bit. I installed an RSS download manager called Juice which needed to be installed in WinXP compatibility mode. The program functions well except for the fact that every time I start it up I get a nag box saying "do you want to allow the following program from an...
Software
Program on startup
I have a seemingly simple problem, but the solution evades me. I would like a particular program to run when the computer starts. The program is TeaTimer.exe, a system protector that I've been using for years. It seems simple to just put a shortcut to the program in the startup folder, like...
Customization
Program startup
Hi, i have 3 files that want me to give the administrator password for each time on a standard user account, 1 is listed in startup but the other 2 are not, i want them to run so that each user doesnt have to ask for the password to be entered, i have told it to run as administrator but that...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:56.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App