UPDATE~1.EXE has stopped working

[Arjento]

Hi all,

I've got this problem that started a few days ago.

Every couple of hours I would get this error box (see attachment).

Did a google search on the error message but to no avail.

The only clue I think is the logo "dp".

I hope someone can help.

Thanks.

 

[VistaKing]

Click here DDS

:ar: Click on Download Now button

:ar: When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

:ar: Double click the DDS icon on the Desktop then click the Run button to run the tool.

:ar: Place a check next to attact.txt and click Start . When done, DDS will open two logs

• DDS.txt
• Attach.txt

:ar: Save two logs onto your desktop and upload them with your reply

 

[Arjento]

Here you go.

 

[VistaKing]

Something caught my eye . Systeminfo inside AppData\Local folder

Lets see what malwarebytes fines

Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )

Update the definitions and do a full scan

:ar: On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
:ar: If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
:ar: The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
:ar: When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
:ar: Click OK to close the message box and continue with the removal process.
:ar: Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
:ar: Make sure that everything is checked, and click Remove Selected.
:ar: When removal is completed, a log report will open in Notepad.
:ar: The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
:ar: Copy and paste the contents of that report in your next reply and exit MBAM.

Have you been getting any BSODs ?

 

[Arjento]

I have been getting my PC restarting itself at least once a week for a couple of months now (mostly when browsing the web using Firefox).

I used a program called BlueScreenView which I can post the screenshots if you need in addition to the Malwarebytes scan I will do.

I need to go sleep for work tomorrow now.

But when I return I will post the results.

Thanks for the help and advice so far!

 

[VistaKing]

You're welcome .

 

[Layback Bear]

VistaKing if I may ask a question of you.
I noticed TOM TOM GPS service. Why would that be on a desktop?
Just seems strange to me.

 

[VistaKing]

I believe its software to update the Tom Tom handheld GPS

:ar: TomTom HOME - Services - TomTom

 

[Layback Bear]

Thank you. I think I understand. It is a program on a P/C to update things like phones.

 

[Arjento]

Malwarebytes Anti-Malware 1.75.0.1300
Malwarebytes : Free anti-malware download

Database version: v2013.07.12.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Nawaab :: NAWAAB-PC [administrator]

12/07/2013 20:26:44
mbam-log-2013-07-12 (20-26-44).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 838805
Time elapsed: 1 hour(s), 8 minute(s),

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 7
C:\Program Files (x86)\DAEMON Tools Pro\ind.dll (RiskWare.Tool.CK) -> No action taken.
C:\Users\Nawaab\Shortcuts\Assassin's Creed Brotherhood\AC2 Backup\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> No action taken.
D:\Program Files (x86)\Elemental - War of Magic\TDU3k.exe (Packer.ModifiedUPX) -> No action taken.
D:\Program Files (x86)\MDK2 HD\TDU1k.exe (Packer.ModifiedUPX) -> No action taken.
D:\Program Files (x86)\Microsoft Games\Fable III\paul.dll (PUP.RiskwareTool.CK) -> No action taken.
D:\Program Files (x86)\Thomas Was Alone\TDU.exe (Packer.ModifiedUPX) -> No action taken.
C:\Program Files (x86)\RobotSoft\Mouse and Keyboard Recorder\Patch.exe (PUP.Hacktool.Patcher) -> Quarantined and deleted successfully.

(end)

 

[Arjento]

And regarding my random restarts:

 

[VistaKing]

I recommend uninstalling DAEMON Tools Pro

RogueKiller for 32bit <==== Download Link

RogueKiller for 64bit <==== Download Link

:ar: Click on one of the links above that goes with your Windows 7 bit versions

:ar: Save to the Desktop.

:ar: Close all windows and browsers

:ar: Right click on

and choose

:ar: Press: SCAN

:ar: provide the RKreport.txt (Mode: Scan) in your reply.

 

[Arjento]

RogueKiller V8.6.2 _x64_ [Jul 2 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : hxxp://www.adlice.com/forum/
Website : hxxp://www.adlice.com/softwares/roguekiller/
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Nawaab [Admin rights]
Mode : Scan -- Date : 07/13/2013 01:16:34
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 6 ¤¤¤
[HJ POL] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ POL] HKLM\[...]\System : EnableLUA (0) -> FOUND
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 2 ¤¤¤
[V1][SUSP PATH] Dealply.job : C:\Users\Nawaab\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE - /Check [7] -> FOUND
[V2][SUSP PATH] Dealply : C:\Users\Nawaab\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE - /Check [7] -> FOUND

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS721010CLA332 ATA Device +++++
--- User ---
[MBR] 596b4bb0d48688714c1b80e1603fa276
[BSP] 9a64f5e2183b6d81fd3a1d5502e75f98 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 209899 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 430080000 | Size: 743868 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_S_07132013_011634.txt >>

 

[VistaKing]

Looking at the images I noticed one of the BSODs was caused by the Nvidia driver

Click here ==> NVIDIA Driver to download driver

 

[VistaKing]

Rerun RK and click the Delete button

 

[Arjento]

Rerun RK and click the Delete button

Ok I done this.

 

[VistaKing]

Update the Nvidia driver use the PC for a few days and see if you get that error again .

You could also run HitmanPro

Download

HitManPro on a clean PC

32-Bit Version OS :ar:
Download



64-Bit Version OS :ar:
Download



:ar: Save to the Desktop

:ar: Right click on HitmanPro.exe and choose

:ar: When HitmanPro opens up click on the Settings button . Uncheck Scan for Tracking Cookies

:ar: Click OK button

:ar: Next button

:ar: Click on No, I only want to perform a one-time scan to check this computer on the Setup page . Click Next once done .

:ar: Let it scan the PC once its done Click Next

:ar: Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer then click Next

 

[Arjento]

Ok thanks for your help!

I'll keep an eye on any future errors.

 

[VistaKing]

Click on the link below to remove DP

:ar: How To Remove Dealply Adware - Dealply Virus Removal Instructions | Malware Removal - Software & Tutorials

 

[dstapl]

Update~1.exe Not Working

This problem appeared for me after a Spybot scan a couple of months ago and seems to slow down or pause processing. After seeing a number of related complaints online, I'm puzzled why there aren't some solutions posted here or elsewhere. This forum starts to describe the problem (Arjento) and VistKing suggests a solution but there is nothing there: no results of Arjento's scan, just a scan report - no solutions or report of a fix. The last report on this forum was a year and a half ago. Doesn't anyone have this problem anymore?