Jump to content

AdwCleaner ''unhandled unknown exception error"

sbwu

By sbwu
in Resolved Malware Removal Logs

 Share

Recommended Posts

  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @sbwu

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites
sbwu

sbwu

Posted
  • Author
Posted
2 hours ago, AdvancedSetup said:

Hello @sbwu

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

STEP 1: done.

STEP 2: fail due to AdwCleaner ''unhandled unknown exception error"

STEP 3: done.

Attached please find the results.

 

 

Addition.txt

FRST.txt

Shortcut.txt

AdwCleaner[S41].txt

Malwarebytes 3 Export Summary.txt

Link to post
Share on other sites
  • 3 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Correct, this is a known issue with AdwCleaner. Will be fixed in another update soon.

 

The logs show that our program is crashing. It's not immediately obvious as to why, but it could be that your Kaspersky antivirus might possibly be blocking it.
Please review the following post and setup exclusions and see if that corrects the issue for you.

 

I also noticed that your DropBox application is now almost 2 years old. If you're not using DropBox you might consider uninstalling it. If you do use it then I'd suggest you update the program.

The same with Google Update. It too is from 2016 which would seem to indicate Chrome is out of date.

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop&hl=en-GB

Aside from that I'm not seeing any obvious infection on the computer. A later update from AdwCleaner should correct the error you're getting.

Ron

 

 

Link to post
Share on other sites
sbwu

sbwu

Posted
  • Author
Posted
5 hours ago, AdvancedSetup said:

Correct, this is a known issue with AdwCleaner. Will be fixed in another update soon.

 

The logs show that our program is crashing. It's not immediately obvious as to why, but it could be that your Kaspersky antivirus might possibly be blocking it.
Please review the following post and setup exclusions and see if that corrects the issue for you.

 

I also noticed that your DropBox application is now almost 2 years old. If you're not using DropBox you might consider uninstalling it. If you do use it then I'd suggest you update the program.

The same with Google Update. It too is from 2016 which would seem to indicate Chrome is out of date.

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop&hl=en-GB

Aside from that I'm not seeing any obvious infection on the computer. A later update from AdwCleaner should correct the error you're getting.

Ron

 

 

Thanks, Ron,

 

I configured Malwarebytes-related exclusions within Kaspersky product.  Run adwcleaner again, "PUP.Optional.Legacy" was found.  Tried to kill it, but still fail ('unhandled unknown exception error").

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

No, not trying to fix the issue with AdwCleaner.

Trying to make sure that Malwarebytes service is still not crashing. Please restart the computer. Then wait at least 2 hours and restart it again.

Then tomorrow morning restart the computer one more time. Then run FRST again, and make sure you place a check mark in the Addition.txt check box and post back both new logs tomorrow and I'll check them out again.

The error with AdwCleaner will be fixed by them in the near future.

Thanks

Ron

 

Link to post
Share on other sites
sbwu

sbwu

Posted
  • Author
Posted
On 2018/1/16 at 8:49 AM, AdvancedSetup said:

No, not trying to fix the issue with AdwCleaner.

Trying to make sure that Malwarebytes service is still not crashing. Please restart the computer. Then wait at least 2 hours and restart it again.

Then tomorrow morning restart the computer one more time. Then run FRST again, and make sure you place a check mark in the Addition.txt check box and post back both new logs tomorrow and I'll check them out again.

The error with AdwCleaner will be fixed by them in the near future.

Thanks

Ron

 

Thanks.

attached please find the scan results.

 

FRST.txt

Addition.txt

Shortcut.txt

mb-check-results.zip

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Thanks @Porthos

 

@sbwu 

May or may not be fixed fully. I would like to see you reboot the computer again right now. Then reboot the computer tomorrow and send me back all new FRST and ADDITION logs tomorrow, not tonight, to ensure that the conflict and crash are now gone please.

I'll go ahead and close your other topic now too.

 

Thank you

Ron

 

Link to post
Share on other sites
sbwu

sbwu

Posted
  • Author
Posted
On 2018/1/18 at 9:35 AM, AdvancedSetup said:

Thanks @Porthos

 

@sbwu 

May or may not be fixed fully. I would like to see you reboot the computer again right now. Then reboot the computer tomorrow and send me back all new FRST and ADDITION logs tomorrow, not tonight, to ensure that the conflict and crash are now gone please.

I'll go ahead and close your other topic now too.

 

Thank you

Ron

 

It seems no big difference.

Attached please find the results.

 

1.jpg

2.jpg

Shortcut.txt

mb-check-results.zip

AdwCleaner[S46].txt

FRST.txt

Addition.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Just mean the FRST scanner. The AdwCleaner error won't be fixed until version 7.1

The Event Log shows these errors happened last night.

 

Application errors:
==================
Error: (01/20/2018 07:59:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: 失敗的應用程式名稱: EXCEL.EXE，版本: 15.0.4997.1000，時間戳記: 0x5a2f7f99
失敗的模組名稱: shcore.dll，版本: 10.0.16299.15，時間戳記: 0x30134c68
例外狀況代碼: 0xc0000005
錯誤位移: 0x00038091
失敗的處理程序識別碼: 0x1db4
失敗的應用程式開始時間: 0x01d391e623feedfa
失敗的應用程式路徑: C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE
失敗的模組路徑: C:\WINDOWS\System32\shcore.dll
報告識別碼: 6cc40470-6001-4909-878c-20e2e3eb662b
失敗的套件完整名稱:
失敗的套件相關應用程式識別碼:

Error: (01/20/2018 07:31:05 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SettingSyncHost (10388,R,0) {86C2D077-A3A0-46F3-857E-77C386FC5A80}: 資料庫修復/還原失敗，發生意外錯誤 -543。

Error: (01/20/2018 07:31:02 PM) (Source: ESENT) (EventID: 453) (User: )
Description: SettingSyncHost (10388,R,0) {86C2D077-A3A0-46F3-857E-77C386FC5A80}: 資料庫 C:\Users\USER\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb 需要記錄檔 241-248 (C:\Users\USER\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb000F1.log - C:\Users\USER\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb.log) 才能成功修復。修復只能找出最多 246 (C:\Users\USER\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb000F6.log) 個記錄檔。

Error: (01/20/2018 11:38:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: 失敗的應用程式名稱: googledrivesync.exe，版本: 3.38.7642.3857，時間戳記: 0x00000000
失敗的模組名稱: python27.dll，版本: 2.7.13150.1013，時間戳記: 0x59fc94e5
例外狀況代碼: 0xc0000005
錯誤位移: 0x000bee53
失敗的處理程序識別碼: 0x700
失敗的應用程式開始時間: 0x01d3917f1bac8d02
失敗的應用程式路徑: C:\Program Files (x86)\Google\Drive\googledrivesync.exe
失敗的模組路徑: C:\Users\USER\AppData\Local\Temp\_MEI165682\python27.dll
報告識別碼: 5d7f5353-cb2f-4ed6-8221-5cd8a7815a36
失敗的套件完整名稱:
失敗的套件相關應用程式識別碼:

 

 

These errors appear to have happened today.

System errors:
=============
Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: NVIDIA LocalSystem Container 服務意外終止，服務曾完成這項動作 1 次。以下的修正操作將在 5000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Message Queuing 服務意外地終止。已經發生 2 次。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Kaspersky Secure Connection 服務 2.0.0 服務意外終止，服務曾完成這項動作 2 次。以下的修正操作將在 10000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Spybot-S&D 2 Updating Service 服務意外終止，服務曾完成這項動作 2 次。以下的修正操作將在 60000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Spybot-S&D 2 Security Center Service 服務意外終止，服務曾完成這項動作 2 次。以下的修正操作將在 60000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: NVIDIA Display Container LS 服務意外終止，服務曾完成這項動作 1 次。以下的修正操作將在 5000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:25:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: NVIDIA Telemetry Container 服務意外終止，服務曾完成這項動作 1 次。以下的修正操作將在 5000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:21:53 AM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: 應用程式特定 權限設定無法將含有 CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 與 APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 之 COM 伺服器應用程式的 本機 啟用 權限授與來自位址 LocalHost (使用 LRPC) (在應用程式容器 無法使用 SID (無法使用) 中執行) 的使用者 USER-PC\USER SID (S-1-5-21-18854465-4013691432-1747003470-1000)。您可以使用元件服務系統管理工具修改此安全性權限。

Error: (01/21/2018 12:19:57 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: NVIDIA LocalSystem Container 服務意外終止，服務曾完成這項動作 1 次。以下的修正操作將在 1000 毫秒內執行: 重新啟動服務。

Error: (01/21/2018 12:19:57 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Kaspersky Secure Connection 服務 2.0.0 服務意外終止，服務曾完成這項動作 1 次。以下的修正操作將在 10000 毫秒內執行: 重新啟動服務。

 

They do not appear to be malware related, but something you should look into trying to fix if you can.

As for our Malwarebytes service it looks to be working properly now and is not crashing.

Unless there is something else, we should be done here for now.

Thank you

Ron

 

 

Link to post
Share on other sites
  • 1 month later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.