Jump to content

infected with defender.exe last night


Recommended Posts

Hello

Last night while searching on yahoo search engine, all of a sudden I could not get any programs (exe) to run. I rebooted. I could do little to nothing. Task manager would not run. Nothing else would run. I reboot in to safe mode. I notice an icon on my desctop I am not familiar with. It was a virus scanning program... sorry don't remember the name. I did a properties on it and found defender.exe I find the file and delete it. Then I could run computer and I googled defender.exe and found that I should delete some registry entries and I did. I did not find anything else it said to look for. Then I ran Malewarebytes and it found 1 trojan horse file and quarantined it.

Everything seems back to normal until today except I also have an error message on startup that says error loading \3\LXCFtime.dll

OK... I go to print and it says I need to install a printer!! what??!!! I look and NO INSTALLED PRINTERS! come on!!! So I figure out that now my print spooler is not running and when I start it in services it shuts back off and I can not install a printer.

Today I update Malewarebytes and it found 14 more infections and quarantined them and still get the first error message (error loading \3\LXCFtime.dll Module not found) plus this one: error loading C:\windows\msespn.dll

Can you help me?

I have been running GMER for hours to get you that log as you requested... but I really need to print tomorrow!

Link to post
Share on other sites

OK... (this is an XP machine)

I been searching and the first .dll that I get an error message about is for a Lexmar printer. My mom had one and it was installed on this laptop. I guess with all the printers gone there is a relationship here? Is there something that can be fixed so all my printers are back the way they were? I had a bunch installed! ahhh.......

Link to post
Share on other sites

I have been searching on the internet about the print spooler and have been in event viewer and have found out that upon query, my computer says the printer service is not installed on the computer. I have found in the registry and in the windows directory, I can see all the variations of printers that were installed. Some data file is messed up? ahhhh......!

Link to post
Share on other sites

I uninstalled the Lexmark printer and I have no more error messages at startup. That is good. I still have no print spooler. I have tried everything I can find on the internet connected with the print spooler. Does defender.exe mess that up? I did run combofix once. Could that have messed this up?

Link to post
Share on other sites

OK... All seems to be fixed now.

I searched the internet about the printer spool issue and downloaded a file from microsoft.com called Clean.spl

which cleans up the print spooler but it did not help. Yesterday besides running mbam, I thought I had run combofix but I had not. Last ditch effort this morning after hpbdfawep.exe was all of a sudden using 50% of my cpu, I ran combofix again... or so I thought. As it progressed and installed the recovery console I realized that it did not run yesterday. I let it do its thing and now I can install a printer so all seems to be back to normal. Thanks for the help that would have been offered.

Link to post
Share on other sites

  • 3 weeks later...
  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.