When I log onto my profile, Only Command prompt opens with other - Microsoft Community

-

hello, installed malwarebytes last night , did quick run (no idea why, computer running fine). on reboot desktop show command prompt when iog on user profile. have manually type 'explorer.exe' open. said, searched google hours looking fix, found app called reimage repair, no luck; uninstalled.  did make new local user profile , on worked fine! "explorer.exe" had no issue running. don't have system restore enabled.   tried: sfc /scannow, dism stuff.


1st run:

malwarebytes
www.malwarebytes.com

-log details-
scan date: 11/19/17
scan time: 10:23 pm
log file: 7f88f2a8-cdaa-11e7-aa9a-60a44c627002.json
administrator: yes

-software information-
version: 3.3.1.2183
components version: 1.0.236
update package version: 1.0.3296
license: trial

-system information-
os: windows 10 (build 15063.726)
cpu: x64
file system: ntfs
user: desktop-9he6bil\velle

-scan summary-
scan type: custom scan
result: completed
objects scanned: 534334
threats detected: 22
threats quarantined: 22
time elapsed: 1 hr, 3 min, 21 sec

-scan options-
memory: enabled
startup: enabled
filesystem: enabled
archives: enabled
rootkits: enabled
heuristics: enabled
pup: detect
pum: detect

-scan details-
process: 0
(no malicious items detected)

module: 0
(no malicious items detected)

registry key: 13
pup.optional.reimage, hklm\software\classes\appid\rei_axcontrol.dll, quarantined, [1069], [327193],1.0.3296
pup.optional.reimage, hklm\software\classes\wow6432node\appid\rei_axcontrol.dll, quarantined, [1069], [327193],1.0.3296
pup.optional.reimage, hklm\software\classes\rei_axcontrol.reiengine.1, quarantined, [1069], [327197],1.0.3296
pup.optional.reimage, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\microsoft\windows\currentversion\ext\settings\{10ecce17-29b5-4880-a8f5-ead298611484}, quarantined, [1069], [327197],1.0.3296
pup.optional.reimage, hklm\software\classes\rei_axcontrol.reiengine, quarantined, [1069], [327197],1.0.3296
pup.optional.reimage, hklm\software\wow6432node\classes\appid\rei_axcontrol.dll, quarantined, [1069], [327193],1.0.3296
pup.optional.reimage, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\local appwizard-generated applications\reimage - windows problem relief., quarantined, [1069], [327203],1.0.3296
pup.optional.reimage, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\reimage, quarantined, [1069], [357494],1.0.3296
pup.optional.reimage, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\reimage\pc repair, quarantined, [1069], [327204],1.0.3296
pup.optional.reimage, hklm\software\reimage\reimage repair, quarantined, [1069], [336077],1.0.3296
pup.optional.reimage, hklm\software\classes\appid\{28ff42b8-a0da-4be5-9b81-e26dd59b350a}, quarantined, [1069], [332494],1.0.3296
pup.optional.reimage, hklm\software\wow6432node\classes\appid\{28ff42b8-a0da-4be5-9b81-e26dd59b350a}, quarantined, [1069], [332494],1.0.3296
pup.optional.reimage, hklm\software\classes\wow6432node\appid\{28ff42b8-a0da-4be5-9b81-e26dd59b350a}, quarantined, [1069], [332494],1.0.3296

registry value: 2
pup.optional.reimage, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\reimage\pc repair|quitmessage, quarantined, [1069], [327204],1.0.3296
trojan.agent, hku\s-1-5-21-3796713649-2659324383-317201060-1001\software\microsoft\windows\currentversion\run|explorer.exe, quarantined, [19], [209537],1.0.3296

registry data: 0
(no malicious items detected)

data stream: 0
(no malicious items detected)

folder: 0
(no malicious items detected)

file: 7
pup.optional.reimage, c:\users\velle\appdata\local\temp\reimage.log, quarantined, [1069], [334717],1.0.3296
pup.optional.reimage, c:\users\velle\appdata\local\temp\reimagepackage.exe, quarantined, [1069], [331559],1.0.3296
pup.optional.reimage, c:\users\velle\appdata\local\temp\~nsu.tmp\au_.exe, quarantined, [1069], [331559],1.0.3296
pup.optional.reimage, c:\users\velle\appdata\local\temp\~nsu.tmp\bu_.exe, quarantined, [1069], [388085],1.0.3296
pup.optional.reimage, c:\windows\temp\reimage.log, quarantined, [1069], [334717],1.0.3296
pup.optional.conduit, c:\users\velle\appdata\local\google\chrome\user data\profile 1\secure preferences, replaced, [578], [454832],1.0.3296
pup.optional.reimage, c:\windows\reimage.ini, quarantined, [1069], [412667],1.0.3296

physical sector: 0
(no malicious items detected)


(end)

----------------------------

2nd run:

malwarebytes

www.malwarebytes.com

-log details-
scan date: 11/20/17
scan time: 2:21 am
log file: dbf1026c-cdcb-11e7-9fd7-60a44c627002.json
administrator: yes

-software information-
version: 3.3.1.2183
components version: 1.0.236
update package version: 1.0.3298
license: trial

-system information-
os: windows 10 (build 15063.726)
cpu: x64
file system: ntfs
user: system

-scan summary-
scan type: threat scan
result: completed
objects scanned: 498373
threats detected: 1
threats quarantined: 0
(no malicious items detected)
time elapsed: 6 min, 29 sec

-scan options-
memory: enabled
startup: enabled
filesystem: enabled
archives: enabled
rootkits: disabled
heuristics: enabled
pup: detect
pum: detect

-scan details-
process: 0
(no malicious items detected)

module: 0
(no malicious items detected)

registry key: 0
(no malicious items detected)

registry value: 0
(no malicious items detected)

registry data: 0
(no malicious items detected)

data stream: 0
(no malicious items detected)

folder: 0
(no malicious items detected)

file: 1
pup.optional.conduit, c:\users\velle\appdata\local\google\chrome\user data\profile 1\secure preferences, no action user, [578], [454832],1.0.3298

physical sector: 0
(no malicious items detected)


(end)

update: hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon --- "explorer.exe"


Windows / Windows 10 / Performance & system failures



Comments

Post a Comment

Popular posts from this blog

Error 0x80180018 when trying to add a second work account on Windows - Microsoft Community

-
Image
hello, different users have 2 office365 business accounts 2 different tenants , experiencing technical issues when trying add second work account on windows 10. no matters order start adding accounts (tenanta , tenantb, , same applies vice versa), encounter error 0x80180018 when adding second work account. googling found on azure ad documentation following description: 0x80180018 "iderrormdmlicenseerror", // menroll_e_userlicense there error license. can try again or contact system administrator error code {0}. but can't match problem encountered because first work account added on win10. both licenses have business premium license assigned on 2 different office365 tenants. the information provided not clear about. says error has been encountered, try again, no matters how many times try same error no further information. i highly appreciate if can give further details how achieve adding 2 work
Read more

How to sync (or sign-in) to Windows 10 properly? - Microsoft Community

-
hello, so bought new laptop came windows 10 pre-installed. when unpacking, store clerk created dummy local account used when starting first time - make process faster syncing microsoft account, can sync later - said. anyway, done , welcomed desktop. synced microsoft account , went in. synced right away - down wallpapers , themes - save 1 thing; the account name. it still using dummy local account name, despite picture has changed account picture. clicked 'sign in microsoft account instead', , process failed in end. said "[my e-mail account] here already. user in device uses microsoft account, can't add here" i tried removing e-mail & app account under 'e-mail & app account' tab , when tried again, still didn't work. please, want name here. oh, , don't know topic should fall - there's no 'sync' specifically, pick 1 think closest. sorry in advance.
Read more

Cannot connect to RDS 2012R2 session through RDWeb Gateway using - Microsoft Community

-
obvious: when connecting 2012r2 rds session collection through rdweb gateway using windows 10 generic connection error thrown. steps reproduce windows 10: connect rdweb public gateway address on https outside of network internet explorer (also tried edge, chrome, firefox) authenticate domain\credential , password successfully select session collection connect to observe generic connection error caveats: external connections through rdweb gateway windows 7x , 8x microsoft rd client on android successful. internal connections through rdweb gateway windows 10 successful. specific events client "microsoft-windows-terminalservices-clientactivexcore" event logs: (identifying information changed) component name:caaclientadapter, :: 'm_sphelper->readcreds failed' in caaclientadapter::createtunnel @ 380 err=[0xffffffff], error code:0xffffffff component name:caahttpclienttunnel, :: 'workspace id obtained, not smell guid (br
Read more