Logging in via RDP or VNC was also a no go, as I was getting disconnected after about 2 minutes, barely enough time to get pass the initial desktop and application loading and analyze what was happening. I resumed browsing the event logs … only to get disconnected again. I thought maybe the workstation became disconnected from the network, so I waited and tried again a few minutes later. After about a minute, the MMC console became hung and I could no longer browse events.

I started by connecting remotely to the Windows Event Viewer for the problem workstation to see if anything obvious stood out. This sparked my curiosity, of course, so I asked the techs working on this to leave it alone until I had a chance to look after hours. This was the first time I heard of Outlook logging someone off their system when it was opened. This was initially described as a log off each time the user opened Outlook. This sounds like classic scareware and when I take a look I see this: Then she mentioned another popup that she says is scanning the system and finding virus. I told her to click allow and let me sleep. All explorer.exe problems fix in windows pcUnspecified error, elements not found, class not registered, server execution failed, unknown hard error, this app. The key to getting access to the registry and the task manager directly was to use AutoRuns.Īs it happened, a couple days ago the wife starts complaining that she keeps getting persistent firewall popups. Further, it also counters anti-malware utilities and virus security suites by creating reg keys and using the same Debugger string to point to svchost.exe, which is not able to run other executables. As pointed out, its counters the user attempt to stop it by taking advantage of a built in process that Windows uses for debugging applications by pointing the Task Manager and Regedit to its own fake anti-virus process. Cleaning it up manually, though, would not be too difficult. The malware-scareware program had already been removed from the system, but the damaged it done had been left behind.

I was originally introduced to this by co-worker who wanted me to look at someone’s netbook and wrote about it here.

Crashing Config Manager Client & Remote Control Viewer after Windto 1709 UpdateĮnter your email address to subscribe to this blog and receive notifications of new posts by email.

The Case of the Dysfunctional Adobe PDF Plugin.The Case of the Missing Image Preview Tiles Either you are using a 64-bit operating system, or you are using Windows 10 OS.

Iexplore exe missing windows 7