ran many cleanups from Malware Tips, still have DllHost.exe trying to run but blocked by panda

[Fecundite]

Will run the suggested scans later and upload logs, DllHost.exe is continuously trying to start and is blocked. At the moment I do have a couple restore points, just from today, but it has been deleting them so I can't go back to a better time. Thanks for the help. I am trying these things before I do a Repair Install of Win 7.

 

[TwinHeadedEagle]

Hello,

Please follow this topic and attach required reports

http://malwaretips.com/threads/preparation-guide-before-requesting-malware-removal-help.20334/

 

[Fecundite]

Thank you for the guidance. Will comply and post later Have a good day.

 

[Fecundite]

Such a newbie, don't know what it means to bump topic, so I am doing this,

 

[Fecundite]

I posted scans on 2-17-15, but now I don't see that reply, so I will do so again along with a scan I just ran. thank you.

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Fecundite]

I followed your directions. The FRST scan ran a while then froze up. Then it would repeatedly try to run for a few seconds and stop. I let this go on for a long while, 5 hours. The action it stopped on was "cleaning temporary files....I tried shutting down the computer and restarting, same thing. I tried in safe mode, same thing. I will try to download the file again and run Any suggestions?
Thanks. Tim

 

[Fecundite]

Well I just found a log in the Downloads called Fixlog and I will attach. I didn't see anything on the desktop, and I also wasn't expecting one as the thing couldn't finish. Thanks again. Tim

 

[Fecundite]

Just checking. Tried to run FRST again today. Freezes up at "deleting temp files...C:/users/owners/appdata/roaming/macromedia/flash player/#shared objects TPTT77HL. Tried to delete folder Shared Objects got error 0x8007045D-request could not be performed because of an I/O device error. No new logs. Last one was one attached in above post. Anything new to try?

 

[TwinHeadedEagle]

Don't worry about FRST. How is your PC now?

 

[Fecundite]

Computer still same, startup very slow as each action gets held up then runs, the message from the panda goes crazy sometimes and just reels up from one app blocked to 900 apps blocked in just a few seconds, eventually almost everything seems to still work but in looking at the files where FRST gets locked up I am seeing some unusual things. There are duplications of file folders that seem to be locked and I am denied access. Also different scans have run with nothing to report, ie MalwareBytes, etc. FRST has been running now for about 6 hours, left it on...deleting temp files ..C:-users-owners-appdata-roaming-macromedia-flash player-shared objects...still there but has moved on a little. Meanwhile panda blocks dllhost.exe about 100 times per minute. Am I going to have to do a repair installation of Win 7, or is there more? Thanks

 

[TwinHeadedEagle]

Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

 

[Fecundite]

trying again to attach files

 

[TwinHeadedEagle]

Please uninstall IObit Malware Fighter 3. This software isn't "serious" when it comes to fight malware, it could just create some bugs.


Your PC seems clean, malware isn't causing these problems. This is probably caused by malfunctioned hard drive. Let's try one more thing:


Press the

+ R on your keyboard at the same time. Type cmd and click OK.
Type chkdsk C: /r and press Enter
Restart your PC and let the process finish interrupted.

 

[Fecundite]

Thanks for all your help. Chkdsc is taking a while. Already found segments that were unreadable and still going. But what is with the dllhost.exe? Should I tell Panda to allow it? Should I use a paid subscription for anti-virus vs a free one? Do you recommend one? Also I thought I should probably de-frag after the checkdisc. If still have problems I guess I will re-install windows 7. I have a external hard drive. And finally should I remove all the scan software I installed or just leave it there? Except for IOBit they are all ones we used during this troubleshooting process, along with Panda. thanks again and will get back one more time. When payday comes there will be a tip, (small one)
but thanks again, Tim

 

[TwinHeadedEagle]

I think your hard drive is malfunctioning, there is nothing we can do anymore. You'll need to visit repair shop.

 

[Fecundite]

Just one more question. After running chkdsk and de frag today computer seems to be running ok. But, what is this thing that keeps popping up "dllhost.exe tried to run and was blocked"? Could it be a normal app that Panda is just blocking ? Since checking on it goes to Panda's website I don't see it being their evil doing?
Thanks

 

[TwinHeadedEagle]

I am not sure why is it happening, but PC seems clean. Maybe you should contact their support about this.