Hey guys.. I had some good help last time but now here is whats happenieng

As soon as I turn the computer on, the Windows explorer keeps closing itself, tries to re-open it and then close again. Now I am working with the task manager to connect to internet and all.

I have tried running latest virus san with trend micro standalone, ewido, spybot and Microsoft Antispyware. but it did clean some malware but not this problem.

I have a hidden folder by name of cmdcons in the root, with some system files and "smss" .. Is this supposed to be there? Is it the cause?

Help me out.. I got no explorer!

bye.

The "cmdcons" folder will exist on your system if the option to run the Windows Recovery Console from the hard drive was installed by the person/company that built your computer.

1. Open the Event Viewer utility in your Administrative Tools control panel.

In the Event Viewer, look through the System and Application logs for entries flagged as "Warning" or "Error"; double-clicking on any of those entries will open a "details" window with more information about the error/warning. If you find any entries that seem to relate to the IE hangs/crashes that you're having, post the full and exact contents given in the detail windows.


2. You can try running the free IEFix utility; it won't hurt anything


3. Regardless of the tools that you've already run, infections might still be responsible for the problem. Download/run the lastest version of HijackThis and post the log it generates:

Download the (free) HijackThis utility:

http://www.stevewolfonline.com/Downl...HijackThis.exe

Once downloaded, follow these instructions to install and run the program:

Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

I am not technical at all. Can anyone help me? Whenever I open windows explorer it stays open for about 2 minutes then shuts down. I have run a McAfee scan and not detecting any viruses. What could be the cause?

That symptom could have a non-malicious cause, try this first:

* Open the Event Viewer utility in your Administrative Tools control panel and look through your System and Application logs for entries flagged with "Error" or "Warning", especially
those which mention the "Explorer.exe" program, or whose time-stamps coincide with the occurrences of the problem.

* Double-clicking on such an entry will open a properties window with more detailed information on the error; post the details from a representative sample of some of the different error messages (please don't post duplicates of a given entry, or flood us with the entire contents of the logs).

* To post the details:
In the Properties window of a given entry, click on the button with the graphic of two pieces of paper on it; the button is at the right of the window just below the up arrow/down arrow
buttons. You won't see anything happen when you click the button, but it will copy all of the details to the Windows clipboard. You can then paste the details into your next post here.

I have the same problem, I used Hijackthis and found these and I use my ZoneLab firewall to block them from executing,

My Avast Anti-virus (BootScan),Windows defender,Ad-aware didnt detect them



O4 - HKLM\..\Run: [oemwytf] C:\Program Files\Common Files\System\uiiabxb.exe
O4 - HKLM\..\Run: [ygdjcli] C:\Program Files\Common Files\Microsoft Shared\hudkbnd.exe

Yes, but you're still infected. Those two randomly-named .exe files that HJT found are just a couple of components of a larger malware infection, other pieces of which may still be active.

You should probably start a new thread of your own, post a full new HijackThis log in that thread, and we'll take the removal/disinfection process from there.