[ruckers]

I was having problems with my iolo System Mechanic using too much memory and killing my CPU performance, so I contact them about it. They suggested I go into Safe Mode and delete the iolo folder in my Program Files folder and delete the program from my registry. Unfortunately, after I did this I got a message that said the "Remote Procedure Call service terminated unexpectedly" and the computer shut down. When I tried to start it up again, there is a file called "services.exe" that takes up 100% of my cpu performance and I cannot do anything. When I try to access the internet, I get three separate error messages:

CNMNSUT.exe - Application Error. The instruction at "0x10007d50" referenced memory at "0x10007d50". The memory could not be "read".

svchost.exe - Application Error. The instruction at "0x10007d50" referenced memory at "0x10007d50". The memory could not be "read".

sgtray.exe - Application Error. The instruction at "0x00ed7d50" referenced memory at "0x00ed7d50". The memory could not be "read".

From some research, I believe the first one relates to my Canon printer (not sure why I'm getting the error though) Not sure about the other two. I sent an email to iolo to ask how to fix this, since they caused it, but they have been less than helpful. I was also working with a member of the Atribune.org group on it (had previously been working with him on virus removal, which is what started this whole thing) and he sent me here when none of his suggestions worked. Here is what we tried already:

Ran System File Checker, then opened Recovery Console and ran "chkdsk /r "; no effect.

Tried your Windows Repair method at: http://www.geekstogo...ws-XP-t138.html
When it started back up I left it running on the installation screen and it said "The setup will be complete in approximately 39 minutes"...for over 4 hours. I restarted it to see if maybe there was a hiccup and then went to bed and woke up to a blue death screen. That's when Rorschach112 at Atribune sent me here.

Please Help!

[Advertisements]

It looks like some infection to me....

I suggest that you start a new topic in the Malware Removal and Spyware Removal area.

Before you start a new topic click on this link --> Malware and Spyware Cleaning Guide, Please read before starting a new topic. This will give you a few preparations to make, as well as instruction for posting your OTListIt2 log.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

[Broni]

It looks like some infection to me....

I suggest that you start a new topic in the Malware Removal and Spyware Removal area.

Before you start a new topic click on this link --> Malware and Spyware Cleaning Guide, Please read before starting a new topic. This will give you a few preparations to make, as well as instruction for posting your OTListIt2 log.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

[ruckers]

I will post over there, but the problem is that I can't run a single one of the programs they will want me to run. I tried several when I was working with Atribune; for instance I let OTL run for about 9 hours and it still has not completed.

[Broni]

Start new topic there and post your problems. They'll help you out.

[ruckers]

I was sent back here from the virus/malware page since I cannot get online. So I guess if we can fix the errors I'm getting first, then hopefully I can get rid of my virus.

Edited by ruckers, 15 February 2010 - 10:07 AM.

[rshaffer61]

CNMNSUT.exe is part of the canon scanner program it Allows the CANON scanner to see your computer on the network. This allows scanning from the control panel of the scanner to any computer running the utility, and saves you from having to run back and forth between the MP and your computer.
Is this system in a office and on a network?

[ruckers]

It's my home network.

[rshaffer61]

I would suggest uninstalling the Canon software first.

[Broni]

Not being able to get online is very likely to be caused by the infection.
Can you post a link to your topic in malware forum?

[ruckers]

I'm not sure that is the reason because I could get online, then deleted iolo System Mechanic, then I couldn't get online anymore.

Here is the link:
http://www.geekstogo...on-t268648.html

[Broni]

Your first mistake was using a tool like System Mechanic. Since it deals with registry, it often means troubles.

Turn off computer. Disconnect router, and modem from power source for 30 seconds.
Power them back on.
Restart computer.

If that doesn't work, bypass router, and connect computer straight to the modem.

If that doesn't work...
Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista, while holding CTRL, and SHIFT, press Enter).

In Command Prompt window, type in following commands, and hit Enter after each one:
ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew

Restart computer.

If that doesn't work...
Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista, while holding CTRL, and SHIFT, press Enter).

At Command Prompt, type in:
netsh int ip reset reset.log
Hit Enter.
Type in:
netsh winsock reset catalog
Hit Enter.

Restart computer.


If that doesn't work...
Download, install, and run WinSockFix: http://www.softpedia...inSockFix.shtml (doesn't work in Vista)
Restart computer, and check again.

If that doesn't work...
Download Dial-A-Fix (DAF) (doesn't work in Vista):
http://wiki.lunarsof...2C_and_articles

Have XP CD available in case DAF needs a file. Likely not!

Check all boxes on the screen (clear any restrictions if it shows any)
Then click GO!

When the entire page is finished click the HammerHead at bottom to go to the second DAF page.

Here, one at a time, do the below:

Reinstall BITS
Reinstall Windows Firewall
Repair Permissions
Reset networking

Watch for any File not found or other errors and make note as this may lead to the fix!

Restart computer.

[ruckers]

I forgot, we're getting ahead of ourselves. I can't start up the computer at all because of this step (from my OP):
Tried your Windows Repair method at: http://www.geekstogo...ws-XP-t138.html
When it started back up I left it running on the installation screen and it said "The setup will be complete in approximately 39 minutes"...for over 4 hours

I tried it again, after unplugging everything for a minute and got this message:
Fatal Error: An error has been encountered that prevents setup from continuing. There were problems with OLE DLL: C:\Windows\System32\initpki.dll

Also, the signature for Windows XP Pro upgrade is invalid. Error Code 426.

[Broni]

I'll ask malware guys to look at this, because this whole issue still looks to me like an infection.
Hold tight.

[ruckers]

Thanks, I appreciate the help!

[ruckers]

Any suggestions? Is it time to throw in the towel and just start over from scratch on this computer?