PC gurus

[tie_one_on]

I've been helped before by members with vast knowledge about PC's, so I'm looking for help again.
I have 3 users on our home computer. When one user logs on we get an error box titled "c:windows\system32\pmkhg.exe" - Windows could not find this file. When you close the box another comes up and shows "can not load c:\windows\system32\pmkhd.exe".
What does this mean? How do I fix it.
Thanks in advance.

 

[dolluper]

Re: PC gurus

Pmkhe is malware infection did you type it wrong hit the d on the end,if so run some antispyware program to remove it

 

[ThumbPkr]

Re: PC gurus

Google pmkhg.exe and you will get a lot of hits telling you what to do to cure it.It appears to be malware.
That Google made a lot of us smart)Ron G

 

[ajjacobs]

Re: PC gurus

from the looks of it whatever spyware/virus app you are running already removed the file (hence the file not fond error). It is still trying to load at start up but can not because it was deleted. You should just need to run "msconfig" and uncheck that line from the startup tab.

AJ

 

[Gary H NC]

Re: PC gurus

It may not show up in MSConfig.

 

[i386]

Re: PC gurus

It may not show up in MSConfig.

True ^^^

Google Hijack This! and download it. It's a tool, that among other things, will show you what and how everything on your computer starts up automatically.

Just speculating here, but based on your error something's already gotten rid of the offending program but the instructions to start it remain. If it only occurs on a certain user its more than likely starting up in a certain place.

I still recommend Hijack This, but you might want to login as the user that gets the error and then check the registry...

Start -> Run -> type regedit, click ok.

Drill down to HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run

Anything you see here will be started automatically for that user, just like items in the startup folder.

If you see "c:windows\system32\pmkhg.exe", then delete it.

There's also HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run

Items listed here will execute at startup no matter who logs in.

In fact, you could click on My Computer, (in the registry editor) go to edit -> find and search for pmkhg.exe and delete every instance if it you come across. A tip to speed up the process is to hit F3 after you find and delete one. F3 will make automatically repeat the search.

If you like, copy and paste your HijackThis log into this thread and let us have a look.

Good Luck!

 

[cbac]

Re: PC gurus

I agree with the above but run hijackthis in safe mode.

 

[v1_0]

Re: PC gurus

Clean your PC - ccleaner ("www.download.com"). This is more to make the following steps faster.

Run a full virus scan. If you don't have one, get something like AVG Anti Virus (free edition) ("www.download.com"). Get the latest updates before doing the scan.

Run Ad-Aware. This is anti-malware, also free. You can download this from download.com also. Update it before doing a full system scan.

Run Spybot-SD. This is another anti-malware program, also free. Get it at "www.safer-networking.org", as always update it before scanning.

Go to "www.sysinternals.com". This will redirect you to microsoft web site - go to the security utilities section. In there, download Rootkit Revealer. Run this to see if you have any rootkits.

Now, go to the "www.spywarewarrior.com" site. Get a copy of the previously mentioned hijack-this. Run it, and post your log file to the spywarewarrior forums - someone will read it and walk you through cleaning up your PC. (PS: if rootkit revealer found something, mention that.. as well as any other symptoms you may still be having, or whatever the adware/spybot couldn't fix).

Adware is like cockroaches. If you see one, there's probably a dozen that you don't see hiding.

Oh... after all that is done, take your family out to eat. I think that the "squad" would charge you like 160.00 for what you just did...

-V

 

[tie_one_on]

Re: PC gurus UPDATE

Re: PC gurus UPDATE

Now I have real problems.
Did the stuff i386 suggested. Then ran Adaware. Now my system won't reboot. I get the Dell welcome screen then a quick flash of a screen that looks like one line (too fast to read) then a blank screen.

I cannot press the F8 key to get to the safe mode, but can use the F2 and F12 to get to the 2 sections these keys get you to. Sorry I don't recall the proper names of these sections.
Now what?

 

[dolluper]

Re: PC gurus UPDATE

Re: PC gurus UPDATE

What OS are you running??? Did you fool with the registry without backing it up.???..if adaware is the only problem remove it Did you change your Bios that's where f2 and f12 work that's how you enter the bios a backup there can fix mistakes but to late for that you have to fix whats not right {not that hard and you will learn something}

 

[i386]

Re: PC gurus

Yikes! Looks like either you or AdAware deleted something required for booting. None of them items I mentioned deleting would cause this problem. I think others here would concur.

There are ways to recover a backup of your registry but it can be complicated for a novice user (I still have to read docs to do it myself). If your Dell is one of the newer ones it has a utility partition from which you can reinstall the OS without a CD. IIRC there is an option to do this while leaving your data in tact. There should also be an option to restore it to the state it was in when you took it out of the box. IF you have good backups of your files, this is really a good option for you as you'll be starting back with a clean system.

Good luck and keep us informed.

 

[v1_0]

Re: PC gurus

As I recall, if you boot off your windows CD it will come up with a repair option.

You may have to go into BIOS and tell the PC to boot off the CD first rather than the hard drive.

-V

 

[orion25]

Re: PC gurus

Since it is a dell it should have came with a Recovery CD. Put the CD in and re boot the computer. **Warning** This may delete all of the stuff you have saved on the computer since you got it.

You should be greeted with the dell recovery program. just hit OK on all the defaults until it is finished. Make sure your internet connection is disconnected during this process. When you can boot to windows re connect your internet cable (assuming you have broadband). If you are using antivirus and firewall software that you can access install it. After that go to the windows update site in Internet Explorer. Install ALL updates.

If you do not have AV/Firewall software download the free edition of Zone Alarm Firewall and either the free edition of AVG antivirus or Avast antivirus.

Reinstall all the programs you wiped out with the windows reinstall.

If you have information on the computer that you need and must recover then STOP. Do not try to reboot it again!! PM me and I will try to help.

 

[SgtMaj]

Re: PC gurus

IF you do the above, re-install windows over the existing installation... when it finishes it will look like all your data is gone, until you browse the folders the data was in on the HDD.

I concur with i386, and v1_0... I run adaware too, and have never had a problem with it.

 

[i386]

Re: PC gurus

Newer Dells don't come with a recovery unless you purchase it as an option. The recovery stuff is all located on a hidden partition on the hard drive. To boot the restore partition you have to hit CTRL+F11. Now, I know that HP gives you the option of reinstalling the OS and leaving your data in tact. I am not sure that Dell gives you this option. You willl need to read the prompts carefully to decide if you want to proceed.


The complicated procedure I mentioned eariler is here:

Microsoft's Method:

http://support.microsoft.com/kb/307545


Pretty much same method, but more info:

http://www.aade.com/XPhint/XPrecovery.htm

I have done this a few times in the past with good results.

 

[tie_one_on]

Re: PC gurus

Been unable to log on for a couple days. Now using my old Gateway. I spoke with Dell, they sent me a restoration CD, but it was junk. Just my luck, I always said if it were raining soup, I'd have a fork.
Anyways, Dell is sending me another restoration CD. Hope to have it today.
I sure wished I was in GA so I could take this thing to i386 to get it fixed.
I swear, there should be the death penalty to anyone caught creating these viroses.

 

[i386]

Re: PC gurus

Been unable to log on for a couple days. Now using my old Gateway. I spoke with Dell, they sent me a restoration CD, but it was junk. Just my luck, I always said if it were raining soup, I'd have a fork.
Anyways, Dell is sending me another restoration CD. Hope to have it today.
I sure wished I was in GA so I could take this thing to i386 to get it fixed.
I swear, there should be the death penalty to anyone caught creating these viroses.

Junk?

Did they send the wrong CD? Was the CD damaged and unreadable?

 

[dolluper]

Re: PC gurus

Boot disc's for your OS maybe??? lots of free ones floppy or cd

 

[tie_one_on]

Re: PC gurus

OS= XP Media Center.
CD/DVD wasn't scratched or broke, just seemed like nothing was on it when the system tried to boot from it.

 

[tommays]

Re: PC gurus

OS= XP Media Center.
CD/DVD wasn't scratched or broke, just seemed like nothing was on it when the system tried to boot from it.

Many times you have to go into the BIOS and tweak settings to boot from the CD drive


Tommays