Windows Mail

[americancritic]

Hello, windows mail is all screwed up for some reason not only is it very slow to open but now it is sending my emails back to me saying their is an error. I have run the AV 3 times, so I am at a toal loss can someone help please. Thank You

 

[Lorien]

Hi Americancritic,

What is the exact, word-for-word message you are getting with returned mails? If you login to your account through your browser, do you have the same problem or is this only occurring with Windows Mail (THIS IS VERY IMPORTANT)? Who is your e-mail provider? Are you having any other online problems (like with the internet or the browsers) or is it just Windows Mail? What AV program (name and version) are you using? When did this start and did you make any hardware, software, or driver changes just prior to that (if so, what changed)?

Do you know when this problem began? Try a System Restore to a point in time BEFORE the problem began. Here's the procedure: http://www.vistax64.com/tutorials/76905-system-restore-how.html. Be sure to check the box to show more than 5 days of restore points. If the first attempt fails, then try an earlier point or two. NOTE: You will have to re-install any software and updates you installed between now and the restore point, but you can use Windows Update for the updates. Use the recovery disk if the system prompt doesn’t work. The recovery disk works a bit different from the above procedures but if you follow the prompts from the System Restore menu option with the above information you should be able to restore with no problems.

If the System Restore doesn't work, do a Startup Repair by booting to the genuine Windows Vista Installation Disk (or one you can borrow from ANYONE) or from a Recovery Disk with recovery options included on it. Here's the procedure: http://www.vistax64.com/tutorials/91467-startup-repair.html. To boot to the CD you may need to change the BIOS to make the CD-drive first in the boot sequence. To do that, wait for the screen that tells you the F key to push to access the boot menu or boot setup. Push it quickly. Make the changes, save your work, and exit. Put the CD in the drive and reboot. When prompted, push any key to boot from the CD.

If you don't have either disk, you can make a bootable Recovery Disk using http://neosmart.net/blog/2008/windows-vista-recovery-disc-download/ along with burning software like: http://www.snapfiles.com/get/active-isoburner.html and, of course, a blank CD (perhaps made on a different computer or perhaps in safe mode with networking if that is working).

If that doesn't work, try to boot into safe mode (repeatedly click the F8 key while booting and go to safe mode with networking – or do so from the command prompt on the disk). Then let's check some of your system files:

Go to Start / All Programs / Accessories / Command prompt and right click on command prompt and click run as Administrator (you can skip this step if using the disk).

If using the disk, cd to C:\Windows\System32. Type sfc /scannow and enter and let it run. It will scan and try to fix some of your system files. Hopefully it will complete with no corruption it could not repair (if there is such corruption post back here or try to analyze it to find the problem file(s) using http://support.microsoft.com/kb/928228. Try to attach the report (you may need to copy it to your desktop before it will permit you to attach it) here so we can see if they can be repaired with good copies from the installation disk or other system files (unless there are too many).

While in Command Prompt, type chkdsk /f /r and enter and let it run. It will want to schedule itself to run at the next restart. Answer yes and then reboot to run the program. It will scan and try to fix any corruption or bad sectors on your hard drive and mostly remove that as a potential cause.

If that doesn't work, then please post any error messages from the Event Viewer concerning Windows Mail (Start / Control Panel / Administrative Tools / Event Viewer). Here's how to use Event Viewer: http://www.petri.co.il/vista-event-viewer.htm. Look in the Application section.

You may be infected with malware. Try to run anti-malware programs (in safe mode with networking if necessary). To fix this problem (if it is a problem) download, install, and run the following two programs: http://www.malwarebytes.org/mbam.php and http://www.safer-networking.org/en/index.html. You may also want to try the new, free Microsoft Security Essentials http://www.softpedia.com/progDownload/Microsoft-Security-Essentials-Download-131683.html (with the caveat that only ONE AV program can be installed and running on your system at any one time). Use removal tools when appropriate http://www.raymond.cc/blog/archives/2009/05/05/comprehensive-list-of-uninstallers-or-removal-tools-for-antivirus-software/. You may also want to try the free Avira at: http://www.free-av.com/ and Avast at: http://www.avast.com/index. Reboot after completing all the scans. You may also want to try the free OneCare at http://onecare.live.com/site/en-us/center/whatsnew.htm and let it run all the options (except the registry cleaner) because that’s good maintenance (it will take some time to complete but can be done in the background).

If that doesn't work, try a clean boot http://support.microsoft.com/kb/929135. If the problem goes away then it's just a matter of tracking down the culprit causing the problem. Follow the procedures in the article. Once found, delete, remove, deactivate, or uninstall it. Once done be sure to reset Vista back to normal status as explained in the procedures. If the problem occurs in clean mode then just restore the system to normal status and reboot - this solution is not going to work.

Boot into Safe mode with networking and see if the problem occurs there. Either result helps us narrow down the search for the cause.

Let's see where that leaves us before trying anything else. Please answer any questions, include results of any tests or procedures you did (including copies of error reports and such), include the sftdetails.txt file, and add anything else you discover along the way or that you think might be helpful. With that additional information (assuming the problem isn't resolved which may possibly prove to be the case), we'll decide where to go from there if the problem persists.

I hope this helps or at least helps identify the cause of the problem.

Good luck!

 

[americancritic]

Hello and thank you for your response. I have not done anything at this point but I have to read and go through the info you sent. The email problems started about 3 to 4 weeks ago now, I ran a complete AV, I am running Kaspersky Internet Security 2011, and I had 2009 and 2010 also and I have been using them for 3 years. After the AV scan this is what showed up in the AV scan. I have deleted the email account and when I set it back up new it is still the same way. I have Defraged, I have done a disk cleanup along with running th onboard tools for checking hardware and those are all fine. Going onto the internet is slow also, closing their is no problem with that end. I know that the windows mail when I go into it it is very slow the page comes up right away but the screen now is kind of a white fog and then when that goes away then the email is then open and when I close the bottom of the screen flashes for a few second's. No other problems with the rest of the system as far as I can tell. I will go back in and send another email so I will be able to tell you what it says. The bottom of the page is my system info.




1, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PDM. Rootshell
C:\user\tom\appdata\local\temp\NS1752.tmp\MSDAD3.tmp
2, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PMD. Rootshell
C:\user\tom\appdata\local\temp\NS1752.tmp\NSCABB3.tmp
3, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PDM.rootshell
C:\user\tom\appdata\local\temp\NSX8561.tmp\NSEA7D.tmp
4, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PDM.rootshell
C:\user\tom\appdata\local\temp\NSX8561.tmp\NSC10C.tmp
5, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PDM.rootshell
C:\user\tom\appdata\local\temp\NSX8561.tmp\NS8978.tmp
6, 12-27-2010 Detected legal software that can be used by criminals for damaging your computer or personal data PDM.rootshell
C:\program files(X86)PC-Doctor 5 for window \UNINST.EXE
1, 9:55:11 time
2, 9:55:07 time
3, 9:54:08 time
4, 9:53:58 time
5, 9:53:44 time
6, 9:54:43 time


HP-Pavilion a6530f Desktop PC
OS: Windows Vista Home Premium 64 bit-SP2
Motherboard: M2N68-LA (Narra3)
Chipset: Nvidia GeForce 6150SE nForce 430
Processor: AMD Phenom X3 8450 -- 2.1 GHz (95w) –2000 MHz Hyper Transport 1.0
Memory: 8 GB PC2-6400 MB/sec (64-bit OS)
Video Graphics: Integrated graphics using nVidia GeForce 6150SE
Sound/Audio: Integrated Realtex ALC888S Audio
Networking: Lan: 10 Base-T
Modem: 56K Winmodem
Hard Drive: 640 GB Interface: SATA
Optical Drive: Supermulti 16X DVD(+/-)R/RW 12X Ram (+/-)R DL Lightscribe SATA drive
Memory Card Reader: 15-in-1
Power Supply: 300W

 

[americancritic]

Hello I am sorry but I have also done a sfc /scannow and it said it repaired some things but was unable to repair everything, and I have done a command prompt defrag and after each one I did a reboot. I always log on to the windows mail through the the browser as with the internet. I also did a systen restore yesterday back to about a week and a half to two weeks ago and I am still have the same problem and I have not deleted anything from Kaspersky I let those items there just in case I want to do things right, I am also kind of a newbie. I bought my system from HP so all the software was already installed but I do have the factory disk's for doing a factory system recovery disks which their is 4 of them. I don't know what the 4th one is it says supplemental recovery. I made the factory recovery disks when I first got the computer and after a while I needed them and they did not burn right for some reason so I called HP and the sent me these which worked great when I used the 6 or 7 months ago. My IP provider is Cox commuications. My wifes computer has the main line and my daughter has hers set up also on the wireless and so is mine and both of theirs work fine so I know it is just my computer and I have had wireless for 3 years now. I have also went in and made sure that all my drivers are current. The chkdsk said their is no bad sectors, my event viewer has a lot of errors in yellow and red so I snipped them and saved them to my documents I will attach them to this. My mail just shut down again so I made a screeshot of it. There s more saved but i don't want to send great big files without knowing if the system will handle it.



Date: Today (8)
1/3/2011 12:14:05 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 12:26:19 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 12:57:30 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 1:35:38 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 2:21:57 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 2:47:19 PM Kaspersky Internet Security Task started IM Anti-Virus
1/3/2011 2:47:35 PM Kaspersky Internet Security Unable to start tasks IM Anti-Virus Database is corrupted
1/3/2011 2:52:57 PM Kaspersky Internet Security Task started IM Anti-Virus

 

[americancritic]

Hello again here is a little more ever time my emal acts up and it is a lot then I get it not responding. Then I recheck to make sure that the email I have is right because they belong to some friends.

 

[derekimo]

Have you done the full scan with Malwarebytes yet?

 

[richc46]

Thats good advice Derkimo, always a good place to start. Any unexpected problem can be caused by malware. There should be no delay in making a scan.

 

[Lorien]

Thats good advice Derkimo, always a good place to start. Any unexpected problem can be caused by malware. There should be no delay in making a scan.

I agree. That's why I suggested malwarebytes in my first post - but never received confirmation that it was done, so it's good Derek has reminded us of that missing feedback and the need to run the program.

This is especially true given the results which were subsequently posted that indicate the potential presence of malware (and/or possibly a false positive by that PC Doctor) - information which was not initially available. The need to rule out an infection is now of the highest importance given this additional information.

Americancritic, please download, install, update, and run Malwarebytes in full scan mode and then please copy the report and post it in your next reply.

Also of note is the message that Vista may not be up-to-date. Please make sure you run Windows Update to get any updates that may be missing and need to be installed. Some may be security updates which may have allowed the infection (if that's the case) and some may be updates involving Windows Mail which may actually fix the problem.

Thanks and good luck.

 

[derekimo]

Yes, we're all in agreement there.

Let us know how that turns out americancritic.

 

[richc46]

Actually makes no difference who is first and who is second. We are here to help as a team.
Sorry, did not read all of your long post.

 

[Lorien]

Actually, I just noticed this is the same OP as in http://www.vistax64.com/general-discussion/286646-files.html where we discovered a major infection that Jacee is handling. Perhaps it would be best to let her resolve the infection in the other thread before pursuing this problem (assuming fixing the infection doesn't resolve the problem on its own).

 

[derekimo]

I'm sure they are connected, I guess we'll see when we get a response.

 

[americancritic]

Hello I am not sure if the upload I tried to do worked so I copyed and pasted this one so everyone could see the results. This is the full scan done by Malwarebytes, the scan took over an hour and I also ran a full AV scan lastnight also and everything is coming back fine it syas their is no malware or virus on my computer, so I will wait untill you get back to me before I do anything else. Thank you all so very much for your help on this matter. I guess I am still not done until we all make sure that I don't have have virus or malware on my system.
Americancritic

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5474

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

1/6/2011 9:39:45 PM
mbam-log-2011-01-06 (21-39-45).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 329127
Time elapsed: 1 hour(s), 3 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

 

[derekimo]

You should go back to your other thread and follow Jacee's instructions and report back after that.