Ted
asked on
runkbot.exe error messages
I have been getting bothersome error messages on my laptop that I thought had been cleaned out when I did a full scan with my Semantec Endpoint Protection. It helped for a while but it came back. And this time a scan didn't fix it.
I have the KACE/KBOX program running which checks authenticity if my softwares, and that is what appears to be affected and causing these error messages:
I get a Pop-up window...
runkbot.exe -Common Language Runtime Debugginng Services
With the following error message:
Application has generated an exceptin that could not be handled.
Process id=0x12c (300), thread id=0x120 (288)
click OK to terminate the application
Click CANCEL to debug the application.
...the hex and decimal figures in the "Process id..." line changes with every pop-up message.
Then, when I click CANCEL, to debug, I get an AcroDist.exe -Application Error
The application failed to initialize properly (0x0000005), Click OK to terminate application.
Runkbot.exe -No debugger found.
and it goes on saying the Registered JIT debugger is not available.
OR if I just click OK on the original error message, it goes away, but more of the same errors keep popping up.
Please advise how to rid of this once and for all.
I have the KACE/KBOX program running which checks authenticity if my softwares, and that is what appears to be affected and causing these error messages:
I get a Pop-up window...
runkbot.exe -Common Language Runtime Debugginng Services
With the following error message:
Application has generated an exceptin that could not be handled.
Process id=0x12c (300), thread id=0x120 (288)
click OK to terminate the application
Click CANCEL to debug the application.
...the hex and decimal figures in the "Process id..." line changes with every pop-up message.
Then, when I click CANCEL, to debug, I get an AcroDist.exe -Application Error
The application failed to initialize properly (0x0000005), Click OK to terminate application.
Runkbot.exe -No debugger found.
and it goes on saying the Registered JIT debugger is not available.
OR if I just click OK on the original error message, it goes away, but more of the same errors keep popping up.
Please advise how to rid of this once and for all.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK, i've tried it all... ATF, Malewarebytes (checked the boxes and remove selected), Combofix, Nod on-line scan, and Autoruns. None of it worked. In fact nothing worked until I put the runkbot.exe file from the KBOX directory inyo the recycle bin. But that is not the solution. The techniques offered all seem to do the same thing -scan, find bad things, kill them. Is there much parity between the different techniques?
Anything else to help me with this?
Anything else to help me with this?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK, I did the f-secure blacklight rootkit detector and it didn't find any hidden processes. Didn't do the sophos because I didn't feel like registering. Next step is to pull the HD and do the Malewarebytes and Panda. This may take a while as I need to find a different computer to use.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Didn't mean to leave you hanging, spent Holidays with family.
Still need to get a different computer to transfer this HD to, and then F-secure app
One last thought, the error messages stopped when I put the runkbot.exe file in the trash ( I didn't erase the trash because I eventually want to resore the file when this thing is fixed.) Could this mean that the problem is in the runkbot.exe file itself? This is the executable file of the KBOX application. Anyone familiar with KBOX?
Still need to get a different computer to transfer this HD to, and then F-secure app
One last thought, the error messages stopped when I put the runkbot.exe file in the trash ( I didn't erase the trash because I eventually want to resore the file when this thing is fixed.) Could this mean that the problem is in the runkbot.exe file itself? This is the executable file of the KBOX application. Anyone familiar with KBOX?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you!!
No prob.
your welcome
ASKER
Also found some interesting results. First, I don't think the ATF Cleaner worked on my machine. Because, though I didn't check the cookies and temporary files to see if they were deleted by ATF, when I watched the malwarebytes run I saw that it was scanning files in the temporary internet folder which made it seem that they were not deleted after all. Malwarebytes did succeed in finding three possible viruses, which I then deleted. BUT it didn't fix my original porblem. Still getting these runkbot.exe errrors.
I tried it again but this time I manually cleaned out the elements that ATF Cleaner cleans. Then malwarebytes did not find anything. And the problem still exists.
I've enlcosed the logs from the first scan.
Any other thoughts? BTW, are there diferences in what AV softwares out there look for? Is this Malewarebyte product doing something different than my current Symantec Endpoint Protection?
I'm pretty new to this subject, and still looking for a solution. Thanks for your help.
mbam-log-2009-12-16--14-08-28-.txt