SYSFADER.EXE

  • Thread starter Thread starter EasyFeelings
  • Start date Start date
E

EasyFeelings

have a client who has been having a problem with their computer freezing and
rebooting. this is an WinXP system, fresh installed to a bigger harddrive
and added a new NIC.
problem started about a week or so after the fresh install, and in trying to
track down the problem i noticed SYSFADER.exe in the running apps, only
noticed it once and was unable to locate it anywhere on the drive after
that.
guess the question is: does anyone know what SYSFADER.exe is?



--
EasyFeelings
A+
MCP
MCSA

"When your computer is working good, That's an EasyFeeling"
 
EasyFeelings said:
have a client who has been having a problem with their computer freezing
and rebooting. this is an WinXP system, fresh installed to a bigger
harddrive and added a new NIC.
problem started about a week or so after the fresh install, and in trying
to track down the problem i noticed SYSFADER.exe in the running apps, only
noticed it once and was unable to locate it anywhere on the drive after
that.
guess the question is: does anyone know what SYSFADER.exe is?



--
EasyFeelings
A+
MCP
MCSA

"When your computer is working good, That's an EasyFeeling"
Click to expand...

Have you tried a Google search

http://www.google.com/search?q=SYSFADER.exe
Results 1 - 10 of about 204 for SYSFADER.exe. (0.12 seconds)
 
Well first I guess I should let you know, I did that search and found no
real info before I posted.
All I found was a lot of people with grief from SYSFADER, and no actual
answers.
I tried the ideas I found there, some had been done before this started,
such as hibernate being shut off, I also tried the transition one. i have
run highjackthis, A/V programs, and spybot search & destroy, even tried
searching for "sysfader" (including hiden files), and this computer doesn't
use MSN IM.
This is why i posted a request for help.
I hoped that someone in this NG would have knowledge about this.


--
EasyFeelings
A+
MCP
MCSA

"When your computer is working good, That's an EasyFeeling"
 
EasyFeelings said:
Well first I guess I should let you know, I did that search and found
no real info before I posted.
All I found was a lot of people with grief from SYSFADER, and no
actual answers.
I tried the ideas I found there, some had been done before this
started, such as hibernate being shut off, I also tried the transition
one. i have run highjackthis, A/V programs, and spybot search &
destroy, even tried searching for "sysfader" (including hiden files),
and this computer doesn't use MSN IM.
This is why i posted a request for help.
I hoped that someone in this NG would have knowledge about this.
Click to expand...


You could try using the SysInternals FileMon utility and filter by the
name "sysfader" to see what process ever loaded something with that
string in the filename.

Please shorten your sig. All those certs can be on one line.
 
ok, so where's the answer?
like I said, I have done the search and read the posts, and tried stuff that
applied.
all I found was allot of people guessing and posting links to other forums,
that still are not answering the question.
Am I to assume that no one has a clue about this?
Mean I have spent hours reading forums that have more symptoms than there
are porn sites, and almost as many ideas as to a fix.
Most of these don't even remotely apply in my case.
 
ok, so where's the answer?

Try using the link I gave you, specifically #11, then follow the link to
Trend Micro, where you will find all the info you need, includes exhaustive
detail of exactly WHICH registry settings/entries are affected, plus, how to
remove it.
like I said, I have done the search and read the posts, and tried stuff
that applied.
all I found was allot of people guessing and posting links to other
forums, that still are not answering the question.
Am I to assume that no one has a clue about this?
Click to expand...

Unless of course you feel that Trend Micro, having done all the research,
found the culprit, updated their AV prog to remove it, don't know what
they're talking about - in which case it's pointless posting problems when
you can't be bothered to do your own VERY basic research (Google, then
actually READ the links through) or respond courteously to folk who have
gone out of their way to do it for you - it's YOUR problem, not ours.

Re - your extensive knowledge of porn sites - little wonder your client has
malware. Pity they've not been advised to install effective AV and spyware,
which would have trapped the problem before it became one.

Sincerely, Len
 
Well , I had read that post.
Wish that had been the answer. Even though the symptoms really didn't apply,
I tried running the scan (actually hoping it would find something Norton let
by) and found nothing. Tell the truth, I went to Trend Micro before I
started surfing all the forums.

The link you gave was the first one I read when all this was first brought
to my attention.
And their A/V is up to date, as is their spyware program.
 
OK, the only thing I can think of is that the ruddy thing has changed its
identity (on first run, installed something else). It's clear from tone of
your earlier posts that this is extremely frustrating - frustration
sometimes clouds the mind so forgive me for suggesting what could be
construed as elementary ...

1/ Don't rely 100% on an internal NAV check. Run an external one, on-line.
2/ Have you checked and identified all "running processes" as valid ones?
3/ Trend link provided a list of all the affected registry keys. The scan
didn't find it, but it might still be worth checking those registry key
entries, manually.
4/ If still no joy, the final solution - back up DATA only, no executables,
no zipped/rar downloads - do NOT Ghost it (restoring from Ghost would
re-introduce it) and do a clean fresh install including reformat.

FWIW - some problems just cannot be solved. I spent months trying for the
answer to one of mine, in this and other relevant ng's. I know the
frustration, but do remember, contributions to ng's are free. It's not a
paid-for service - many, like myself, are freely giving their knowledge and
time out of interest only. Politeness costs nothing, but is more likely to
succeed than aggression (whether deliberate or born of frustration).
I solved my "unanswered" problem by option 4-type action - sometimes it's
the only way. And, from what I've read about this in all the posts, this
particular bug is nasty, with varying unpredictable effects, so perhaps
reformat/re-install is best solution from the outset, to ensure ALL traces
and variants are eradicated.

Hope this helps, Len.
 
EasyFeelings said:
ok, so where’s the answer?
like I said, I have done the search and read the posts, and tried
stuff that
applied.
all I found was allot of people guessing and posting links to other
forums,
that still are not answering the question.
Am I to assume that no one has a clue about this?
Mean I have spent hours reading forums that have more symptoms than
there
are porn sites, and almost as many ideas as to a fix.
Most of these don’t even remotely apply in my case.
Click to expand...

I had the same problem. It turns out there is a file that none of the
adware/spyware programs picked up. It is in the Windows/system32
directory. On my system it was a file called appzj32.dll. I simply
deleted this file and the problems went away. I was able to find this
by using regmon from sysinternals web site. This is a powerful tool.
Run the regmon program then reproduce the error. It is a cumbersome
task to look through the details but it will usually help in solving
your problem.

Hope this helps.
 
joeyc990 said:
[quote:ecdef815bc="EasyFeelings"]ok, so where's the answer?
like I said, I have done the search and read the posts, and
tried stuff that
applied.
all I found was allot of people guessing and posting links to
other forums,
that still are not answering the question.
Am I to assume that no one has a clue about this?
Mean I have spent hours reading forums that have more symptoms
than there
are porn sites, and almost as many ideas as to a fix.
Most of these don't even remotely apply in my
case.[/quote:ecdef815bc]

I had the same problem. It turns out there is a file that
none of the adware/spyware programs picked up. It is in the
Windows/system32 directory. On my system it was a file called
appzj32.dll. I simply deleted this file and the problems went
away. I was able to find this by using regmon from
sysinternals web site. This is a powerful tool. Run the
regmon program then reproduce the error. It is a cumbersome
task to look through the details but it will usually help in
solving your problem.

Hope this helps. :D
Click to expand...

Hey,
Try this.....
Run your AV detector in safe mode. I had sysfader errors on my son’s
PC and McAfee couldn’t find it. Symptoms were we could not open any
folders, explorer, or control panel without getting the "error
writing to memory" message. I ran McAfee in safe mode and it found
the virus and deleted it. No more problems! The scan takes
considerably longer, so start it before you go to bed at night.
 
Thanks for the reply, but two issues ......

First, your son's computer has different problems than the computer i have
been working on.
Second, at this point i already fresh installed the OS.

Though i does amaze me the number of different problems users have had with
the same item.
Maybe someday we'll learn what connection is to sysfader and even more what
sysfader is.

Again, thats for the reply.
 
Back
Top