Unknown program at shutdown???? Crossposted

[Dianne]

Ever since a recent hijack attempt (stopped by BHO Demon), on shutdown or
restart I get an alert message saying: "The application failed to
initialize because the windows station is shutting down." This flashes on
the screen so quickly I can hardly read it and then Windows shuts down or
restarts normally. It's just very annoying.

The program in question is ApVRdhE.exe (written as shown with upper and
lower case). I do not know what this program is. I searched it on my
computer and it appears in these two places:

APVRDHE.EXE-2E906A20.pf in C:\Windows\Prefetch

ApVRdhE.exe in C:\Windows\System32

Here is what I've done:

I ran AdAwareSe, SpyBot Search & Destroy, and BHO Demon. Nothing kicks out.
I ran Msconfig and disabled it on startup. It keeps coming back.
I opened Task Manager to end the process. It keeps reappearing.
I even tried deleting it. Can't delete it because it is always running!

Has anyone else heard of this ApBRdhE.exe? How do I get rid of it? How do
I even find out what it is? All help is greatly appreciated.

Dianne

 

[Don Varnau]

Hi,
Start at http://forum.aumha.org/viewtopic.php?t=4075 Then go to
http://www.aumha.org/a/quickfix.htm Work through the precleaning steps and
post a HijackThis log to the forum at
http://forum.aumha.org/viewforum.php?f=30

With help, you should be able to remove this malware manually.

Don
[MS MVP- IE/OE]

 

[Carey Frisch [MVP]]

Microsoft Windows AntiSpyware (Beta)
http://www.microsoft.com/downloads/...a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------

:

| Ever since a recent hijack attempt (stopped by BHO Demon), on shutdown or
| restart I get an alert message saying: "The application failed to
| initialize because the windows station is shutting down." This flashes on
| the screen so quickly I can hardly read it and then Windows shuts down or
| restarts normally. It's just very annoying.
|
| The program in question is ApVRdhE.exe (written as shown with upper and
| lower case). I do not know what this program is. I searched it on my
| computer and it appears in these two places:
|
| APVRDHE.EXE-2E906A20.pf in C:\Windows\Prefetch
|
| ApVRdhE.exe in C:\Windows\System32
|
| Here is what I've done:
|
| I ran AdAwareSe, SpyBot Search & Destroy, and BHO Demon. Nothing kicks out.
| I ran Msconfig and disabled it on startup. It keeps coming back.
| I opened Task Manager to end the process. It keeps reappearing.
| I even tried deleting it. Can't delete it because it is always running!
|
| Has anyone else heard of this ApBRdhE.exe? How do I get rid of it? How do
| I even find out what it is? All help is greatly appreciated.
|
| Dianne

 

[Rock]

Ever since a recent hijack attempt (stopped by BHO Demon), on shutdown or
restart I get an alert message saying: "The application failed to
initialize because the windows station is shutting down." This flashes on
the screen so quickly I can hardly read it and then Windows shuts down or
restarts normally. It's just very annoying.

The program in question is ApVRdhE.exe (written as shown with upper and
lower case). I do not know what this program is. I searched it on my
computer and it appears in these two places:

APVRDHE.EXE-2E906A20.pf in C:\Windows\Prefetch

ApVRdhE.exe in C:\Windows\System32

Here is what I've done:

I ran AdAwareSe, SpyBot Search & Destroy, and BHO Demon. Nothing kicks out.
I ran Msconfig and disabled it on startup. It keeps coming back.
I opened Task Manager to end the process. It keeps reappearing.
I even tried deleting it. Can't delete it because it is always running!

Has anyone else heard of this ApBRdhE.exe? How do I get rid of it? How do
I even find out what it is? All help is greatly appreciated.

Dianne

Try removing it in safe mode.

 

[Wesley Vogel]

Steer clear of Microsoft Windows AntiSpyware (BETA) until it's ready for
public release. It has too many problems yet!!!!

Make sure that your antivirus software is updated and then run a full system
scan.

Make sure Ad-Aware SE and SpyBot Search & Destroy are both updated.

SpyBot Search & Destroy
Version: 1.3.0.12
Latest detection update: 2005-01-28

Ad-Aware SE
Version: 1.05 latest version (January 25, 2005)
Definitions File Reference Number : SE1R26 25.01.2005

Run 'em both again.

If still no joy, try this...
Reboot in Safe Mode

1. (Re)start your computer.
2. When the machine first starts again it will generally list some
equipment that is installed in your machine, amount of memory, hard
drives installed etc. At this point you should gently tap the F8 key
repeatedly until you are presented with a Windows XP Advanced Options
menu.
3. Select the option for Safe Mode using the arrow keys on your keyboard.
(NUM LOCK must be off before the arrow keys on the numeric keypad will
function.)
4. Then press enter on your keyboard to boot into Safe Mode.
5. Do whatever tasks you require and when you are done reboot to boot back
into normal mode.

If Windows launches before you can choose a safe mode, restart your computer
and try again.

Once in Safe Mode open the Task Manager...
Click the Processes tab
Scroll down and locate ApVRdhE.exe (if it's running)
Right click ApVRdhE.exe and select End Process
Answer YES to the message that pops up

Then try to delete C:\Windows\System32\ApVRdhE.exe

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In