View Single Post
  #10  
Old October 31st 18, 09:53 PM posted to alt.comp.os.windows-10
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default Taskbar+ Notification icons+Defender: Problems!

Terry Pinnell wrote:
Terry Pinnell wrote:

Paul wrote:

Terry Pinnell wrote:
Terry Pinnell wrote:

Posting this in between a series of restarts in an attempt to resolve
sudden problems.
- Clicking the bottom right Notification icon does nothing.
- Right clicking my own taskbar icons does nothing
- Defender not working. Showing its yellow exclamation tray icon but
left clicking (or right clicking and choosing an option) just pops up
its blue window which promptly closes. When I was able to scan with
Malwarebytes earlier there were a few suspicious items which I
quarantined

I've done one System Restore (to last night) and reluctantly about to go
back further.

WU is up to date. I'm on 1803 build 17134.376

Anyone seen/heard of anything relevant please, or any suggestions on
isolating?

My best guess, so soon after my recent post 'All tray icons greyed out',
is that's a Classic Start Menu issue. I'll uninstall it shortly, unless
I can temporarily disable it first.

Terry, East Grinstead, UK
Not looking good.

Inexplicably, no earlier SRs available before last night, and that
didn't fix it.

Uninstalled Classic Start Menu but issues remained. So re-installed it.

Registry Clean with CC Cleaner made no difference.

Nor did updating Intel Graphics 530

Out of ideas apart from attempting my first image restore, from either
Win 10 or DataNumen Image. (Not yet made one with Macrium.)

Terry, UK
When you look in Settings : Windows Update and then look
at the update history, did the last Windows Defender definitions
install OK ?

I had to find and install a copy of a newer VS C++ 2010 something-or-other,
and after that was installed, as near as I can tell, Defender was
able to process the definitions file OK. I can't be 100% sure until
the next definitions come out, and the process happens again, whether
it's fixed.

Glad to have you on the case. Defender looks OK:
https://www.dropbox.com/s/tuvyji9e9q...ms-1.jpg?raw=1

Later...

Other than that, your symptoms aren't encouraging. Either multiple databases
are messed up (causing notifications and tile cache to be screwed up), or
something is wrong with the Desktop Window Manager, which is always possible.

If some service had shut down, and was a dependency for
desktop operation, how would we know ?

Check your Event Viewer again for hints.

Check Reliability Monitor for hints (within the last day or two).

Paul


Apart from the non-working 'Apps' in my reply a moment ago, the
Reliability History showed scores of failures today (and some yesterday)
from each of these EXE files:

backgroundTaskHost
ShellExperienceHost
SearchUI
SecHealthUI
HxTsr
ReminderServer

...and others.

Any clues emerging from all this please? I really don't want to have to
try those image restore options ;-(


Terry, East Grinstead, UK


HxTsr seems to have some interaction with AV software,
and there have been false positives. And apparently,
there is malware that uses the same name.

Microsoft won't say what it's for, but it might have
something to do with background transfer for mail and calendar
functions. Or for the modern Outlook. In a previous era,
TSR meant "terminate and stay resident", not that this
is important.

OK, here is the information on mine. I do have one.
I used nfi.exe to generate a file list of C: and it was
in there. Permissions prevented Agent Ransack from
searching inside the folder. (Everything.exe can probably
see it, but I didn't do any tests.) My C: drive in this case,
appears to have a million files.

File 79250
\Program Files\WindowsApps\microsoft.windowscommunicationsa pps_16005.10827.20186.0_x64__8wekyb3d8bbwe\HxTsr.e xe
$STANDARD_INFORMATION (resident)
$FILE_NAME (resident)
$DATA (nonresident)
logical sectors 58178416-58178623 (0x377bb70-0x377bc3f)
$EA_INFORMATION (resident)
$EA (resident)

100 KB (103,200 bytes)

A shoot-from-the-hip comment about your situation
is "something broke in the middle of the OS". Is it a
service ? For an example of a crucial service, there
is RPC, which would just kill the OS if it went down.
You cannot disable RPC (remote procedure call) in
a modern OS. It's hooked into too many things.
In your case, what "lesser thing" has your damage
pattern ?

And more importantly, how will we generate a search term :-/

If your ReliabilityHistory has any more interesting ones
in it, post away.

HxTsr at least, has been more of a false positive thing,
as it appears to AV programs like a BackOrifice kind of
application. It would be suspicious from a heuristic
detection perspective.

*******

With regard to backups, do you have a "good" "recent" one ?

Do you have a spare boot drive to restore onto ?

So you can keep the borked setup for file retrieval later
(any files you were working on).

Paul
Ads