The famous application oxc000012d

Hello

In Run, type regedit and follow the keys.
>> HKLocalMachine\Software\Microsoft\Windows\CurrentVersion\Run

And check if you see cscrïpt.exe on the right side.
If so, delete it after backing up the key for safety.
--
Who loves instruction! find the knowledge that comes from reflection!
PS. Often create a restore point! it solves quite a few problems.

Here is what is said

Kernelfaultcheck is a process related to a 'dumprep' command and performs memory dumps and writes debugging information.

This program is a non-essential process, but should not be terminated without suspecting it to be the cause of problems.

Non-system processes, like kernelfaultcheck, come from software installed on your system. Since most applications store data in your system registry, it is likely that your registry has suffered from fragmentation and the accumulation of invalid entries, which can affect your PC's performance. It is recommended that you check your registry to identify slowing issues.
kernelfaultcheck

But you might have a nasty on your system.
Try this and scan > Malwarebytes and remove anything it finds

--
Who loves instruction! find knowledge that comes from reflection!
PS. Frequently create a restore point! it solves a lot of problems.

You must have downloaded some software that gives you this problem.
What is your email? Do you use Outlook (not Express)?
Who loves instruction! Find the knowledge that comes from reflection!
PS. Frequently create a restore point! It solves quite a few problems.

This problem is often related to Outlook.

But you may have some malware on your system, as some consider it an infection, and you could transmit it to your contacts.

You should analyze or have your system analyzed for Virus/Security.
Who likes instruction! Find the knowledge that comes from reflection!
PS. Frequently create a restore point! It resolves quite a few issues.

You might have caught it through your contacts.

Description of the virus:

It is a script-type virus written in VBScript. To run, this virus needs the Wscript.EXE (in C:\WINDOWS) or Cscript.EXE (in C:\WINDOWS\COMMAND) programs that are present by default in Windows. This virus spreads via Microsoft Outlook.

Once executed, this virus copies itself into the Windows directory with the name "rundll32.vbs" and modifies the registry of your machine. This can be easily noticed when you restart your machine, as the "Registered owner" of Windows (in Settings -> Control Panel -> System -> General) has become FireburN.
Then, the virus tries to copy itself into C:\MIRC or C:\Program Files\MIRC by creating "script.ini". This modification will cause the mail program to automatically send the virus to the contacts in your address book.

PS.
I can request an analysis from security virus professionals and redirect your topic to this forum if you wish.
--
Who loves instruction! finds the knowledge that comes from reflection!
PS. Frequently create a restore point! it solves many problems.

Good evening daniel1055

For further information, please do the following:

Open this link and download ZHPDiag from Nicolas Coolman:

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Or

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Server No. 2

Or

http://www.premiumorange.com/zeb-help-process/zhpdiag.html
at the bottom of the ZHP page with a version number.

Once the download is complete, unzip the obtained file and place ZHPDiag.exe on your Desktop.

Double-click the icon to launch the program. On Vista or Seven, right-click "Run as administrator"

Click on the magnifying glass to start the scan.

Let the tool work; it may take a while.

Close ZHPDiag at the end of the scan.

To send the report, click on this link:

http://pjjoint.malekal.com/

https://www.cjoint.com/

Click on Browse and look for the directory where ZHPDiag is installed (usually C:\Program Files\ZHPDiag).

Select the file ZHPDiag.txt.

Click on "Click here to upload the file".

A link in this form:

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

will be added to the page.

Copy this link into your reply.

Thank you

See you later

--
---------Security Contributor---------
We have all been beginners at something at some point.
But knowledge is the reward for diligence.

Good evening

Your link is inaccessible
Moreover, if you proceed on your own; I'll let you manage.
I'm not here to fix your mistakes.

See you later

--
---------Security Contributor---------
We've all been beginners in something at some point.
But knowledge is the reward for diligence.

Good evening

This is not the right report.
I am waiting for a ZHPDiag report and not a ZHPScan.
Check on the desktop.

See you later
--
---------Security Contributor---------
We have all been a beginner at something at some point.
But knowledge is the reward of diligence.

I'm sorry, Guillaume.
Here is what http://pjjoint.malekal.com/ gives me as a result:

The upload was successful! - The link to send to your contacts to view the file is: http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120424_i9w11r10q7r8

This is what I'm sending in the response file here, and it doesn't work.

And then in http://cjoint.com, this link is generated:
http://cjoint.com/?BDyvVvnJozc

So this is what you told me to do, and I don't know where to turn now.

Thank you, Guillaume.

Good evening

1) # Note: "Process.exe," a component of the tool, is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky Anti-Virus) as a RiskTool.
It is not a virus, but a utility designed to terminate processes.
In the wrong hands, this utility could stop security software (Antivirus, Firewall...), hence the alert issued by these antivirus programs.

Download and install UsbFix from El Desaparecido, C_XX & Chimay8

http://eldesaparecido.com/usbfix.html

Or here

http://general-changelog-team.fr/telechargements/logiciels/viewdownload/80-outils-de-el-desaparecido/32-usbfix

Tutorial by Malekal_Morte if needed, thanks to him: https://www.malekal.com/usbfix-supprimer-virus-usb/

Connect your external data sources to your PC (USB drive, external hard drive, etc.) that may have been infected without opening them

# Double-click on the UsbFix shortcut on your desktop.

# Choose Delete

# Let the tool work.

# Then post the UsbFix.txt report that will appear.

# Note: The UsbFix.txt report is saved at the root of the disk. (C:\UsbFix.txt)

(CTRL+A to select all, CTRL+C to copy, and CTRL+V to paste)

2)Download AdwCleaner (from Xplode) to your desktop.
Run it, click on [Delete] then wait for the scan to complete.
Once the scan is finished, a report will open. Please post its content in your next response.

Note: The report is also saved under C:\AdwCleaner[S1].txt

Toolbars are not mandatory (by Malekal): https://forum.malekal.com/viewtopic.php?t=6173&start=

3)You have Malwarebytes, update it and run a quick scan.
Make sure to delete everything it finds.
Post this report to me.

Thank you

@+
--
---------Security Contributor---------
We have all been beginners at something one day.
But knowledge is the reward of diligence.