dot net error on win startup

Discussion in 'Windows 7 Help and Support' started by dellic sekunde, Feb 2, 2014.

  1. dellic sekunde

    dellic sekunde Well-Known Member

    Joined:
    Jan 1, 2012
    Messages:
    19
    Likes Received:
    0
    Hello,

    I got win 7 and when I log on I have dot net framework error. Something like it can't connect to peeracon.com but I have no idea what that link represents anyway. Any suggstions please? Thanks

    In details it says:

    See the end of this message for details on invoking
    just-in-time (JIT) debugging instead of this dialog box.

    ************** Exception Text **************
    System.Net.WebException: The remote name could not be resolved: 'peeracon.com'
    at System.Net.HttpWebRequest.GetResponse()
    at WindowsFormsApplication1.Form1.GetHtmlPageText(String url)
    at WindowsFormsApplication1.Form1.Form1_Load(Object sender, EventArgs e)
    at System.Windows.Forms.Form.OnLoad(EventArgs e)
    at System.Windows.Forms.Form.OnCreateControl()
    at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
    at System.Windows.Forms.Control.CreateControl()
    at System.Windows.Forms.Control.WmShowWindow(Message& m)
    at System.Windows.Forms.Control.WndProc(Message& m)
    at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
    at System.Windows.Forms.Form.WmShowWindow(Message& m)
    at System.Windows.Forms.Form.WndProc(Message& m)
    at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
    at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
    at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


    ************** Loaded Assemblies **************
    mscorlib
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1008 (RTMGDR.030319-1000)
    CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll
    ----------------------------------------
    WindowsFormsApplication1
    Assembly Version: 1.0.0.0
    Win32 Version: 1.0.0.0
    CodeBase: file:///C:/WINDOWS/bat_starter.exe
    ----------------------------------------
    System.Windows.Forms
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1002 built by: RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
    ----------------------------------------
    System.Drawing
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1001 built by: RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
    ----------------------------------------
    System
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1001 built by: RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll
    ----------------------------------------
    System.Configuration
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1015 (RTMGDR.030319-1000)
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
    ----------------------------------------
    System.Xml
    Assembly Version: 4.0.0.0
    Win32 Version: 4.0.30319.1015 built by: RTMGDR
    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll
    ----------------------------------------

    ************** JIT Debugging **************
    To enable just-in-time (JIT) debugging, the .config file for this
    application or computer (machine.config) must have the
    jitDebugging value set in the system.windows.forms section.
    The application must also be compiled with debugging
    enabled.

    For example:

    <configuration>
    <system.windows.forms jitDebugging="true" />
    </configuration>

    When JIT debugging is enabled, any unhandled exception
    will be sent to the JIT debugger registered on the computer
    rather than be handled by this dialog box.
     
  2. Josephur

    Josephur Windows Forum Admin
    Staff Member Premium Supporter

    Joined:
    Aug 3, 2010
    Messages:
    1,019
    Likes Received:
    125
    When I Google the program in question "bat_starter.exe" it looks like a trojan virus. I suggest running a full Malwarebytes scan ASAP and post back with results.
     
  3. dellic sekunde

    dellic sekunde Well-Known Member

    Joined:
    Jan 1, 2012
    Messages:
    19
    Likes Received:
    0
    Hi, thanks for fast reply.
    I have run Malwarebytes and this is report (below). I have deleted all the files it found infected. However, dot Net warning remains when I restart machine. Any more suggestions?

    Malwarebytes Anti-Malware (Trial) 1.75.0.1300
    www.malwarebytes.org

    Database version: v2013.04.04.07

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 11.0.9600.16476
    user :: USER-PC [administrator]

    Protection: Enabled

    03/02/2014 18:01:45
    MBAM-log-2014-02-03 (19-27-11).txt

    Scan type: Full scan (C:\|)
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 452474
    Time elapsed: 1 hour(s), 21 minute(s), 14 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 6
    HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> No action taken.
    HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> No action taken.
    HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> No action taken.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> No action taken.
    HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> No action taken.
    HKCR\Updater.AmiUpd (PUP.Software.Updater) -> No action taken.

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 3
    C:\Users\user\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> No action taken.
    C:\Users\user\Instalacije\Microsoft.Office.2010.Professional.Plus\Office 2010 Toolkit\Office 2010 Toolkit.exe (RiskWare.Tool.CK) -> No action taken.
    C:\WINDOWS\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> No action taken.

    (end)
     
  4. patcooke

    patcooke Microsoft MVP
    Staff Member Premium Supporter Microsoft MVP

    Joined:
    May 16, 2010
    Messages:
    5,456
    Likes Received:
    268
    Office 2010 Toolkit.exe is usually associated with hacking the Office package. Do you know whether or not your copy of MS Office is genuine?
     
  5. dellic sekunde

    dellic sekunde Well-Known Member

    Joined:
    Jan 1, 2012
    Messages:
    19
    Likes Received:
    0
    I don't. But removed it all, updated Malwarebytes, it found 40 more... than deleted them also, but stil had dot Net problem at start-up. Then I simply deleted bat_starter.exe manually from win folder. By now, everything looks fine. If you have any idea whether I should check and delete something manually, please share. Thanks!
     
  6. patcooke

    patcooke Microsoft MVP
    Staff Member Premium Supporter Microsoft MVP

    Joined:
    May 16, 2010
    Messages:
    5,456
    Likes Received:
    268
    I strongly suspect you have an illegal copy of Office installed there with the aid of a hacking tool which will have imported an unpredictable load of malware problems. As this involves software piracy it is contrary to the rules of these forums and we cannot offer any further help and must respectfully advise you that you may not discuss this topic further.
     

Share This Page

Loading...