macro recorder Software (EZMacros) not working in Windows 10

January 22, 2016 at 20:15:00
Specs: Windows 7, I7-4core 16gig ram
I am on Win 10 with Intel Core i7 4770K @ 3.50GHz When I try to create a macro using EZMacros or any other macro recorder, I get a message saying "unable to set the hook" or an unspecified error with other apps. I've tried searching everywhere and only find hints of the hook process and a mention that you can reset it but nothing that I can follow as a solution.
I have antiviral programs and I don't see any sign of a virus or malware. The computer functions great otherwise. Has anyone seen or know of this type of issue?

See More: macro recorder Software (EZMacros) not working in Windows 10

Report •

#1
January 22, 2016 at 20:32:28
I can vet these logs for you.

Please download Farbar Recovery Scan Tool and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://www.bleepingcomputer.com/dow...
If we have to run Farbar more than once, refer this SS.
http://i.imgur.com/yUxNw0j.gif
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the Desktop.
The first time the tool is run, it makes also another log (Addition.txt).
The logs are large, upload them using Zippy ( No account/registration needed ) or upload to a site of your choosing. Give us the links please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif


Report •

#2
January 22, 2016 at 23:39:19
http://www35.zippyshare.com/v/mNaB4...
http://www35.zippyshare.com/v/ThcvR...

Here are the log files you requested. Thanks for taking a look...

message edited by danyzuko


Report •

#3
January 23, 2016 at 06:28:10
"Here are the log files you requested"
Ok, got them, going to bed now, shall go through them tomorrow, I'm hoping to get some clues from the error logs.

If you can go through them as well & see if anything looks suspect to your problem.

I'm here.
http://www.timeanddate.com/worldclo...


Report •

Related Solutions

#4
January 23, 2016 at 07:19:32
There are a few things there which don't look too friendly. While you are waiting for John, if you have the time run these three programs in the order given and paste the logs on here:

AdwCleaner:
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run the program. Use the "Scan" button, followed by the "Cleaning" button.

Junkware Removal Tool (JRT)
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run JRT. It might appear to have stopped at times or flash the screen but sit tight until it has finished.

MalwareBytes:
https://www.malwarebytes.org/
Download the free version.
Install and Run the program but before doing its Scan go to "Settings > Detection and Protection" and put a checkmark in "Scan for rootkits". Quarantine anything it finds.

Then repeat #1 and give us the links to the new logs. Hopefully this will move things on a bit.

Always pop back and let us know the outcome - thanks


Report •

#5
January 23, 2016 at 20:54:43
Thanks Derek,

danyzuko, I am just waiting to see the logs.


Report •

#6
January 23, 2016 at 21:38:16
Decided to carry on & post this, still would like to see the contents of the logs as requested by Derek.

Extract from the Addition log.

FirewallRules: [{90011E8F-8175-46B1-8245-2EC362B416A8}] => (Block) D:\Program Files (x86)\MacroRecorder\MacroRecorder.exe
FirewallRules: [{8F997F3F-A9AE-4F9B-8344-7D8678CF81B1}] => (Block) D:\Program Files (x86)\MacroRecorder\MacroLauncher.exe
FirewallRules: [{E0207884-08D2-4E10-9908-85D5AF66CF61}] => (Block) D:\Program Files\American Systems\EZ Macros\EZMacros.exe

Download Security Check by screen317 from one of the following links and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://screen317.spywareinfoforum.o...
http://screen317.changelog.fr/Secur...
Please restart the computer before running this security check..
* Double click SecurityCheck.exe. If you run Windows Vista or 7/8, right click and choose 'Run as Administrator'.
o If you are asked by Windows to run this program or not, please click 'Yes' or 'Run'.
o When you see a console window, press any key to continue scanning.
o Wait while it scans.
o If your firewall alerts you of Security Check, please press 'Allow' or similar.
* A Notepad document should open automatically after scan is completed. It will be called checkup.txt; Please Copy and Paste the contents into your reply.
Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

message edited by Johnw


Report •

#7
January 24, 2016 at 07:19:41
Sorry, I've been sick. Here are some log files after having followed your instructions. The AdwCleaner.log is after having run it 2nd time after restarts:
http://www93.zippyshare.com/v/8ytRe...
http://www93.zippyshare.com/v/4PTlh...
http://www93.zippyshare.com/v/KI5Sq...

In uninstalled the macro program EZMacro and will re-install. I did get this strange popup from WinPatrol: https://gyazo.com/798c6e3d31e5caaa8...
Not sure if that is something that is normal operations. Please advise...
I checked online and it seems as if that entry is a good thing. I checked the regedit in the [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UserInit"="C:\\WINDOWS\\system32\\userinit.exe,"

and found that the entry remains as the poster indicates is what the entry should appear as.

Well it seems a Success Guys. The macro program works now. Kudos to you both! I guess it was a PUP or other malware. Any thoughts are appreciated...

message edited by danyzuko


Report •

#8
January 24, 2016 at 13:26:37
"Any thoughts are appreciated"

"Here are some log files after having followed your instructions"
You sent Addition & FRST again.

"Junkware Removal Tool (JRT)"
Log please. Copy & Paste the contents in your reply.

"MalwareBytes:"
Log please. Copy & Paste the contents in your reply.

"Security Check by screen317"
Log please. Copy & Paste the contents in your reply.

message edited by Johnw


Report •

#9
January 24, 2016 at 20:16:56
Okay, I thought you wanted the FRST.txt and Addition.txt again, to follow up?
As for the checkup.txt you can see I got rid of the firewall blocks.
And the remaining 2 are JRT and AdwCleaner.

Maybe didn't do the uploads right last time, but I've been running everything off Desktop.
JRT.txt
http://www68.zippyshare.com/v/O9eoT...
AdwCleaner[C5].txt
http://www68.zippyshare.com/v/jyCEq...
checkup.txt
http://www68.zippyshare.com/v/ouAuP...
FRST.txt
http://www68.zippyshare.com/v/9G4uz...
Addition.txt
http://www68.zippyshare.com/v/SuYWT...


Report •

#10
January 24, 2016 at 20:23:50
"I got rid of the firewall blocks"
Very good.

Shall go through the logs now, back in about 1/2 an hour.


Report •

#11
January 24, 2016 at 20:36:41
Run DelFix. Copy & Paste the contents of the log please.
https://toolslib.net/downloads/view...
DelFix is designed to delete all removal tools used during a disinfection.
Indeed, these tools are often updated. It's recommended not to have and use outdated versions on computer.
Run the tool by right click on the DelFix icon and Run as administrator option.
Make sure that these are checked:
Activate UAC (optional; some users prefer to keep it off)
Remove disinfection tools
Create registry backup
Purge system restore
Reset system settings
Click Run and wait until the tool completes it's work.
Tool will create an report for you (C:\DelFix.txt)

Report •

#12
January 26, 2016 at 09:34:10
I'll need a few days on this. I just got slammed with a lot of work. I will post later this week.
Thank you

Report •

#13
January 29, 2016 at 21:47:51
Sorry, I finally got done with all my chores. :)
I did as you instructed except for the reseting system settings. I'm kind of uncomfortable with that being that this computer has a setup I would really like to keep in tact (with or without malware). I plan to install my income producing software onto another computer soon.
But for now it works like a dream other than that snafu you just helped me out of.

I checked all the other boxes except for the UAC as others probably do as well. I enable it on occasion.
http://www64.zippyshare.com/v/0FH60...
I thank you, for your help. I'm keeping this discussion for my records.

message edited by danyzuko


Report •

#14
January 29, 2016 at 21:57:35
Download the latest version and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Run Farbar again please, follow this SS & upload the 2 new logs.
http://i.imgur.com/i3fg3Pf.gif

Report •

Ask Question