Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Explorer.exe Error

1 view
Skip to first unread message

Eric

unread,
May 27, 2009, 11:55:02 AM5/27/09
to
Does anyone have any suggestions on how to solve this Explorer.exe error?

AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085

Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Eric

PA Bear [MS MVP]

unread,
May 27, 2009, 12:07:01 PM5/27/09
to
There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

Gerry

unread,
May 27, 2009, 5:06:29 PM5/27/09
to
Bear

If you read the other post by Eric you may reach different conclusion.
User changes to the Registry could well be the cause.


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Gerry

unread,
May 27, 2009, 5:04:09 PM5/27/09
to
Eric

There are associations between security software and explorer.exe. Thus
in Process Explorer you will almost certainly see Kaspersky components
where explorer.exe is the parent and Kaspersky one of it;s children.

If you change the registry back to what it was was the chances are the
explorer error will go away.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

PA Bear [MS MVP]

unread,
May 27, 2009, 5:32:02 PM5/27/09
to
Which, if any, of these posts was by the Eric in this thread? =>
http://groups.google.com/groups/search?hl=en&as_q=&as_epq=&as_oq=&as_eq=&num=10&scoring=d&lr=&as_sitesearch=&as_qdr=&as_mind=1&as_minm=1&as_miny=2009&as_maxd=1&as_maxm=1&as_maxy=2009&as_ugroup=&as_usubject=&as_uauthors=eric%40discussions.microsoft.com&safe=off


Gerry wrote:
> Bear
>
> If you read the other post by Eric you may reach different conclusion.
> User changes to the Registry could well be the cause.
>
>
>

Gerry

unread,
May 27, 2009, 6:12:54 PM5/27/09
to
That's great Bear!. Throw me a haystack and expect me to find the
needle!

http://snurl.com/iwebh [www_technologyquestions_com]


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

PA Bear [MS MVP] wrote:

PA Bear [MS MVP]

unread,
May 27, 2009, 6:36:31 PM5/27/09
to
You don't even know what the needle looks like!

Again, how do you know someone posting from the
er...@discussions.microsoft.com alias is "the" Eric in question in any other
thread? You can't.

> That's great Bear!. Throw me a haystack and expect me to find the
> needle!
>
> http://snurl.com/iwebh [www_technologyquestions_com]
>

Gerry

unread,
May 27, 2009, 7:51:17 PM5/27/09
to
Well Bear it is one hell of a coincidence that Eric starts the first
thread at 16.46 and the second at 16.55 and both appear next to each
other in the Windows XP General newsgroup. Um I guess it might be a
coincidence as the headers are not matching.

--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

PA Bear [MS MVP] wrote:

PA Bear [MS MVP]

unread,
May 27, 2009, 9:40:14 PM5/27/09
to
Ask him if he's the same OP (and suggest that he stick to one thread...I'm
pretty sure I've run into this Eric in many threads in many newsgroups over
the past week or so).

Gerry wrote:
> Well Bear it is one hell of a coincidence that Eric starts the first
> thread at 16.46 and the second at 16.55 and both appear next to each
> other in the Windows XP General newsgroup. Um I guess it might be a
> coincidence as the headers are not matching.
>
>
>
>

Eric

unread,
May 27, 2009, 9:53:01 PM5/27/09
to
It seems to me that virus infected will be likely, because user does not know
anything about editing register, do you have any suggestions on how to fix it?
Thank everyone very much for any suggestions
Eric

Gerry

unread,
May 28, 2009, 1:50:46 AM5/28/09
to
Eric

Can you please post a complete copy of the Error Report?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

PA Bear [MS MVP]

unread,
May 28, 2009, 2:37:01 AM5/28/09
to
Backup your personal data, then do a format & clean install of Windows.
Please note that a Repair Install (AKA in-place upgrade) will NOT fix this!

After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a network and before using a USB key that
isn't brand-new or hasn't been freshly formatted:

5 steps to help protect your new computer before you go online
http://www.microsoft.com/protect/computer/advanced/xppc.mspx

Also see:

Steps To Help Prevent Spyware
http://www.microsoft.com/protect/computer/spyware/prevent.mspx


--
~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Client - since 2002


Eric wrote:
> It seems to me that virus infected will be likely, because user does not
> know anything about editing register, do you have any suggestions on how
> to
> fix it? Thank everyone very much for any suggestions

> <snip>

Eric

unread,
May 28, 2009, 3:22:01 AM5/28/09
to
Thank everyone very much for suggestions
This is the error message from Event Viewer.
[Error App] iexplore.exe,[Ver] 6.0.2900.2180,[Fail mod] gdi32.dll,[Version]
5.1.2600.3466,[Error Address] 0x00008089。
Do you have any suggestions?
Thank everyone very much for suggestions

Peter Foldes

unread,
May 28, 2009, 6:50:14 AM5/28/09
to
Eric
.

That is a virus from the message in the Event Viewer. All I can tell you is to do as
PA Bear posted do a format & clean install of Windows. Repair install will not get
rid of it and trying to find this rootkit is next to impossible and a waste of time


--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Eric" <Er...@discussions.microsoft.com> wrote in message
news:6195653C-2DDF-4206...@microsoft.com...

Tom Willett

unread,
May 28, 2009, 11:18:02 AM5/28/09
to
Contact the support desk of the game in question?

"dodds" <dodd...@hotmail.com> wrote in message
news:642f11c9df5543f4...@nntp-gateway.com...
:
: Everytime i play an online game, i get so far and the game just stops,
: the page freezes and i cant go any further, when I look up the error it
: says the the content is not supported. I'm at my wits end with this game
: and need to get it completed. Any suggestions?
:
:
: --
: dodds


Bob I

unread,
May 28, 2009, 11:27:33 AM5/28/09
to
Yes, please start your own thread, stating particulars AND the error you
receive.

dodds

unread,
May 28, 2009, 11:02:15 AM5/28/09
to

Everytime i play an online game, i get so far and the game just stops,
the page freezes and i cant go any further, when I look up the error it
says the the content is not supported. I'm at my wits end with this game
and need to get it completed. Any suggestions?


--
dodds

George

unread,
May 28, 2009, 3:24:14 PM5/28/09
to

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:uL8NZ$13JHA...@TK2MSFTNGP06.phx.gbl...

> Backup your personal data, then do a format & clean install of Windows.
> Please note that a Repair Install (AKA in-place upgrade) will NOT fix
> this!

Why did you come to this conclusion? Please teach me.

Eric

unread,
May 28, 2009, 7:50:01 PM5/28/09
to
Thank everyone very much for suggestions
Could you please tell me which message within the Event Viewer indicate
virus infection? Thank you very much for any suggestions
Eric

"Peter Foldes" wrote:

> Eric
> ..


>
> That is a virus from the message in the Event Viewer. All I can tell you is to do as
> PA Bear posted do a format & clean install of Windows. Repair install will not get
> rid of it and trying to find this rootkit is next to impossible and a waste of time
>
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
>
> "Eric" <Er...@discussions.microsoft.com> wrote in message
> news:6195653C-2DDF-4206...@microsoft.com...
> > Thank everyone very much for suggestions
> > This is the error message from Event Viewer.
> > [Error App] iexplore.exe,[Ver] 6.0.2900.2180,[Fail mod] gdi32.dll,[Version]

> > 5.1.2600.3466,[Error Address] 0x00008089??

PA Bear [MS MVP]

unread,
May 28, 2009, 9:54:52 PM5/28/09
to
Don't make this harder on yourself & stop wasting your time and our time,
Eric. Every single one of your many recent threads tells us that you've
been dealing with some sort of infection for a very long time.

Repost:

Backup your personal data, then do a format & clean install of Windows.
Please note that a Repair Install (AKA in-place upgrade) will NOT fix this!

After the clean install, you'll have the equivalent of a "new computer" so

take care of everything on the following page before otherwise connecting
the machine to the internet or a network and before using a USB key that
isn't brand-new or hasn't been freshly formatted:

5 steps to help protect your new computer before you go online
http://www.microsoft.com/protect/computer/advanced/xppc.mspx

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Eric wrote:
> Thank everyone very much for suggestions
> Could you please tell me which message within the Event Viewer indicate
> virus infection? Thank you very much for any suggestions

<snip>

Eric

unread,
May 29, 2009, 7:53:01 AM5/29/09
to
Thank everyone very very much for your time and valuable suggestions.
I just want to find out any other approach to quick identify whether
formating HDD is a must or not.
Thank everyone very much for any suggestions
Eric

"PA Bear [MS MVP]" wrote:

0 new messages