AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Eric
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**
If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
If you read the other post by Eric you may reach different conclusion.
User changes to the Registry could well be the cause.
--
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
There are associations between security software and explorer.exe. Thus
in Process Explorer you will almost certainly see Kaspersky components
where explorer.exe is the parent and Kaspersky one of it;s children.
If you change the registry back to what it was was the chances are the
explorer error will go away.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Gerry wrote:
> Bear
>
> If you read the other post by Eric you may reach different conclusion.
> User changes to the Registry could well be the cause.
>
>
>
http://snurl.com/iwebh [www_technologyquestions_com]
--
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
PA Bear [MS MVP] wrote:
Again, how do you know someone posting from the
er...@discussions.microsoft.com alias is "the" Eric in question in any other
thread? You can't.
> That's great Bear!. Throw me a haystack and expect me to find the
> needle!
>
> http://snurl.com/iwebh [www_technologyquestions_com]
>
>> Which, if any, of these posts was by the Eric in this thread? =>
>> http://groups.google.com/groups/search?hl=en&as_q=&as_epq=&as_oq=&as_eq=&num=10&scoring=d&lr=&as_sitesearch=&as_qdr=&as_mind=1&as_minm=1&as_miny=2009&as_maxd=1&as_maxm=1&as_maxy=2009&as_ugroup=&as_usubject=&as_uauthors=eric%40discussions.microsoft.com&safe=off
>>
--
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
PA Bear [MS MVP] wrote:
Gerry wrote:
> Well Bear it is one hell of a coincidence that Eric starts the first
> thread at 16.46 and the second at 16.55 and both appear next to each
> other in the Windows XP General newsgroup. Um I guess it might be a
> coincidence as the headers are not matching.
>
>
>
>
Can you please post a complete copy of the Error Report?
Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.
After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a network and before using a USB key that
isn't brand-new or hasn't been freshly formatted:
5 steps to help protect your new computer before you go online
http://www.microsoft.com/protect/computer/advanced/xppc.mspx
Also see:
Steps To Help Prevent Spyware
http://www.microsoft.com/protect/computer/spyware/prevent.mspx
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
Eric wrote:
> It seems to me that virus infected will be likely, because user does not
> know anything about editing register, do you have any suggestions on how
> to
> fix it? Thank everyone very much for any suggestions
> <snip>
That is a virus from the message in the Event Viewer. All I can tell you is to do as
PA Bear posted do a format & clean install of Windows. Repair install will not get
rid of it and trying to find this rootkit is next to impossible and a waste of time
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Eric" <Er...@discussions.microsoft.com> wrote in message
news:6195653C-2DDF-4206...@microsoft.com...
"dodds" <dodd...@hotmail.com> wrote in message
news:642f11c9df5543f4...@nntp-gateway.com...
:
: Everytime i play an online game, i get so far and the game just stops,
: the page freezes and i cant go any further, when I look up the error it
: says the the content is not supported. I'm at my wits end with this game
: and need to get it completed. Any suggestions?
:
:
: --
: dodds
--
dodds
Why did you come to this conclusion? Please teach me.
"Peter Foldes" wrote:
> Eric
> ..
>
> That is a virus from the message in the Event Viewer. All I can tell you is to do as
> PA Bear posted do a format & clean install of Windows. Repair install will not get
> rid of it and trying to find this rootkit is next to impossible and a waste of time
>
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
>
> "Eric" <Er...@discussions.microsoft.com> wrote in message
> news:6195653C-2DDF-4206...@microsoft.com...
> > Thank everyone very much for suggestions
> > This is the error message from Event Viewer.
> > [Error App] iexplore.exe,[Ver] 6.0.2900.2180,[Fail mod] gdi32.dll,[Version]
> > 5.1.2600.3466,[Error Address] 0x00008089??
Repost:
Backup your personal data, then do a format & clean install of Windows.
Please note that a Repair Install (AKA in-place upgrade) will NOT fix this!
After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a network and before using a USB key that
isn't brand-new or hasn't been freshly formatted:
5 steps to help protect your new computer before you go online
http://www.microsoft.com/protect/computer/advanced/xppc.mspx
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
Eric wrote:
> Thank everyone very much for suggestions
> Could you please tell me which message within the Event Viewer indicate
> virus infection? Thank you very much for any suggestions
<snip>
"PA Bear [MS MVP]" wrote: