There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected* and/or
your subscription has since expired and/or the machine's not been
kept fully-patched at Windows Update, don't waste your time with any
of the below: Format & reinstall Windows. A Repair Install will NOT
help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download
the MSRT on a non-infected machine, then transfer MRT.EXE to the
infected machine and rename it to SCAN.EXE before running it.
2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's
'Protection' scan (only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA) computer repair
shop.
Eric said:Does anyone have any suggestions on how to solve this Explorer.exe
error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Bear
If you read the other post by Eric you may reach different conclusion.
User changes to the Registry could well be the cause.
There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected* and/or
your subscription has since expired and/or the machine's not been
kept fully-patched at Windows Update, don't waste your time with any
of the below: Format & reinstall Windows. A Repair Install will NOT
help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download
the MSRT on a non-infected machine, then transfer MRT.EXE to the
infected machine and rename it to SCAN.EXE before running it.
2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's
'Protection' scan (only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA) computer repair
shop.
Eric said:Does anyone have any suggestions on how to solve this Explorer.exe
error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Which, if any, of these posts was by the Eric in this thread? =>
http://groups.google.com/groups/[email protected]&safe=off
Bear
If you read the other post by Eric you may reach different
conclusion. User changes to the Registry could well be the cause.
There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected*
and/or your subscription has since expired and/or the machine's not
been kept fully-patched at Windows Update, don't waste your time
with any of the below: Format & reinstall Windows. A Repair
Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download
the MSRT on a non-infected machine, then transfer MRT.EXE to the
infected machine and rename it to SCAN.EXE before running it.
2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's
'Protection' scan (only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA) computer repair
shop.
Eric wrote:
Does anyone have any suggestions on how to solve this Explorer.exe
error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
That's great Bear!. Throw me a haystack and expect me to find the
needle!
http://snurl.com/iwebh [www_technologyquestions_com]
Which, if any, of these posts was by the Eric in this thread? =>
http://groups.google.com/groups/[email protected]&safe=off
If you read the other post by Eric you may reach different
conclusion. User changes to the Registry could well be the cause.
PA Bear [MS MVP] wrote:
There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected*
and/or your subscription has since expired and/or the machine's not
been kept fully-patched at Windows Update, don't waste your time
with any of the below: Format & reinstall Windows. A Repair
Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download
the MSRT on a non-infected machine, then transfer MRT.EXE to the
infected machine and rename it to SCAN.EXE before running it.
2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's
'Protection' scan (only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA) computer repair
shop.
Eric wrote:
Does anyone have any suggestions on how to solve this Explorer.exe
error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
You don't even know what the needle looks like!
Again, how do you know someone posting from the
(e-mail address removed) alias is "the" Eric in question in any
other thread? You can't.
That's great Bear!. Throw me a haystack and expect me to find the
needle!
http://snurl.com/iwebh [www_technologyquestions_com]
Which, if any, of these posts was by the Eric in this thread? =>
http://groups.google.com/groups/[email protected]&safe=off
If you read the other post by Eric you may reach different
conclusion. User changes to the Registry could well be the cause.
PA Bear [MS MVP] wrote:
There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected*
and/or your subscription has since expired and/or the machine's
not been kept fully-patched at Windows Update, don't waste your
time with any of the below: Format & reinstall Windows. A Repair
Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to
download the MSRT on a non-infected machine, then transfer
MRT.EXE to the infected machine and rename it to SCAN.EXE before
running it. 2. [WinXP ONLY!! =>] Run the Windows Live Safety
Center's
'Protection' scan (only!) in Safe Mode with Networking, if need
be: http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a
local, reputable and independent (i.e., not BigBoxStoreUSA)
computer repair shop.
Eric wrote:
Does anyone have any suggestions on how to solve this
Explorer.exe error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Well Bear it is one hell of a coincidence that Eric starts the first
thread at 16.46 and the second at 16.55 and both appear next to each
other in the Windows XP General newsgroup. Um I guess it might be a
coincidence as the headers are not matching.
You don't even know what the needle looks like!
Again, how do you know someone posting from the
(e-mail address removed) alias is "the" Eric in question in any
other thread? You can't.
That's great Bear!. Throw me a haystack and expect me to find the
needle!
http://snurl.com/iwebh [www_technologyquestions_com]
Which, if any, of these posts was by the Eric in this thread? =>
http://groups.google.com/groups/[email protected]&safe=off
If you read the other post by Eric you may reach different
conclusion. User changes to the Registry could well be the cause.
PA Bear [MS MVP] wrote:
There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the
subscription had expired *when the machine first got infected*
and/or your subscription has since expired and/or the machine's
not been kept fully-patched at Windows Update, don't waste your
time with any of the below: Format & reinstall Windows. A Repair
Install will NOT help!
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to
download the MSRT on a non-infected machine, then transfer
MRT.EXE to the infected machine and rename it to SCAN.EXE before
running it. 2. [WinXP ONLY!! =>] Run the Windows Live Safety
Center's
'Protection' scan (only!) in Safe Mode with Networking, if need
be: http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a
local, reputable and independent (i.e., not BigBoxStoreUSA)
computer repair shop.
Eric wrote:
Does anyone have any suggestions on how to solve this
Explorer.exe error? AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Eric said:Thank everyone very much for suggestions
This is the error message from Event Viewer.
[Error App] iexplore.exe，[Ver] 6.0.2900.2180，[Fail mod] gdi32.dll，[Version]
5.1.2600.3466，[Error Address] 0x00008089。
Do you have any suggestions?
Thank everyone very much for suggestions
Eric
Gerry said:Eric
Can you please post a complete copy of the Error Report?
Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
PA Bear said:Backup your personal data, then do a format & clean install of Windows.
Please note that a Repair Install (AKA in-place upgrade) will NOT fix
this!
Peter Foldes said:Eric
..
That is a virus from the message in the Event Viewer. All I can tell you is to do as
PA Bear posted do a format & clean install of Windows. Repair install will not get
rid of it and trying to find this rootkit is next to impossible and a waste of time
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
Eric said:Thank everyone very much for suggestions
This is the error message from Event Viewer.
[Error App] iexplore.exe，[Ver] 6.0.2900.2180，[Fail mod] gdi32.dll，[Version]
5.1.2600.3466，[Error Address] 0x00008089??
Do you have any suggestions?
Thank everyone very much for suggestions
Eric
Gerry said:Eric
Can you please post a complete copy of the Error Report?
Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Eric wrote:
It seems to me that virus infected will be likely, because user does
not know anything about editing register, do you have any suggestions
on how to fix it? Thank everyone very much for any suggestions
Eric
:
Eric
There are associations between security software and explorer.exe.
Thus in Process Explorer you will almost certainly see Kaspersky
components where explorer.exe is the parent and Kaspersky one of
it;s children.
If you change the registry back to what it was was the chances are
the explorer error will go away.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Eric wrote:
Does anyone have any suggestions on how to solve this Explorer.exe
error?
AppName: explorer.exe
AppVer: 6.0.2900.3158
ModName: unknown
ModVer: 0.0.0.0
Offset: 00cc1085
Does anyone have any suggestions on how to solve it?
Thanks in advance for any suggestions
Eric
<snip>Thank everyone very much for suggestions
Could you please tell me which message within the Event Viewer indicate
virus infection? Thank you very much for any suggestions
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.