IE6 crash... soproc.exe?

G

Guest

IE6 (XP SP2) been experiencing intermittent crashes
At startup I get the following message: “Windows cannot find
'C:\PROGRA~1\SOFTWA~1\soproc.exe'. Make sure you typed the name correctly,
and then try again. To search for a file...â€
 
D

David H. Lipman

From: "product53" <[email protected]>

| IE6 (XP SP2) been experiencing intermittent crashes
| At startup I get the following message: “Windows cannot find
| 'C:\PROGRA~1\SOFTWA~1\soproc.exe'. Make sure you typed the name correctly,
| and then try again. To search for a file...”


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

* SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon
http://www.definitivesolutions.com/bhodemon.htm

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *
 
G

Guest

Thanks for the advice… I got Spybot, and I already have Ad-aware. Spybot
found a bunch of files. I have been running multiple anti-virus programs;
CA, Avast, Multi Cleaner - along with Microsoft antispyware. I followed the
procedures recommended by Microsoft Online Crash Analysis. So far no
problems, IE seems to be working well. I still get the soproc message at
start-up though. I was curious to know more about Multi AV... It seems
like each application finds something different and if soproc survived all
these different scans, than there must still be something still on my system.

David H. Lipman said:
From: "product53" <[email protected]>

| IE6 (XP SP2) been experiencing intermittent crashes
| At startup I get the following message: “Windows cannot find
| 'C:\PROGRA~1\SOFTWA~1\soproc.exe'. Make sure you typed the name correctly,
| and then try again. To search for a file...â€


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

* SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon
http://www.definitivesolutions.com/bhodemon.htm

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *
 
D

David H. Lipman

From: "product53" <[email protected]>

| Thanks for the advice… I got Spybot, and I already have Ad-aware. Spybot
| found a bunch of files. I have been running multiple anti-virus programs;
| CA, Avast, Multi Cleaner - along with Microsoft antispyware. I followed the
| procedures recommended by Microsoft Online Crash Analysis. So far no
| problems, IE seems to be working well. I still get the soproc message at
| start-up though. I was curious to know more about Multi AV... It seems
| like each application finds something different and if soproc survived all
| these different scans, than there must still be something still on my system.

I hope that was Ad-aware SE v1.06 and SpyBot S&D v1.4. If they are older versiosn, they
should be removed and the latter versions installed and updated.

I don't understand what you want to know about the Multi AV Scanning tool. It is a front
end to four different anti virus scanners. It is scripted and contains several fixes to
modifications that malware do to the OS,.

For example, if this EXE is being chained off the Shell then it will be corrected.

I suggested two things.

1. Run the Multi AV scanner with at least the McAfee module

2. Run MSCONFIG and go to the StartUp tab. Look for some line item that loads
'C:\PROGRA~1\SOFTWA~1\soproc.exe' and disable that line item.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top