Cannot Access Internet via IE Browser!!!

J

James

We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!
 
P

PA Bear

Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect
 
J

James

Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}

BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}

BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}

BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}

BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}

BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}

BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!
Click to expand...

.
Click to expand...
 
M

Mike Burgess

James,
The objects SpyBot detects in red can be removed,
items in green are optional ..... in your case the "BackWeb"
items seem to be for your Logitech device.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}

BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}

BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}

BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}

BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}

BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}

BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!
Click to expand...

.
Click to expand...
Click to expand...
 
J

James

Mike,

All the Spybot results posted below were in red - does that
mean I should delete them all?
I'm afraid I am rather worried about deleting something
important! Incidentally, we have a 'wire-free' keyboard and
mouse made by 'Logitech' - would they be affected by the
deletion of these items?

Thanks for your time.

James
-----Original Message-----
James,
The objects SpyBot detects in red can be removed,
items in green are optional ..... in your case the "BackWeb"
items seem to be for your Logitech device.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}

BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}

BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}

BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}

BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}

BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}

BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

James wrote:
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!

.
Click to expand...
Click to expand...


.
Click to expand...
 
M

Mike Burgess

James,
Best thing to do is to put those "detected objects" into the "Ignore list"
Highlight the item, right-click and select the desired option.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Mike,

All the Spybot results posted below were in red - does that
mean I should delete them all?
I'm afraid I am rather worried about deleting something
important! Incidentally, we have a 'wire-free' keyboard and
mouse made by 'Logitech' - would they be affected by the
deletion of these items?

Thanks for your time.

James
-----Original Message-----
James,
The objects SpyBot detects in red can be removed,
items in green are optional ..... in your case the "BackWeb"
items seem to be for your Logitech device.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}

BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}

BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}

BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}

BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}

BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}

BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}

BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)

HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}

BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}

BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}

BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}

BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}

BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)

HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}

BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)

HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}

BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}

BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}

BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)

HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}

BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot,
etc., before each
and every use, even "right out of the box". But even they
can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the
preferred tool to use.
It will help you to both identify and remove any
hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the
HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full
system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a
week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot,
HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

James wrote:
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are
told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!

.
Click to expand...


.
Click to expand...
Click to expand...
 
J

James

Me again Mike!

Finally managed to downlad a copy of CWShredder but I am
wary of 'Fixing the infected files' until I am sure what
they are(although the majority seem to relate to IE)! The
results were as follows - should I fix them all?

Thanks again:

Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer,Search
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer,SearchURL
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer,Search
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL
Infected data: http://in.webcounter.cc/-/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer\Main,Start
Page,about:blank
Infected data: http://in.webcounter.cc/-/?ydtfs
about:blank
(obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,Default_Search_URL
Infected data: http://www.searchv.com/search.html
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,SearchAssistant,http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch,http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP
Infected data: http://www.search-2003.com/
Found Hosts file: C:\WINDOWS\hosts (116 bytes, R)
Found CWS.Control (if filesize is over 50k) file:
C:\WINDOWS\control.exe (2144 bytes, A)
Registry value: Stylesheet (HKLM) [User Stylesheet]
C:\WINDOWS\hh.htt
Registry value: Stylesheet (HKCU) [User Stylesheet]
C:\WINDOWS\Web\tips.ini
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic]
http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (7937 bytes, A)
Found line in Win.ini: load=
Found line in Win.ini:
Run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSINFO;
Found System.ini file: C:\WINDOWS\system.ini (2205 bytes, A)
Found line in System.ini: shell=Explorer.exe
Winshow Registry key:
HKLM\..\BHOs\{6CC1C918-AE8B-4373-A5B4-28BA1851E39A}
CWS.Aff.Winshow Registry key: HKCU\Software\WinShow
Found file: C:\WINDOWS\winshow.dll (90112 bytes, -)

- END OF REPORT -
-----Original Message-----
James,
Best thing to do is to put those "detected objects" into the "Ignore list"
Highlight the item, right-click and select the desired option.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Mike,

All the Spybot results posted below were in red - does that
mean I should delete them all?
I'm afraid I am rather worried about deleting something
important! Incidentally, we have a 'wire-free' keyboard and
mouse made by 'Logitech' - would they be affected by the
deletion of these items?

Thanks for your time.

James
-----Original Message-----
James,
The objects SpyBot detects in red can be removed,
items in green are optional ..... in your case the "BackWeb"
items seem to be for your Logitech device.
Click to expand...
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}
BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}
BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}
BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}
BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}
BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}
BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}
BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}
BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}
BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}
BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}
BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}
BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}
BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}
BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}
BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}
BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}
BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}
BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot,
etc., before each
and every use, even "right out of the box". But even they
can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the
preferred tool to use.
It will help you to both identify and remove any
hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the
HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full
system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a
week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot,
HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

James wrote:
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are
told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!

.



.
Click to expand...
Click to expand...


.
Click to expand...
 
M

Mike Burgess

James,
Yes let CWShredder fix those objects as they are *all* coolwebsearch.
Then run SpyBot, then HijackThis
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

Me again Mike!

Finally managed to downlad a copy of CWShredder but I am
wary of 'Fixing the infected files' until I am sure what
they are(although the majority seem to relate to IE)! The
results were as follows - should I fix them all?

Thanks again:

Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer,Search
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer,SearchURL
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer,Search
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL
Infected data: http://in.webcounter.cc/-/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page
Infected data: http://acc.count-all.com/--/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet Explorer\Main,Start
Page,about:blank
Infected data: http://in.webcounter.cc/-/?ydtfs
about:blank
(obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,Default_Search_URL
Infected data: http://www.searchv.com/search.html
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,SearchAssistant,http://ie.search.msn.com/{SUB_RFC1766}/srcha
sst/srchasst.htm
Infected data: http://acc.count-all.com/---/?cxlow (obfuscated)
Infected Registry value:
HKLM\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch,http://ie.search.msn.com/{SUB_RFC1766}/srcha
sst/srchcust.htm
Infected data: http://in.webcounter.cc/--/?ydtfs (obfuscated)
Infected Registry value:
HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP
Infected data: http://www.search-2003.com/
Found Hosts file: C:\WINDOWS\hosts (116 bytes, R)
Found CWS.Control (if filesize is over 50k) file:
C:\WINDOWS\control.exe (2144 bytes, A)
Registry value: Stylesheet (HKLM) [User Stylesheet]
C:\WINDOWS\hh.htt
Registry value: Stylesheet (HKCU) [User Stylesheet]
C:\WINDOWS\Web\tips.ini
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic]
http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (7937 bytes, A)
Found line in Win.ini: load=
Found line in Win.ini:
Run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSINFO;
Found System.ini file: C:\WINDOWS\system.ini (2205 bytes, A)
Found line in System.ini: shell=Explorer.exe
Winshow Registry key:
HKLM\..\BHOs\{6CC1C918-AE8B-4373-A5B4-28BA1851E39A}
CWS.Aff.Winshow Registry key: HKCU\Software\WinShow
Found file: C:\WINDOWS\winshow.dll (90112 bytes, -)

- END OF REPORT -
-----Original Message-----
James,
Best thing to do is to put those "detected objects" into the "Ignore list"
Highlight the item, right-click and select the desired option.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

James said:
Mike,

All the Spybot results posted below were in red - does that
mean I should delete them all?
I'm afraid I am rather worried about deleting something
important! Incidentally, we have a 'wire-free' keyboard and
mouse made by 'Logitech' - would they be affected by the
deletion of these items?

Thanks for your time.

James
-----Original Message-----
James,
The objects SpyBot detects in red can be removed,
items in green are optional ..... in your case the "BackWeb"
items seem to be for your Logitech device.
Click to expand...
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 03-15-04]
Please post replies to this Newsgroup, email address is invalid
--

Have just run 'Spoybot - Search & Destroy 1.2' and it has
produced the following 53 problems - I'm afraid they don't
mean a whole lot to me...should I go ahead and 'Fix
Selected Problems'? (If so, is there a way of highlighting
them and fixing them all in one go)?

The results were as follows (Thanks in advance!):

BackWeb lite: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\BackWeb

BackWeb lite: Interface ( (IBackWebInfoPakCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}
BackWeb lite: Interface (
(IBackWebChannelVariableCollection)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStoryFieldCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{1D91D9E0-004B-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebSetup)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebCommSettings)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDownloadTimeConstraint))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}
BackWeb lite: Interface ( (IBackWebDialerSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebAlertSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}
BackWeb lite: Interface ( (IBackWebPlayer)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{8028B940-4932-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebChannelDownloadServices)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel4)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{AEE96320-2131-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebDirectory)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{15030BC0-0B52-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebStoryCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46422-FF61-11D0-9951-444553540000}
BackWeb lite: Interface ( (IBackWebInfoPak4_2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{610141C2-7701-11D1-B042-004095903824}
BackWeb lite: Interface ( (IBackWebChannelCollection4))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}
BackWeb lite: Interface (
(IBackWebStoryTableNotifications)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{44230BC0-3105-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebInfoPakNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}
BackWeb lite: Interface (
(IBackWebApplicationNotifications)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWeb4)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{740904E0-0BFB-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWeb)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebCommunications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{BAD37BC0-2231-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebGeneralSettings2))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}
BackWeb lite: Interface ( (IBackWebInfoPakFile)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebOpenInfoPakFile))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFileAccessViaDir))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFileAccess)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebInfoPakFilesCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDisplaySettings4_2))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}
BackWeb lite: Interface ( (IBackWebAllStoryCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46423-FF61-11D0-9951-444553540000}
BackWeb lite: Interface ( (IBackWebAllInfoPakCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{8131F530-649E-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWeb2)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}
BackWeb lite: Interface ( (IBackWebExtension)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}
BackWeb lite: Interface ( (IBackWebSetupNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebDirectoryNotifications))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebChannelTableNotifications)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}
BackWeb lite: Interface ( (IBackWebChannelCollection))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel4_2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}
BackWeb lite: Interface (
(IBackWebDirectoryEntryCollection)) (Registry key, nothing
done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebDirectoryEntry))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0C6E0440-0B50-11D1-9951-444553540000}
BackWeb lite: Interface (
(IBackWebInfoPakDownloadServices)) (Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel2)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}
BackWeb lite: Interface ( (IBackWebFilterSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}
BackWeb lite: Interface ( (IBackWebSetup4)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}
BackWeb lite: Interface ( (IBackWebDisplaySettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface (
(IBackWebDownloadTimeConstraintCollection)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}
BackWeb lite: Interface ( (IBackWebGeneralSettings))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStoryField)) (Registry
key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{5B1E13A0-004B-11D1-9951-444553540000}
BackWeb lite: Interface ( (IBackWebChannelVariable))
(Registry key, nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}
BackWeb lite: Interface ( (IBackWebInfoPak)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}
BackWeb lite: Interface ( (IBackWebChannel)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}
BackWeb lite: Interface ( (IBackWebStory)) (Registry key,
nothing done)
Click to expand...
HKEY_CLASSES_ROOT\Interface\{9DB46424-FF61-11D0-9951-444553540000}
BackWeb lite: Main executable (File, nothing done)
C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\backWeb-8876480.exe


--- Spybot-S&D version: 1.2 ---
2003-03-16 Includes\Temporary.sbi
2003-03-16 Includes\Cookies.sbi
2003-03-16 Includes\Dialer.sbi
2003-03-16 Includes\Hijackers.sbi
2003-03-16 Includes\Keyloggers.sbi
2003-03-16 Includes\Malware.sbi
2003-03-16 Includes\plugin-ignore.ini
2003-03-16 Includes\Security.sbi
2003-03-16 Includes\Spybots.sbi
2003-03-16 Includes\Tracks.uti
2003-03-16 Includes\Trojans.sbi
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot,
etc., before each
and every use, even "right out of the box". But even they
can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the
preferred tool to use.
It will help you to both identify and remove any
hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the
HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full
system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a
week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot,
HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

James wrote:
We have recently encountered problems accessing the
Internet via Explorer (We have Windows ME). Having deleted
two apparent Trojans we had picked up, we can no longer
launch Explorer. When double clicking on the icon we are
told :

'Microsoft Internet Explorer has encountered a problem and
needs to close. We are sorry for the inconvenience.'

When we try to 'Send Error Report' we are told

'Iexplore has caused an arror in KERNEL32.DLL
Iexplore will now close'

We have been using Mozilla as a browser in the meantime,
but cannot access many of our usual sites (ie. Internet
Banking) and are keen to return to Explorer.

Any help would be gratefully received!!

.



.
Click to expand...
Click to expand...


.
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

internet exp error 1
when closing IE6 error message comes up 1
Internet Explorer has encountered a problem and needs to close. W 5
IE constantly closing 1
Internet Explorer has ecountered a problem 2
IE7 1
IE Browser Appearance 2
Browser Wont Open 2

Top