Error pop-ups

[TylerGenome]

Every time my computer boots or shuts down, I get the
following in a pop-up:

"module KERNEL32.DLL at 017f:bff9db61.
Registers:
EAX=c00309c4 CS=017f EIP=bff9db61 EFLGS=00010212
EBX=0093ff88 SS=0187 ESP=008ffe7c EBP=00900118
ECX=00000000 DS=0187 ESI=00900268 FS=199f
EDX=bff76855 ES=0187 EDI=0093ff74 GS=0000
Bytes at CS:EIP:
53 8b 15 e4 9c fc bf 56 89 4d e4 57 89 4d dc 89
Stack dump:"

It shows up even if IE 6.0 has not been running. I have
been getting these pop-ups for several months and I don't
recall changing any configurations that would have started
this.

It seems that I can click through the pop-ups and the
browser works normally, as do other programs. I have IE
set-up to reject cookies and have turned off ActiveX
controls as a defense against bots and spyware.

 

[H Leboeuf]

It's probably malware.

From: "M. Spyridakis":
I get the following message when I close "My Computer" after transferring
files from floppy to HD.
"Explorer caused an invalid page fault in module KERNEL32.DLL at
017f:bff9db61." Any ideas
How the problem was solved?
It was the PDM.DLL file that was causing the problem. He changed it to
PDM.OLD and the IPF disappeared.


From: "mister UB"
I cannot open folders with windows explorer. I get error message, The
program has performed an illegal operation. Details: Explorer caused Invalid
Page Fault in module KERNEL32.dll at 0167:bff9db61
This occurred after I uninstalled KAZAA that someone put on my machine.
Parasite, Kazaa removal instructions. Search the site for KAZAA
http://inetexplorer.mvps.org/
--

Malware removal.

Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

If this clears your problem then find out who the culprit(s) is/are with
these tools.

Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com

If you use a HOSTS file, beware of this new issue.
Ad-Aware has decided to include a new detection when scanning the HOSTS
file. This now creates a "Bad hosts file entry" in the log file generated at
the end of a scan. The best thing to do is to place a check in each entry,
right-click and select: "Add selection to ignorelist". Otherwise if you let
AWW "fix" these items it will trash the HOSTS file! Even if you have it
"locked" by [example] SpywareBlaster or Winpatrol. It does not return the
attributes and renames the HOSTS file incorrectly to hosts.

and:

SpyBot-S&D
http://security.kolla.de/

p.s Reset the 3rd party browser setting.

More: This may be caused by a third-party program (adware, spyware,
parasite).
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Additional link:
http://aumha.org/a/quickfix.htm

You may need this removal tool.
More: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html
More: Removal tool: http://www.spywareinfo.com/~merijn/files/CWShredder.exe

CWShredder - Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47

IMPORTANT:
Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware may kill your internet connection when it is
removed, this program will enable you to regain your connection.
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP)


Important: "So how did I get infected in the first place?"
http://forums.net-integration.net/index.php?showtopic=3051


Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===