explorer error after virus/spyware clean up

[Anthony Ewell]

Hi All,

I spent 3-1/2 hours at a customer's site cleaning out
virtually every virus and spyware/malware known to mankind.
The only error message I was ultimately unable to correct was
on Windows Explorer (explorer.exe). So, not being to proud,
I thought I'd ask for help.

Whenever I click on the explorer icon to start it, or
click on a folder shortcut on the desktop to open it, I
get a small pop up that says "error!". The title on the
pop up is "explorer". The only action is to click "okay".
On clicking it, Explorer functions normally.

I figure it is a leftover spyware parameter, tacked on
to Explorer somewhere in the registry, but darned if I can
find it. Anyone have any ideas?

Many thanks,
--Tony

 

[Guest]

Hi All,

I spent 3-1/2 hours at a customer's site cleaning out
virtually every virus and spyware/malware known to mankind.
The only error message I was ultimately unable to correct was
on Windows Explorer (explorer.exe). So, not being to proud,
I thought I'd ask for help.

Whenever I click on the explorer icon to start it, or
click on a folder shortcut on the desktop to open it, I
get a small pop up that says "error!". The title on the
pop up is "explorer". The only action is to click "okay".
On clicking it, Explorer functions normally.

I figure it is a leftover spyware parameter, tacked on
to Explorer somewhere in the registry, but darned if I can
find it. Anyone have any ideas?

Many thanks,
--Tony

You may have quarantined one too many items. Review carefully, and reintall
the obvious one.

 

[Anthony Ewell]

:



You may have quarantined one too many items. Review carefully, and reintall
the obvious one.

I erased everything in quarantine, as well as recycled and %temp%. What
do you mean by "the obvious one?"

--Tony

 

[Guest]

Why would you want to delete something that has to do with windows anyway?

 

[Anthony Ewell]

:

Why would you want to delete something that has to do with
windows anyway?

Karl,

You are confusing me. All I want is for explorer.exe to
start without the "Error!" pop up message. Where did you
get the idea that I wanted to delete something?

--Tony

 

[Kelly]

Hi Anthony,

Without knowing which cleaners you have used, run this combo then post back.
Good luck!

Run Ad-Aware SE, Spybot and HijackThis:
http://www.majorgeeks.com/downloads31.html

Note: Update each program, once installed, before running.

Note2: To avoid the False-Flag for the DSO Exploit (W3), open
Spybot/Advanced Mode/Settings/Ignore Products. On the All Products Tab,
scrol to DSO Exploit and check that item only. Randy (silj)

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp

/taskbarplus!.htm

 

[Anthony Ewell]

Hi Anthony,

Without knowing which cleaners you have used, run this combo then post back.
Good luck!

Run Ad-Aware SE, Spybot and HijackThis:
http://www.majorgeeks.com/downloads31.html

Note: Update each program, once installed, before running.

Note2: To avoid the False-Flag for the DSO Exploit (W3), open
Spybot/Advanced Mode/Settings/Ignore Products. On the All Products Tab,
scrol to DSO Exploit and check that item only. Randy (silj)

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp

Hi Kelly,

I used Ad-aware SE and Trend's PC-cillin. Plus I booted safe mode
and hand removed gobs of stuff from the Programs Files
directory and the system32 directory. I also pruned their
start ups from the registry. The customer must have had
over a hundred infections.

Unfortunately, I will not have access to the customer's
computer for a couple of months.

I love the Trend's House Call too. But, didn't use it as
I sold him PC-cillin to replace his defunct McAfee.

Speaking of House Call, it would be nice if they would
start supporting the Firefox browser. IE is typically too corrupted
to use in these circumstances. (Click on IE and the screen fills
up with so many pop ups that the computer freezes. If it survives
the initial pop ups, you can not get it to go to a specific address
without being diverted to a porn site, etc..)

I appreciate the tips,

Many thanks
--Tony

 

[David H. Lipman]

You don't need to use a browser with TrendMicro sysclean which uses the SAME Pattern Files
as the online scanner.


Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Dave




| Kelly wrote:
| > Hi Anthony,
| >
| > Without knowing which cleaners you have used, run this combo then post back.
| > Good luck!
| >
| > Run Ad-Aware SE, Spybot and HijackThis:
| > http://www.majorgeeks.com/downloads31.html
| >
| > Note: Update each program, once installed, before running.
| >
| > Note2: To avoid the False-Flag for the DSO Exploit (W3), open
| > Spybot/Advanced Mode/Settings/Ignore Products. On the All Products Tab,
| > scrol to DSO Exploit and check that item only. Randy (silj)
| >
| > Free Online Virus Scan
| > http://housecall.trendmicro.com/housecall/start_corp.asp
| >
|
|
| Hi Kelly,
|
| I used Ad-aware SE and Trend's PC-cillin. Plus I booted safe mode
| and hand removed gobs of stuff from the Programs Files
| directory and the system32 directory. I also pruned their
| start ups from the registry. The customer must have had
| over a hundred infections.
|
| Unfortunately, I will not have access to the customer's
| computer for a couple of months.
|
| I love the Trend's House Call too. But, didn't use it as
| I sold him PC-cillin to replace his defunct McAfee.
|
| Speaking of House Call, it would be nice if they would
| start supporting the Firefox browser. IE is typically too corrupted
| to use in these circumstances. (Click on IE and the screen fills
| up with so many pop ups that the computer freezes. If it survives
| the initial pop ups, you can not get it to go to a specific address
| without being diverted to a porn site, etc..)
|
| I appreciate the tips,
|
| Many thanks
| --Tony
|
|
| --
| -------------------------
| I Fish. Therefore, I am.
| -------------------------

 

[Kelly]

Most welcome, Tony. Thanks for the great feedback and good luck! Keep us
posted when you get the system back.

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com