Please Help - Internet Explorer

R

Roger MacInnis

I was using looking for info on the net, I got a message asking me if I
wanted to communicate with a sit, I clicked manually and clicked "Next" for
all the options and now I can't connect to the net with using Explorer, what
do I do?



This is the message I get:

"Microsoft Visual C++ Runtime Library

Runtime Error!



Program: C:\ProgramFiles\Internet Explorer\ieexplorer.exe



This application has requested the Runtime to terminate it in an unusual
way.

Please contact the application's support team for more information"



I am using Version 6.0.2800...
 
P

PA Bear

ieexplorer.exe = AdBlaster hijacker!
http://www.pestpatrol.com/pestinfo/a/adblaster.asp

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most
recent Restore Point.

3. Check in at Windows Update.
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx
 
R

Roger MacInnis

Thank you but I can't open my browser...

PA Bear said:
ieexplorer.exe = AdBlaster hijacker!
http://www.pestpatrol.com/pestinfo/a/adblaster.asp

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most
recent Restore Point.

3. Check in at Windows Update.
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Roger said:
I was using looking for info on the net, I got a message asking me if I
wanted to communicate with a sit, I clicked manually and clicked "Next"
for all the options and now I can't connect to the net with using
Explorer, what do I do?

This is the message I get:

"Microsoft Visual C++ Runtime Library
Runtime Error!
Program: C:\ProgramFiles\Internet Explorer\ieexplorer.exe
This application has requested the Runtime to terminate it in an unusual
way.
Please contact the application's support team for more information"

I am using Version 6.0.2800...
Click to expand...
Click to expand...
 
P

PA Bear

Try booting into Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
or open the links using another machine, Roger. You can download the
applications and save them to CD or floppies which can then be used to
install them on the problem machine. You can read and copy out or print the
info at PestPatrol.
--
~PA Bear

Roger said:
Thank you but I can't open my browser...

PA Bear said:
ieexplorer.exe = AdBlaster hijacker!
http://www.pestpatrol.com/pestinfo/a/adblaster.asp

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most
recent Restore Point.

3. Check in at Windows Update.
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Roger said:
I was using looking for info on the net, I got a message asking me if I
wanted to communicate with a sit, I clicked manually and clicked "Next"
for all the options and now I can't connect to the net with using
Explorer, what do I do?

This is the message I get:

"Microsoft Visual C++ Runtime Library
Runtime Error!
Program: C:\ProgramFiles\Internet Explorer\ieexplorer.exe
This application has requested the Runtime to terminate it in an unusual
way.
Please contact the application's support team for more information"

I am using Version 6.0.2800...
Click to expand...
Click to expand...
Click to expand...
 
P

PA Bear

[Posted & mailed. Please reply only to the newsgroup.]

Here you go, Roger:

cf. http://www.pestpatrol.com/pestinfo/a/adblaster.asp

Follow these steps to remove AdBlaster from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake! Close all running applications, including your anti-virus, and physically disconnect from the internet. [You may need to enable 'Show Hidden Files' and reboot into Safe Mode.]

1. Stop Running Processes:

Kill these running processes with Task Manager:

ieexplorer.exe

2. Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:

systemroot+\system\ngpw34.dll
systemroot+\system\ngsw31.dll

systemroot+\system32\ngpw34.dll
systemroot+\system32\ngsw31.dll
--------------------------------------------------------------------------------


Example:

Start > Run > Regsrv32 /u C:\WINDOWS\SYSTEM\ngpw34.dll > OK
[^^ with these spaces as you see them ^^]


--------------------------------------------------------------------------------


3. Clean Registry:

Start > Run > Regedit > ...find and delete these Registry keys, if found [take a deep breath!] :
HKEY_CLASSES_ROOT\clsid\{2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71}
HKEY_CLASSES_ROOT\clsid\{e9147a0a-a866-4214-b47c-da821891240f}
HKEY_CLASSES_ROOT\clsid\{eb6d8baa-704a-415b-bc0a-3468bfae924e}
HKEY_CLASSES_ROOT\iexplorr11.clsdw
HKEY_CLASSES_ROOT\iexplorr11.clsis
HKEY_CLASSES_ROOT\iexplorr22.clsdw
HKEY_CLASSES_ROOT\iexplorr22.clsis
HKEY_CLASSES_ROOT\interface\{0b60cef5-2431-4f92-82cf-03fee5bdc762}
HKEY_CLASSES_ROOT\interface\{7fb04de1-4340-4002-9d9e-3b6913ae6953}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{e9147a0a-a866-4214-b47c-da821891240f}
HKEY_CLASSES_ROOT\typelib\{b224aff4-0561-4b35-a91a-6f339152a482}
HKEY_CLASSES_ROOT\typelib\{d6862a20-1dd6-11d3-bb7c-444553540000}
HKEY_LOCAL_MACHINE\clsid\{2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71}
HKEY_LOCAL_MACHINE\clsid\{e9147a0a-a866-4214-b47c-da821891240f}
HKEY_LOCAL_MACHINE\software\classes\clsid\{2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71}
HKEY_LOCAL_MACHINE\software\classes\clsid\{e9147a0a-a866-4214-b47c-da821891240f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{e9147a0a-a866-4214-b47c-da821891240f}
4. Remove Files:

In Windows Explorer, find and delete these files, if found:
ieexplorer.exe <—this file
systemroot+\system\ngpw34.dll <—this file
systemroot+\system\ngsw31.dll <—this file
systemroot+\system32\ngpw34.dll <—this file
systemroot+\system32\ngsw31.dll <—this file
5. Now reset your chosen default homepage and search settings.

6. Assuming WinXP:

Start>Programs>Accessories>System Tools>System Restore>Create new restore point

then...

Start>Programs>Accessories>System Tools>Disk Cleanup>Other options
Delete all but the most recent restore point
Click to expand...

All should hopefully be well! Now, I strongly urge you to complete the "check for hijackware" protocols I posted earlier.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Runtime Error 2
HELP PLEASE 4
Runtime Error 2
Access to Internet Explorer 2
Runtime Error! 2
Runtime error when attempting to open IE6 3
i-explorer doesn't start up 3
Runtime Error! Program: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORER\IEXPLORER.E 1

Top