Problem with MSVCRT.DLL

[Kam]

I received the following messages when I open some of the
webpages. Not all website exhibit the same problem.

Does anyone encounter similar defect?

I am using Win98SE and IE6.0.2800.1106IC

-------------------------------------------------------
EXPLORER caused an invalid page fault in
module MSVCRT.DLL at 0167:780154a7.
Registers:
EAX=7803a152 CS=0167 EIP=780154a7 EFLGS=00010212
EBX=00000010 SS=016f ESP=04fbd104 EBP=04fbd114
ECX=0000be20 DS=016f ESI=70bfbe20 FS=1ab7
EDX=0fffffff ES=016f EDI=04fbd14e GS=0000
Bytes at CS:EIP:
66 8b 04 48 a8 04 74 5b 83 c1 d0 3b cb 73 7b 83
Stack dump:
04fbd1b8 70bff336 00000000 00000000 04fbd170 7801540c
04fbd14c 00000000 0000000f 00000000 70dd5aa1 04fbd14c
00000000 00000010 00000001 70dd5c08

 

[PA Bear]

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup > More options > Delete all but the most
recent Restore Point.

3. Check in at Windows Update.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Are You Ready for WinXP SP2?
http://support.microsoft.com/default.aspx?pr=windowsxpsp2

What You Should Know About Spyware
http://www.microsoft.com/athome/security/spyware/devioussoftware.mspx

AumHa Forums
http://forum.aumha.org