Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error  (Read 6229 times)

0 Members and 1 Guest are viewing this topic.

wizard

    Topic Starter


    Greenhorn

    then it says-The Instruction at "0x5ff3b322" referenced Memory
    at "0xffaf9fb6". The memory could not be "read". Click on
    OK to terminate the Program

    I have a dell using Windows XP service pack2, Updated to IExplorer 8
    I have followed the information in the forums and erased all cache, temp files,run CCleaner, Superspyware, Malwarebytes anti-malware, updated java and eliminated old versions, and ran Hijacker. I have all the logs below.The problem is still there. Can someone help ?   Logs \/
    « Last Edit: July 26, 2009, 04:05:25 PM by wizard »

    Karnac



      Specialist

      Thanked: 211
      Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
      « Reply #1 on: July 22, 2009, 06:41:47 PM »
      wizard,

      You can try self help while you are waiting for a specialist......

      Use the process tool here.....http://www.computerhope.com/cgi-bin/process.pl

      Enter your HJT log and follow the recommendations at the end...there are a number of HJT entries to remove.


      Never argue with a stupid person, they'll drag you down to their level and beat you with experience.

      harry 48



        Egghead

      • lay back , relax and chill out
      • Thanked: 129
        • Yes
        • Yes
        • Yes
        • Dribbling Pensioner
      • Certifications: List
      • Experience: Familiar
      • OS: Windows 7
      Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
      « Reply #2 on: July 23, 2009, 05:34:46 AM »
      run your mbam again to give a clean log for the expert , but LEAVE the old log for him to see


      you need to get rid of askbar and bearshare BUT wait for an expert to guide you
      « Last Edit: July 23, 2009, 05:51:34 AM by harry 48 »

      wizard

        Topic Starter


        Greenhorn

        Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
        « Reply #3 on: July 23, 2009, 07:27:16 PM »
         I ran Hijack this utility and followed it's recommendation to remove 7 items. It removed 6. the remaining one I believe could be my problem, but I cannot remove it with the Hijackthis utility or log tool. I ran a second Hijack this and I will post it, the only recommendation this time to remove is the one I could not remove from the first scan. Here is the one I can't remove and under it the 2nd Hijack log. Suggestions?

        r0 - hklm\software\microsoft\internet explorer\main,start page = about:blank
        « Last Edit: July 26, 2009, 04:06:16 PM by wizard »

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
        « Reply #4 on: July 23, 2009, 08:02:27 PM »
        Download DDS from |HERE| or |HERE| or |HERE| and save it to your desktop.

        Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

        * XP users Double click on dds to run it.
        * If your antivirus or firewall try to block DDS then please allow it to run.
        * When finished DDS will open two (2) logs.

        1) DDS.txt
        2) Attach.txt

        * Save both logs to your desktop.
        * Please copy and paste the entire contents of both logs in your next reply.

        Note: DDS will instruct you to post the Attach.txt log as an attachment.
        Please just post it as you would any other log by copy and pasting it into the reply.

        wizard

          Topic Starter


          Greenhorn

          Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
          « Reply #5 on: July 24, 2009, 08:15:05 PM »
            OK done, Here are the 2 logs.

          Thank you for any help

          UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
          IF REQUESTED, ZIP IT UP & ATTACH IT

          DDS (Ver_09-06-26.01)

          « Last Edit: July 26, 2009, 04:07:27 PM by wizard »

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
          « Reply #6 on: July 24, 2009, 08:42:50 PM »
          Go to Add or Remove Programs and uninstall: (if found)

          • Ask Toolbar
          • AutoUpdate
          • Registry Easy v5.1 > See here
          • Spyware Begone > See here
          • Viewpoint Manager (Remove Only)
          .
          ----------

          Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop.

          Link #1
          Link #2

          **Note:  It is important that it is saved directly to your Desktop

          DO NOT run it yet!

          Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

          Delete these files/folders, as follows:

          1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
          It must be Notepad, not Wordpad.
          2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

          Code: [Select]
          KillAll::

          DDS::
          mDefault_Search_URL =
          mSearch Page =
          mStart Page = about:blank
          BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
          TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
          TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
          EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
          EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
          uRun: [MsnMsgr] "c:\program files\msn messenger\MsnMsgr.Exe" /background
          uRun: [Spyware Begone] "c:\spywarebegone\SpywareBeGone.exe" -FastScan

          Folder::
          C:\spywarebegone
          c:\program files\askbardis

          3. Go to the Notepad window and click Edit > Paste
          4. Then click File > Save
          5. Name the file CFScript.txt - Save the file to your Desktop
          6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



          ComboFix will begin to execute, just follow the prompts.
          After reboot (in case it asks to reboot), it will produce a log for you.
          Post that log (Combofix.txt) in your next reply.

          Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze

          wizard

            Topic Starter


            Greenhorn

            Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
            « Reply #7 on: July 25, 2009, 01:17:03 AM »
             During Add or Remove Programs all were found and removed EXCEPT "AutoUpdate"
            It could not be located.

            Followed all your instructions and the Combofix Log is below. Thank you, Awaiting your direction. Wizard

            « Last Edit: July 26, 2009, 04:08:40 PM by wizard »

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
            « Reply #8 on: July 25, 2009, 10:03:31 AM »
            * Click START then RUN - Vista users press the Windows Key and the R keys for the Run box.
            * Now type Combofix /u in the runbox
            * Make sure there's a space between Combofix and /u
            * Then hit Enter

            * The above procedure will:
            * Delete the following:
            * ComboFix and its associated files and folders.
            * Reset the clock settings.
            * Hide file extensions, if required.
            * Hide System/Hidden files, if required.
            * Set a new, clean Restore Point.

            ----------

            Clean out your temporary internet files and temp files.

            Download TFC by OldTimer to your desktop.

            Double-click TFC.exe to run it.

            Note: If you are running on Vista, right-click on the file and choose Run As Administrator

            TFC will close all programs when run, so make sure you have saved all your work before you begin.

            * Click the Start button to begin the cleaning process.
            * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
            * Please let TFC run uninterrupted until it is finished.

            Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.

            ----------

            Use the Kaspersky Lab Online Scanner

            In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.

            • Click on SCAN NOW
            • Click Accept.
            • The program will then begin downloading the latest definition files.
            • Once the files have been downloaded locate the Scan Settings and have it scan My Computer.
            • The scan will take a while, so be patient and let it finish.
            When the scan is done, in the Scan is complete window, any infection is displayed.
            There is no option to clean/disinfect, however, we need to analyze the information on the report.

            To obtain the report:
            Click on: Save Report As
            • Next, in the Save as prompt, Save in area, select: Desktop.
            • In the File name area use KScan, or something similar.
            • In Save as type: click the drop arrow and select: Text file [*.txt]
            • Then, click: Save


            Copy and paste the Kaspersky Online Scanner Report in your next reply.

            Note for Internet Explorer 7 and 8 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.

            If needed, this animation will guide you through the process.

            wizard

              Topic Starter


              Greenhorn

              Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
              « Reply #9 on: July 25, 2009, 10:23:04 PM »

                 OK, all steps done and the KScan log below with 2 infections but it says not a virus.
              WOW over 3 hours to scan. but it found something. Thank you, what next?

              KASPERSKY ONLINE SCANNER 7.0 REPORT
               Saturday, July 25, 2009
               Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
               Kaspersky Online Scanner  version: 7.0.26.13
               Program database last update: Sunday, July 26, 2009 01:25:19
               Records in database: 2533165
              --------------------------------------------------------------------------------

              Scan settings:
                 Scan using the following database: extended
                 Scan archives: yes
                 Scan mail databases: yes

              Scan area - My Computer:
                 A:\
                 C:\
                 D:\
                 E:\

              Scan statistics:
                 Files scanned: 103196
                 Threat name: 1
                 Infected objects: 2
                 Suspicious objects: 0
                 Duration of the scan: 03:07:04


              File name / Threat name / Threats count
              C:\Program Files\MUSICMATCH\Common\ComponentMgr\HoldingArea\WebSys\WebSys.mmz   Infected: not-a-virus:RiskTool.Win32.Deleter.f   1
              C:\Program Files\MUSICMATCH\Musicmatch Jukebox\WebSys\offline.mmz   Infected: not-a-virus:RiskTool.Win32.Deleter.f   1

              The selected area was scanned.

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
              « Reply #10 on: July 26, 2009, 08:32:45 AM »
              Start Malwarebytes and go to the More Tools tab.  There you'll find a button named Run Tool to run FileASSISSIN.

              Then browse to this file: C:\Program Files\MUSICMATCH\Common\ComponentMgr\HoldingArea\WebSys\WebSys.mmz

              Select that file and click OK, then Yes to remove it.

              Also find and delete C:\Program Files\MUSICMATCH\Musicmatch Jukebox\WebSys\offline.mmz with FileASSASSIN.

              ----------

              If everything is running OK now then we can finish up.

              Use the Secunia Software Inspector to check for out of date software.
              • Click Start Now
              • Check the box next to Enable thorough system inspection.
              • Click Start
              • Allow the scan to finish and scroll down to see if any updates are needed.
              • Update anything listed.
              .
              ----------

              Go to Microsoft Windows Update and get all critical updates.

              ----------

              I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

              SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
              * Using SpywareBlaster to protect your computer from Spyware and Malware
              * If you don't know what ActiveX controls are, see here

              Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

              Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

              Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

              wizard

                Topic Starter


                Greenhorn

                Re: Can't get rid of it/ Virus causing IEXPLORE.EXE - Application Error
                « Reply #11 on: July 26, 2009, 07:47:40 PM »

                 Done!!, and it appears all is well. I can't thank you enough Evilfantasy for your help. Many High fives. :)