Please help

[Jo]

I keep getting this error msg when trying to access
windows explorer, IE works fine just get the error when
using windows explorer... if you know how to fix it email
me at

EXPLORER caused an invalid page fault in
module <unknown> at 0000:07c7fc6e.
Registers:
EAX=0406c994 CS=0167 EIP=07c7fc6e EFLGS=00010246
EBX=025c5b10 SS=016f ESP=044dcc08 EBP=044dcc24
ECX=50002fa8 DS=016f ESI=025c5b18 FS=468f
EDX=044dcc18 ES=016f EDI=044dcf38 GS=0000
Bytes at CS:EIP:

Stack dump:
02465da1 0406c994 044dcc18 044dcc30 00000000 0406c994
0051113c 044dcc70 02465de2 044dcf38 025c5b18 00000000
0000062c 0000041c 00000003 044dcec0

[Bill Starbuck]

I would try running the System File Checker. Go to Start/Run and enter
"sfc".

Bill Starbuck (MVP)

[kimbo_]

Expect to get bombarded with spam. You should never post your real email
addy
Kim

"Jo" > wrote in message
...
> I keep getting this error msg when trying to access
> windows explorer, IE works fine just get the error when
> using windows explorer... if you know how to fix it email
> me at
>
> EXPLORER caused an invalid page fault in
> module <unknown> at 0000:07c7fc6e.
> Registers:
> EAX=0406c994 CS=0167 EIP=07c7fc6e EFLGS=00010246
> EBX=025c5b10 SS=016f ESP=044dcc08 EBP=044dcc24
> ECX=50002fa8 DS=016f ESI=025c5b18 FS=468f
> EDX=044dcc18 ES=016f EDI=044dcf38 GS=0000
> Bytes at CS:EIP:
>
> Stack dump:
> 02465da1 0406c994 044dcc18 044dcc30 00000000 0406c994
> 0051113c 044dcc70 02465de2 044dcf38 025c5b18 00000000
> 0000062c 0000041c 00000003 044dcec0

[Brian A.]

HijackThis appears to be the way to rid of this new parasite. Download/run HjThis.
DO NOT REMOVE ANYTHING EXCEPT WHAT IS SUGGESTED BELOW. HjThis will list many entries
that are needed as well as the bad ones. Do only as suggested below for removal of
this parasite and post as suggested below for further instructions on what is safe to
remove. By not following the instructions as specified may create even more problems.

From MVP Glen Ventura:
We are so far having luck with running Hijack This, marking this entry and clicking
the "Fix Checked" button:
O2 - BHO: Core Library -
{F281FFC7-6C63-4bf9-83F2-AB7A6157B109} -C:\WINDOWS\SYSTEM\KDP2928.DLL

Then find and delete the file KDP2928.DLL

Note that there may be other CLSIDs and file names listed for the BHO "Core
Library", and in that case those should be fixed and the associated file
deleted.
Newly added CLSID's to look for:
BHO "Core
Library":{D4D505DF-D582-400c-91B6-84921012AFE3} -C:\WINDOWS\SYSTEM\PDF1C3B.DLL

The manual removal instructions at:
http://www.pestpatrol.com/PestInfo/s/safeguardprotect.asp
cover all or most of the Safeguard variations, and should work for any of
the versions of that particular malware.

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, double-click
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save
Log" button. Press that, save the log somewhere you can find it (Desktop,
My Documents, or
similar). Most of what it lists will be harmless or even required, so do NOT
fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located here:
http://tomcoyote.com/hjt/
and an in-depth tutorial is here:
http://aumha.org/a/hjttutor.htm

--
Brian A.

Jack of all trades, Master of none.
One can never truly be a master as there is always more to learn.


"Jo" > wrote in message
...
> I keep getting this error msg when trying to access
> windows explorer, IE works fine just get the error when
> using windows explorer... if you know how to fix it email
> me at
>
> EXPLORER caused an invalid page fault in
> module <unknown> at 0000:07c7fc6e.
> Registers:
> EAX=0406c994 CS=0167 EIP=07c7fc6e EFLGS=00010246
> EBX=025c5b10 SS=016f ESP=044dcc08 EBP=044dcc24
> ECX=50002fa8 DS=016f ESI=025c5b18 FS=468f
> EDX=044dcc18 ES=016f EDI=044dcf38 GS=0000
> Bytes at CS:EIP:
>
> Stack dump:
> 02465da1 0406c994 044dcc18 044dcc30 00000000 0406c994
> 0051113c 044dcc70 02465de2 044dcf38 025c5b18 00000000
> 0000062c 0000041c 00000003 044dcec0