PDA

View Full Version : Windows explorer


Dwayne
May 31st 04, 01:03 PM
Hi.
When i try to run explorer it tells me"attempted to access
memory that does not exist" is this a common problem?
windows explorer works in safe mode. I cant run anything
that uses explorer. example "My Computer"

Rick T
May 31st 04, 10:45 PM
Dwayne wrote:

> Hi.
> When i try to run explorer it tells me"attempted to access
> memory that does not exist" is this a common problem?
> windows explorer works in safe mode. I cant run anything
> that uses explorer. example "My Computer"

That's a very uncommon problem. What changes did you make to your system
around the same time you started getting those messages.



Rick

Dwayne
June 1st 04, 12:20 AM
I really don't remember doing anything different. I ran
stinger and BHODemon, that fixed the problem but when i
turned the computer on later to use again the problem was
back??

Dwayne
>-----Original Message-----
>Dwayne wrote:
>
>> Hi.
>> When i try to run explorer it tells me"attempted to
access
>> memory that does not exist" is this a common problem?
>> windows explorer works in safe mode. I cant run
anything
>> that uses explorer. example "My Computer"
>
>That's a very uncommon problem. What changes did you make
to your system
>around the same time you started getting those messages.
>
>
>
>Rick
>.
>

Rick T
June 1st 04, 02:24 AM
First run Stinger and BHODemon again to see what they catch; this at
least will identify the problem, which apparently is pestware of some sort.

A couple more pest-control programs which should cover what the 2 you
have don't ...

free for personal use antivirus tool:
http://www.grisoft.com/us/us_dwnl_free.php

free for personal use spybot/adware detection & removal tools:
http://www.safer-networking.org/
http://www.lavasoftusa.com/

But do check using your original programs to see what's returned. (to
satisfy my curiousity if nothing else <g>)



Rick



Dwayne wrote:
> I really don't remember doing anything different. I ran
> stinger and BHODemon, that fixed the problem but when i
> turned the computer on later to use again the problem was
> back??
>
> Dwayne
>
>>-----Original Message-----
>>Dwayne wrote:
>>
>>
>>>Hi.
>>>When i try to run explorer it tells me"attempted to
>
> access
>
>>>memory that does not exist" is this a common problem?
>>>windows explorer works in safe mode. I cant run
>
> anything
>
>>>that uses explorer. example "My Computer"
>>
>>That's a very uncommon problem. What changes did you make
>
> to your system
>
>>around the same time you started getting those messages.
>>
>>
>>
>>Rick
>>.
>>

Rick T
June 1st 04, 02:25 AM
and try to keep to one thread when you post.

Rick

Nick Z.
June 1st 04, 06:59 PM
Rick,
I'm having that same exact problem. My girlfriend
uploaded some things from a cd and I haven't found an
error as of yet. I've tried to SystemRestore but the SR
tells me I cannot reset my computer to my selected date.
Let me know how you solve your problem, if you do, and
I'll let you know how I solved mine, if I do. Good luck.

>-----Original Message-----
>and try to keep to one thread when you post.
>
>Rick
>.
>

June 1st 04, 07:37 PM
BHODemon did it for me. Now I'm happy.

>-----Original Message-----
>Rick,
> I'm having that same exact problem. My girlfriend
>uploaded some things from a cd and I haven't found an
>error as of yet. I've tried to SystemRestore but the SR
>tells me I cannot reset my computer to my selected date.
>Let me know how you solve your problem, if you do, and
>I'll let you know how I solved mine, if I do. Good luck.
>
>>-----Original Message-----
>>and try to keep to one thread when you post.
>>
>>Rick
>>.
>>
>.
>

Rick T
June 1st 04, 09:56 PM
wrote:

> BHODemon did it for me. Now I'm happy.

great...... who are you ?

Rick


>
>
>>-----Original Message-----
>>Rick,
>> I'm having that same exact problem. My girlfriend
>>uploaded some things from a cd and I haven't found an
>>error as of yet. I've tried to SystemRestore but the SR
>>tells me I cannot reset my computer to my selected date.
>>Let me know how you solve your problem, if you do, and
>>I'll let you know how I solved mine, if I do. Good luck.
>>
>>
>>>-----Original Message-----
>>>and try to keep to one thread when you post.
>>>
>>>Rick
>>>.
>>>
>>
>>.
>>

Noel Paton
June 1st 04, 10:16 PM
He's happy!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/features/2001/Mar01/Mar27pmvp.asp
"Rick T" > wrote in message
...
> wrote:
>
> > BHODemon did it for me. Now I'm happy.
>
> great...... who are you ?
>
> Rick
>

Rick T
June 2nd 04, 11:40 AM
Noel Paton wrote:

> He's happy!
>

ROFL


Rick

Dwayne
June 2nd 04, 12:59 PM
I have tried stinger and spybot which did work until i ran
my system again. I am using norton 2004 but when i ran a
scan it froze. i am going to run the cwshredder and norton
again. i will le you know.

Dwayne
>-----Original Message-----
>First run Stinger and BHODemon again to see what they
catch; this at
>least will identify the problem, which apparently is
pestware of some sort.
>
>A couple more pest-control programs which should cover
what the 2 you
>have don't ...
>
>free for personal use antivirus tool:
>http://www.grisoft.com/us/us_dwnl_free.php
>
>free for personal use spybot/adware detection & removal
tools:
>http://www.safer-networking.org/
>http://www.lavasoftusa.com/
>
>But do check using your original programs to see what's
returned. (to
>satisfy my curiousity if nothing else <g>)
>
>
>
>Rick
>
>
>
>Dwayne wrote:
>> I really don't remember doing anything different. I ran
>> stinger and BHODemon, that fixed the problem but when i
>> turned the computer on later to use again the problem
was
>> back??
>>
>> Dwayne
>>
>>>-----Original Message-----
>>>Dwayne wrote:
>>>
>>>
>>>>Hi.
>>>>When i try to run explorer it tells me"attempted to
>>
>> access
>>
>>>>memory that does not exist" is this a common problem?
>>>>windows explorer works in safe mode. I cant run
>>
>> anything
>>
>>>>that uses explorer. example "My Computer"
>>>
>>>That's a very uncommon problem. What changes did you
make
>>
>> to your system
>>
>>>around the same time you started getting those messages.
>>>
>>>
>>>
>>>Rick
>>>.
>>>
>.
>

Mike M
June 2nd 04, 01:18 PM
Why don't you use HijackThis as I suggested? You can run stinger and SpyBot
as many times as you like but they clearly aren't going to help. Stinger is
simply a tool to remove certain viruses so as to allow a user to then use a
proper AV program, nothing more, and if SpyBot didn't solve the problem first
time it is hardly likely to on a second or third time unless the malware
concerned is targeted by an updated set of reference files.
--
Mike Maltby MS-MVP



Dwayne > wrote:

> I have tried stinger and spybot which did work until i ran
> my system again. I am using norton 2004 but when i ran a
> scan it froze. i am going to run the cwshredder and norton
> again. i will le you know.

Dwayne
June 3rd 04, 01:03 AM
I ran cwshredder and i was able to open windows explorer
but the same thing happened when i booted up again. I ran
hijackthis but i wasnt sure about any of it. I sent an e-
mail to you with the log file. explorer works when i run
in safe mode so it must be something that loads with
windows.

Dwayne
>-----Original Message-----
>Why don't you use HijackThis as I suggested? You can run
stinger and SpyBot
>as many times as you like but they clearly aren't going
to help. Stinger is
>simply a tool to remove certain viruses so as to allow a
user to then use a
>proper AV program, nothing more, and if SpyBot didn't
solve the problem first
>time it is hardly likely to on a second or third time
unless the malware
>concerned is targeted by an updated set of reference
files.
>--
>Mike Maltby MS-MVP

>
>
>Dwayne > wrote:
>
>> I have tried stinger and spybot which did work until i
ran
>> my system again. I am using norton 2004 but when i ran a
>> scan it froze. i am going to run the cwshredder and
norton
>> again. i will le you know.
>
>
>.
>

Mike M
June 3rd 04, 02:13 AM
Dwayne,

I'm sorry but I don't offer support by e-mail. As I mentioned in my earlier
post either post your HijackThis log to the thread where I mentioned it of
better to the HijackThis forum.

OK, I've just had a quick look at the log and one program that worries me is
the BHO Kazaa Download Accelerator Updater (KDP12D9.DLL) but you've got so
much else loading including loads of ActiveX controls that it difficult to
know the root cause of your problems. Another obvious piece of malware is
[9YKCKJ.EXE] C:\WINDOWS\TEMP\9YKCKJ.EXE and another [SysUpd]
C:\WINDOWS\SYSUPD.EXE (either TSCash
http://www.pestpatrol.com/pestinfo/t/tscash.asp or worse Adware.VirtuMonde
(http://securityresponse.symantec.com/avcenter/venc/data/adware.virtumonde.htm
l). I'm also not happy with all the websearch.drsnsrch.com entries but don't
know what these are.

There are several other startup items you could happily remove including
LVComS.exe (installed but not required by your web cam), motmon.exe (used by
HP, Dell & Compaq for support), realsched.exe, PCHealth, possibly not
ssdpsrv.exe unless you use UPnP devices, etc. etc.
--?
Mike Maltby MS-MVP



Dwayne > wrote:

> I ran cwshredder and i was able to open windows explorer
> but the same thing happened when i booted up again. I ran
> hijackthis but i wasnt sure about any of it. I sent an e-
> mail to you with the log file. explorer works when i run
> in safe mode so it must be something that loads with
> windows.

Dwayne
June 3rd 04, 01:14 PM
I removed the kazaa BHO and the motive and the malware,=20
now i can open explorer again. i have not rebboted as yet=20
so i dont know if the problem will return. I know that i=20
have alot loaded but i dont know what the stuff is like=20
loadqm and delayrun pchealth systray. i see them when i=20
ctrl alt del but have no idea what they are. opensite=20
rxmon hkcmd???? Is this junk i have downloaded? Thanx for=20
the help.


Dwayne
>-----Original Message-----
>Dwayne,
>
>I'm sorry but I don't offer support by e-mail. As I=20
mentioned in my earlier
>post either post your HijackThis log to the thread where=20
I mentioned it of
>better to the HijackThis forum.
>
>OK, I've just had a quick look at the log and one program=20
that worries me is
>the BHO Kazaa Download Accelerator Updater (KDP12D9.DLL)=20
but you've got so
>much else loading including loads of ActiveX controls=20
that it difficult to
>know the root cause of your problems. Another obvious=20
piece of malware is
>[9YKCKJ.EXE] C:\WINDOWS\TEMP\9YKCKJ.EXE and another=20
[SysUpd]
>C:\WINDOWS\SYSUPD.EXE (either TSCash
>http://www.pestpatrol.com/pestinfo/t/tscash.asp or worse=20
Adware.VirtuMonde
>
(http://securityresponse.symantec.com/avcenter/venc/data/ad
ware.virtumonde.htm
>l). I'm also not happy with all the=20
websearch.drsnsrch.com entries but don't
>know what these are.
>
>There are several other startup items you could happily=20
remove including
>LVComS.exe (installed but not required by your web cam),=20
motmon.exe (used by
>HP, Dell & Compaq for support), realsched.exe, PCHealth,=20
possibly not
>ssdpsrv.exe unless you use UPnP devices, etc. etc.
>--=81
>Mike Maltby MS-MVP

>
>
>Dwayne > wrote:
>
>> I ran cwshredder and i was able to open windows explorer
>> but the same thing happened when i booted up again. I=20
ran
>> hijackthis but i wasnt sure about any of it. I sent an=20
e-
>> mail to you with the log file. explorer works when i run
>> in safe mode so it must be something that loads with
>> windows.
>
>
>.
>

Dwayne
June 3rd 04, 02:03 PM
it looks like its the bho kazaa. i run hijack and delete=20
it but it keeps coming back.


Dwayne
>-----Original Message-----
>Dwayne,
>
>I'm sorry but I don't offer support by e-mail. As I=20
mentioned in my earlier
>post either post your HijackThis log to the thread where=20
I mentioned it of
>better to the HijackThis forum.
>
>OK, I've just had a quick look at the log and one program=20
that worries me is
>the BHO Kazaa Download Accelerator Updater (KDP12D9.DLL)=20
but you've got so
>much else loading including loads of ActiveX controls=20
that it difficult to
>know the root cause of your problems. Another obvious=20
piece of malware is
>[9YKCKJ.EXE] C:\WINDOWS\TEMP\9YKCKJ.EXE and another=20
[SysUpd]
>C:\WINDOWS\SYSUPD.EXE (either TSCash
>http://www.pestpatrol.com/pestinfo/t/tscash.asp or worse=20
Adware.VirtuMonde
>
(http://securityresponse.symantec.com/avcenter/venc/data/ad
ware.virtumonde.htm
>l). I'm also not happy with all the=20
websearch.drsnsrch.com entries but don't
>know what these are.
>
>There are several other startup items you could happily=20
remove including
>LVComS.exe (installed but not required by your web cam),=20
motmon.exe (used by
>HP, Dell & Compaq for support), realsched.exe, PCHealth,=20
possibly not
>ssdpsrv.exe unless you use UPnP devices, etc. etc.
>--=81
>Mike Maltby MS-MVP

>
>
>Dwayne > wrote:
>
>> I ran cwshredder and i was able to open windows explorer
>> but the same thing happened when i booted up again. I=20
ran
>> hijackthis but i wasnt sure about any of it. I sent an=20
e-
>> mail to you with the log file. explorer works when i run
>> in safe mode so it must be something that loads with
>> windows.
>
>
>.
>

Mike M
June 3rd 04, 03:01 PM
As I have mentioned in two previous posts either post your HijackThis log to
(this) thread or _even_ _better_ to the HijackThis forum. You appear to have
so much junk being loaded and running that it is easy to overlook one or more
of the vectors that are causing you your problems.
--
Mike Maltby MS-MVP



Dwayne > wrote:

> it looks like its the bho kazaa. i run hijack and delete
> it but it keeps coming back.