ERROR MESSAGE [Archive]

PCR

June 5th 04, 09:21 PM

........Quote.............
A large number of posts lately are reporting that several functions of
Windows Explorer (Explorer.exe) are failing, all with the same error
message:
"EXPLORER caused an invalid page fault in module <unknown>
This includes trying to open "My Computer", Control Panel, Windows
Explorer, and other functions.

So far, we have had luck with running Hijack This, marking this entry
and clicking the "Fix Checked" button:
O2 - BHO: Core Library - {F281FFC7-6C63-4bf9-83F2-AB7A6157B109} -
C:\WINDOWS\SYSTEM\KDP2928.DLL
Then find and delete the file KDP2928.DLL

Alternately, you may instead find this entry:
O2 - BHO: Core Library - {D4D505DF-D582-400c-91B6-84921012AFE3} -
C:\WINDOWS\SYSTEM\PDF1C3B.DLL
Again, use Hijack This to fix the entry, reboot, and delete the file
PDF1C3B.DLL

Note that other CLSIDs and file names may turn up for the BHO "Core
Library", and in that case those should be fixed and the associated file
deleted.

The manual removal instructions at:
http://www.pestpatrol.com/PestInfo/s/safeguardprotect.asp
cover all or most of the variations, and should work for any of the
versions of that particular malware.

Hijack This must be used with caution, as it finds both the good and the
bad. Do not use it to remove anything other than this particular entry,
without first asking for guidance in one of the spyware forums listed
below.

Here is my standard post regarding Hijack This:

Download, unzip (if it is in a .zip file), and run Hijack This from one
of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/HijackThis.exe
Unzip or locate it to a folder other than your Desktop or the Temp
folder, double-click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save
Log" button. Press that, save the log somewhere you can find it
(Desktop, My Documents, or similar). Most of what it lists will be
harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these
forums:
http://forum.aumha.org/
Specifically -
http://forum.aumha.org/viewforum.php?f=30&sid=8ffbc7fdbcb01f7e49a03f108b7f3a1c
or
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located here:
http://tomcoyote.com/hjt/
and an in-depth tutorial is here:
http://aumha.org/a/hjttutor.htm

Glen Ventura, MS MVP W95/98 Systems
..........End of quote..............

Good luck with it.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"Gerry" > wrote in message
...
| When I click on the "My Computer" icon on the desktop or
| try to go into my Control Panel, I get the follow ERROR
| MESSAGE.
|
| EXPLORER caused an invalid page fault in
| module <unknown> at 0000:07c7fc6e.
| Registers:
| EAX=0044a3a0 CS=0187 EIP=07c7fc6e EFLGS=00010246
| EBX=01c00e00 SS=018f ESP=0177cc4c EBP=0177cc68
| ECX=50002fa8 DS=018f ESI=01c00e08 FS=1a27
| EDX=0177cc5c ES=018f EDI=0177cf7c GS=0000
| Bytes at CS:EIP:
|
| Stack dump:
| 01ac5da1 0044a3a0 0177cc5c 00000003 00000000 0044a3a0
| 0043d3a4 0177ccb4 01ac5de2 0177cf7c 01c00e08 00000000
| bff741f7 bff713e2 00000187 bff74272
|
| Can anyone tell me how to correct this?