View Single Post
  #3  
Old August 28th 04, 04:22 PM
Brian A.
external usenet poster
 
Posts: n/a
Default

I believe that's due to a CoolWebSearch parasite.
**It is pertinent to run the update for each program before running to =
be sure you have the latest definitions.** Run the programs in Safe Mode =
after assuring you have shut down all running tasks except explorer or =
systray.
Download/run Cool Web Shredder from:
http://majorgeeks.com/downloads31.html

For Info on Cool Web Search Variants ( link being redirected, not sure =
how to get to the Chronicles at this moment):
http://www.spywareinfo.com/~merijn/cwschronicles.html

Then download/install/run Ad-Aware to detect/rid of any other =
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get =
the latest up-to-date ref file, then run Ad-Aware and delete everything =
it finds.=20

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...=3Ddownload=20
Run it at it's default settings until you learn an know more about it. =
Spybot S&D is more of an advanced users tool and changing from the =
default settings can be dangerous to the novice user. Items found in the =
default settings that are RED can usually be safely removed. If you are =
unsure of a found item, do not remove it and ask for help.=20

If you still have problems, download/run HijackThis from:
http://majorgeeks.com/downloads31.html

Do not remove anything with it until you get advice on what to remove, =
HJThis will list many apps that are needed along with the bad ones. =
Removing items listed hap-hazardly without knowing what they are =
can/will create a royal mess. Read the quick start here on how to create =
a log file that can be copied/pasted into a forum that can provide =
assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate NG here where they specialize in =
spyware/hijacker removal:
http://forums.spywareinfo.com/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to =
HOSTS File Manager he
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they =
even get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

--=20
Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"ColinLachman" wrote in message =
...
Can anyone help?
=20
I get an error message each time I log on as follows:
=20
RUNDLL32 caused an invalid page fault in
module IMAGE.DLL at 0167:10013783.
Registers:
EAX=3D10021649 CS=3D0167 EIP=3D10013783 EFLGS=3D00010202
EBX=3D00000000 SS=3D016f ESP=3D0063f030 EBP=3D0063f03c
ECX=3D0063f388 DS=3D016f ESI=3D0063f389 FS=3D3747
EDX=3Dd5468820 ES=3D016f EDI=3Dc0000a04 GS=3D0000
Bytes at CS:EIP:
8a 27 47 38 c4 74 f2 2c 41 3c 1a 1a c9 80 e1 20=20
Stack dump:
00000000 bffa19f5 70befe3c 0063fda4 10003250 c0000a04=20
0063f388 818c0736 00000014 00000001 00000000 00000000=20
00000000 00000000 00000000 00000000
=20
Please can someone offer advice on what I need to do to=20
get rid of this. It will be much appreciated.
=20
Replies to my email account.
=20
Thanks