Explorer has caused an error in ~7669806981.TMP

Hi.. I have just started receiving this message: "
Explorer has caused an error in ~7669806981.TMP Explorer
will now close ". If I close this error message window I
get a blue screen and the computer freezes. If I reboot
I keep getting this message again.

Is this another virus ? Appreciate any suggestion to fix
it .

Thanks..

Frank

I have now read several threads in this newsgroup on
similar error messages. I will download the Adaware
freeware and start scanning..

Thanks..
Frank

-----Original Message-----
Hi.. I have just started receiving this message: "
Explorer has caused an error in ~7669806981.TMP Explorer
will now close ". If I close this error message window
I
get a blue screen and the computer freezes. If I reboot
I keep getting this message again.

Is this another virus ? Appreciate any suggestion to
fix
it .

Thanks..

Frank
.

Frank,

Yes this is malware of some sort, quite probably a commercial parasite picked
up whilst browsing. Lots of users are reporting this in the last week but the
name and cause is, to me at least, still unknown.

Check your system using your preferred antivirus application making sure first
that you are using an updated current set of viral reference signatures.

Try booting to Safe Mode and emptying both your Windows\Temp folder and also
your Temporary Internet Files (Control Panel | Internet Options | General |
Delete Files and make sure you check the box "Delete all offline content").
Next open MSConfig, (Start | Run, type MSConfig in the box and click OK), open
the Startup tab and look for an uncheck any rogue entries.

Boot back into Normal Mode.

This would be a good time to download yourself a copy of the free Ad-Aware 6.0
from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also SpyBot
Search & Destroy (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as good
as when you last updated their reference files. I also use a program called
BHODemon (http://www.definitivesolutions.com/bhodemon.htm that checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best way
of getting rid of the many forms of the CoolWebSearch hijacker details of
which can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html). Create a
folder called hijackthis on C: and copy the file you downloaded to that
folder. Close as many applications as you can including all instances of
Internet Explorer and then run hijackthis.exe and post back the log, provided
that it isn't too long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.
--?
Mike Maltby MS-MVP



Frank S wrote:

Hi.. I have just started receiving this message: "
Explorer has caused an error in ~7669806981.TMP Explorer
will now close ". If I close this error message window I
get a blue screen and the computer freezes. If I reboot
I keep getting this message again.

Is this another virus ? Appreciate any suggestion to fix
it .

Thanks Mike..

Frank
-----Original Message-----
Frank,

Yes this is malware of some sort, quite probably a=20
commercial parasite picked
up whilst browsing. Lots of users are reporting this in=20
the last week but the
name and cause is, to me at least, still unknown.

Check your system using your preferred antivirus=20
application making sure first
that you are using an updated current set of viral=20
reference signatures.

Try booting to Safe Mode and emptying both your=20
Windows\Temp folder and also
your Temporary Internet Files (Control Panel | Internet=20
Options | General |
Delete Files and make sure you check the box "Delete all=20
offline content").
Next open MSConfig, (Start | Run, type MSConfig in the=20
box and click OK), open
the Startup tab and look for an uncheck any rogue=20
entries.

Boot back into Normal Mode.

This would be a good time to download yourself a copy of=20
the free Ad-Aware 6.0
from Lavasoft=20
(http://www.lavasoftusa.com/software/adaware/) and also=20
SpyBot
Search & Destroy (http://www.safer-networking.org/) and=20
use them to check your
system for other commercial parasites remembering that=20
they are only as good
as when you last updated their reference files. I also=20
use a program called
BHODemon=20
(http://www.definitivesolutions.com/bhodemon.htm that=20
checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html)=20
which can help prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip)=20
which is the best way
of getting rid of the many forms of the CoolWebSearch=20
hijacker details of
which can be found at=20
http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems=20
download a copy of
HijackThis from=20
(http://www.spywareinfo.com/~merijn/downloads.html). =20
Create a
folder called hijackthis on C: and copy the file you=20
downloaded to that
folder. Close as many applications as you can including=20
all instances of
Internet Explorer and then run hijackthis.exe and post=20
back the log, provided
that it isn't too long, to this thread, otherwise to the=20
HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this=20
will enable someone to
identify the cause of your problem.
--=81
Mike Maltby MS-MVP



Frank S wrote:

Hi.. I have just started receiving this message: "
Explorer has caused an error in ~7669806981.TMP=20
Explorer
will now close ". If I close this error message=20
window I
get a blue screen and the computer freezes. If I=20
reboot
I keep getting this message again.

Is this another virus ? Appreciate any suggestion to=20
fix
it .


.

Mike..

A quick update. I have deleted the file in Safe Mode and=20
cleaned the Windows\TEMP and Internet Temp files. But=20
when I reboot the machine, somehow this file is recreated=20
with the same name. I am now in the process of installing=20
Adaware.

If you find out anymore on how to fix this virus, please=20
send me an update..

Thanks..

Frank
-----Original Message-----
Frank,

Yes this is malware of some sort, quite probably a=20
commercial parasite picked
up whilst browsing. Lots of users are reporting this in=20
the last week but the
name and cause is, to me at least, still unknown.

Check your system using your preferred antivirus=20
application making sure first
that you are using an updated current set of viral=20
reference signatures.

Try booting to Safe Mode and emptying both your=20
Windows\Temp folder and also
your Temporary Internet Files (Control Panel | Internet=20
Options | General |
Delete Files and make sure you check the box "Delete all=20
offline content").
Next open MSConfig, (Start | Run, type MSConfig in the=20
box and click OK), open
the Startup tab and look for an uncheck any rogue entries.

Boot back into Normal Mode.

This would be a good time to download yourself a copy of=20
the free Ad-Aware 6.0
from Lavasoft=20
(http://www.lavasoftusa.com/software/adaware/) and also=20
SpyBot
Search & Destroy (http://www.safer-networking.org/) and=20
use them to check your
system for other commercial parasites remembering that=20
they are only as good
as when you last updated their reference files. I also=20
use a program called
BHODemon (http://www.definitivesolutions.com/bhodemon.htm=20
that checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html)=20
which can help prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip)=20
which is the best way
of getting rid of the many forms of the CoolWebSearch=20
hijacker details of
which can be found at=20
http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems=20
download a copy of
HijackThis from=20
(http://www.spywareinfo.com/~merijn/downloads.html). =20
Create a
folder called hijackthis on C: and copy the file you=20
downloaded to that
folder. Close as many applications as you can including=20
all instances of
Internet Explorer and then run hijackthis.exe and post=20
back the log, provided
that it isn't too long, to this thread, otherwise to the=20
HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this=20
will enable someone to
identify the cause of your problem.
--=81
Mike Maltby MS-MVP



Frank S wrote:

Hi.. I have just started receiving this message: "
Explorer has caused an error in ~7669806981.TMP Explorer
will now close ". If I close this error message window=20
I
get a blue screen and the computer freezes. If I reboot
I keep getting this message again.

Is this another virus ? Appreciate any suggestion to=20
fix
it .


.

Frank,

You probably need to use not just AdAware but also SpyBot, CWShredder and
BHODemon. You need to find out what is being loaded each time you boot your
PC that is creating this file. Failing all else move on to HijackThis. To
run HJT go back to Safe Mode, clean up as much as you can (Temp & TiF) and
with nothing else running run HijackThis. Oh, it might also be advisable to
first ensure that you can see all your files using Explorer. Do this as
follows: Tools | Folder Options | View and check "Show hidden files and
folders" and uncheck "Hide protected operating system files".

Best of luck and please post back any relevant details you find that might
help others including details of the startup vector that creates this TMP file
each time you boot.
--
Mike Maltby MS-MVP



Frank S wrote:

Mike..

A quick update. I have deleted the file in Safe Mode and
cleaned the Windows\TEMP and Internet Temp files. But
when I reboot the machine, somehow this file is recreated
with the same name. I am now in the process of installing
Adaware.

If you find out anymore on how to fix this virus, please
send me an update..

Thanks again Mike..

What a pain.. so frustrating..

Frank
-----Original Message-----
Frank,

You probably need to use not just AdAware but also
SpyBot, CWShredder and
BHODemon. You need to find out what is being loaded
each time you boot your
PC that is creating this file. Failing all else move on
to HijackThis. To
run HJT go back to Safe Mode, clean up as much as you
can (Temp & TiF) and
with nothing else running run HijackThis. Oh, it might
also be advisable to
first ensure that you can see all your files using
Explorer. Do this as
follows: Tools | Folder Options | View and check "Show
hidden files and
folders" and uncheck "Hide protected operating system
files".

Best of luck and please post back any relevant details
you find that might
help others including details of the startup vector that
creates this TMP file
each time you boot.
--
Mike Maltby MS-MVP



Frank S wrote:

Mike..

A quick update. I have deleted the file in Safe Mode
and
cleaned the Windows\TEMP and Internet Temp files. But
when I reboot the machine, somehow this file is
recreated
with the same name. I am now in the process of
installing
Adaware.

If you find out anymore on how to fix this virus,
please
send me an update..


.