CWS Problem continued

I have a message posted below under the heading: Trojan
Horse leading to "Explorer caused problem in GDI.EXE"

I thought the problem was solved but I am still getting
error messages as soon as I get into windows. It's always
the large white box saying "An error has occurred in your
program. TO keep working anyway, click Ignore.....Close
or Ignore". The heading is usually Explorer (always at
Start Up) but changes depending on what is being used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN when I
go into my Norton Antivirus).

When running CWShredder it says there's nothing there and
running the Stinger as suggested finds nothing. Running
my Antivirus software gives the all clear too. However,
the AV software's auto-protection was off and an error for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted to Safe
Mode and "removed any references to such a device from
Device Manager there" as suggested. Doing this seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated. Thanks.

Can I also point out that when downloading CWShredder or
the Stinger I can't save them as it causes IE to close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading: Trojan
Horse leading to "Explorer caused problem in GDI.EXE"

I thought the problem was solved but I am still getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred in your
program. TO keep working anyway, click Ignore.....Close
or Ignore". The heading is usually Explorer (always at
Start Up) but changes depending on what is being used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing there and
running the Stinger as suggested finds nothing. Running
my Antivirus software gives the all clear too. However,
the AV software's auto-protection was off and an error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted to Safe
Mode and "removed any references to such a device from
Device Manager there" as suggested. Doing this seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated. Thanks.
.

This looks very suspicious to me - any chance you can download the Stinger
on a known-clean machine, and transfer to floppy, to run on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

"Templeton Peck" wrote in message
...
Can I also point out that when downloading CWShredder or
the Stinger I can't save them as it causes IE to close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading: Trojan
Horse leading to "Explorer caused problem in GDI.EXE"

I thought the problem was solved but I am still getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred in your
program. TO keep working anyway, click Ignore.....Close
or Ignore". The heading is usually Explorer (always at
Start Up) but changes depending on what is being used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing there and
running the Stinger as suggested finds nothing. Running
my Antivirus software gives the all clear too. However,
the AV software's auto-protection was off and an error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted to Safe
Mode and "removed any references to such a device from
Device Manager there" as suggested. Doing this seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated. Thanks.
.

Unfortunately not. I'm using a friend's laptop for most
of my search for an answer and this has no floppy drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it was
OK. I've been advised to download Hijackthis, which I've
done, but to post the results I have to manually type it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on here,
either as a result of my tampering or something that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you can
download the Stinger
on a known-clean machine, and transfer to floppy, to run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Can I also point out that when downloading CWShredder
or
the Stinger I can't save them as it causes IE to close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer (always
at
Start Up) but changes depending on what is being used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted to
Safe
Mode and "removed any references to such a device from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated.
Thanks.
.



.

You could try running Stinger and HiJackThis while in Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem - which requires
another download...
Go to your HD manufacturer's website, and get their Disk testing utility -
scan the disk using that (from a floppy boot, usually), to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these utilities are capable of
effectively wiping the HD if you choose the wrong option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

"Templeton Peck" wrote in message
...
Unfortunately not. I'm using a friend's laptop for most
of my search for an answer and this has no floppy drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it was
OK. I've been advised to download Hijackthis, which I've
done, but to post the results I have to manually type it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on here,
either as a result of my tampering or something that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you can
download the Stinger
on a known-clean machine, and transfer to floppy, to run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Can I also point out that when downloading CWShredder
or
the Stinger I can't save them as it causes IE to close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer (always
at
Start Up) but changes depending on what is being used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted to
Safe
Mode and "removed any references to such a device from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated.
Thanks.
.



.

It's been suggested elsewhere I run a System Restore,
which I've just done. So far my system seems perfectly
fine. No problems whatsoever. It seems quite a simple
solution though and am worried the underlying problem is
still there. I'll give it a complete check out as I can
now access the internet without problem on the PC but do
you know of any flaws in just running a System Restore?
Thanks for your continued support.

-----Original Message-----
You could try running Stinger and HiJackThis while in
Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem -
which requires
another download...
Go to your HD manufacturer's website, and get their Disk
testing utility -
scan the disk using that (from a floppy boot, usually),
to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these
utilities are capable of
effectively wiping the HD if you choose the wrong option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Unfortunately not. I'm using a friend's laptop for
most
of my search for an answer and this has no floppy
drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it was
OK. I've been advised to download Hijackthis, which
I've
done, but to post the results I have to manually type
it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on
here,
either as a result of my tampering or something that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you can
download the Stinger
on a known-clean machine, and transfer to floppy, to
run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or

http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Can I also point out that when downloading
CWShredder
or
the Stinger I can't save them as it causes IE to
close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in
GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred
in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer
(always
at
Start Up) but changes depending on what is being
used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing
there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an
error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted
to
Safe
Mode and "removed any references to such a device
from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated.
Thanks.
.



.



.

How far back did you go?? - System Restore is very good at short-duration
problem solutions, but can cause problems if you go back more than a week -
two at most.

Two drawbacks to System Restore -
1) any programs installed/uninstalled since the time you restored back to
will require reinstallation/uninstallation (which may mean that you have to
reinstall the program to uninstall it!)

2) any data/folder you keep on the desktop that has changed since the date
restored back to will be gone (data within the MyDocuments tree is
unaffected by System Restore) or back at the state it was in on the date you
restored back to.

The second can be undone by undoing the Restore, moving the data to the
MyDocuments tree, and then redoing the Restore.

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

"Temp Peck" wrote in message
...
It's been suggested elsewhere I run a System Restore,
which I've just done. So far my system seems perfectly
fine. No problems whatsoever. It seems quite a simple
solution though and am worried the underlying problem is
still there. I'll give it a complete check out as I can
now access the internet without problem on the PC but do
you know of any flaws in just running a System Restore?
Thanks for your continued support.

-----Original Message-----
You could try running Stinger and HiJackThis while in
Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem -
which requires
another download...
Go to your HD manufacturer's website, and get their Disk
testing utility -
scan the disk using that (from a floppy boot, usually),
to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these
utilities are capable of
effectively wiping the HD if you choose the wrong option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Unfortunately not. I'm using a friend's laptop for
most
of my search for an answer and this has no floppy
drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it was
OK. I've been advised to download Hijackthis, which
I've
done, but to post the results I have to manually type
it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on
here,
either as a result of my tampering or something that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you can
download the Stinger
on a known-clean machine, and transfer to floppy, to
run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or

http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Can I also point out that when downloading
CWShredder
or
the Stinger I can't save them as it causes IE to
close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in
GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows. It's
always
the large white box saying "An error has occurred
in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer
(always
at
Start Up) but changes depending on what is being
used
(i.e. MSNMGR when MSN Messenger is opening or NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing
there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an
error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted
to
Safe
Mode and "removed any references to such a device
from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit the
problem seemed to be solved.

Any further suggestions would be most appreciated.
Thanks.
.



.



.

Tried 3 days but that didn't work so went back a week. As
far as I'm aware nothing will have been lost. It's
looking good at the moment, just have to ensure I keep up
to date with my protective software and have a general
clean up on a weekly basis.

Thanks a lot for your advice, Matthew.

-----Original Message-----
How far back did you go?? - System Restore is very good
at short-duration
problem solutions, but can cause problems if you go back
more than a week -
two at most.

Two drawbacks to System Restore -
1) any programs installed/uninstalled since the time you
restored back to
will require reinstallation/uninstallation (which may
mean that you have to
reinstall the program to uninstall it!)

2) any data/folder you keep on the desktop that has
changed since the date
restored back to will be gone (data within the
MyDocuments tree is
unaffected by System Restore) or back at the state it was
in on the date you
restored back to.

The second can be undone by undoing the Restore, moving
the data to the
MyDocuments tree, and then redoing the Restore.

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...2001/Mar01/Mar
27pmvp.asp

"Temp Peck" wrote
in message
...
It's been suggested elsewhere I run a System Restore,
which I've just done. So far my system seems perfectly
fine. No problems whatsoever. It seems quite a simple
solution though and am worried the underlying problem is
still there. I'll give it a complete check out as I can
now access the internet without problem on the PC but do
you know of any flaws in just running a System Restore?
Thanks for your continued support.

-----Original Message-----
You could try running Stinger and HiJackThis while in
Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem -
which requires
another download...
Go to your HD manufacturer's website, and get their
Disk
testing utility -
scan the disk using that (from a floppy boot, usually),
to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these
utilities are capable of
effectively wiping the HD if you choose the wrong
option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or

http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Unfortunately not. I'm using a friend's laptop for
most
of my search for an answer and this has no floppy
drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it
was
OK. I've been advised to download Hijackthis, which
I've
done, but to post the results I have to manually type
it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on
here,
either as a result of my tampering or something
that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you
can
download the Stinger
on a known-clean machine, and transfer to floppy, to
run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or


http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"

wrote in message
...
Can I also point out that when downloading
CWShredder
or
the Stinger I can't save them as it causes IE to
close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in
GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows.
It's
always
the large white box saying "An error has occurred
in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer
(always
at
Start Up) but changes depending on what is being
used
(i.e. MSNMGR when MSN Messenger is opening or
NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing
there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an
error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted
to
Safe
Mode and "removed any references to such a device
from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit
the
problem seemed to be solved.

Any further suggestions would be most
appreciated.
Thanks.
.



.



.



.

Glad you're up and running again - Good Luck.

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

"T Peck" wrote in message
...
Tried 3 days but that didn't work so went back a week. As
far as I'm aware nothing will have been lost. It's
looking good at the moment, just have to ensure I keep up
to date with my protective software and have a general
clean up on a weekly basis.

Thanks a lot for your advice, Matthew.

-----Original Message-----
How far back did you go?? - System Restore is very good
at short-duration
problem solutions, but can cause problems if you go back
more than a week -
two at most.

Two drawbacks to System Restore -
1) any programs installed/uninstalled since the time you
restored back to
will require reinstallation/uninstallation (which may
mean that you have to
reinstall the program to uninstall it!)

2) any data/folder you keep on the desktop that has
changed since the date
restored back to will be gone (data within the
MyDocuments tree is
unaffected by System Restore) or back at the state it was
in on the date you
restored back to.

The second can be undone by undoing the Restore, moving
the data to the
MyDocuments tree, and then redoing the Restore.

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...2001/Mar01/Mar
27pmvp.asp

"Temp Peck" wrote
in message
...
It's been suggested elsewhere I run a System Restore,
which I've just done. So far my system seems perfectly
fine. No problems whatsoever. It seems quite a simple
solution though and am worried the underlying problem is
still there. I'll give it a complete check out as I can
now access the internet without problem on the PC but do
you know of any flaws in just running a System Restore?
Thanks for your continued support.

-----Original Message-----
You could try running Stinger and HiJackThis while in
Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem -
which requires
another download...
Go to your HD manufacturer's website, and get their
Disk
testing utility -
scan the disk using that (from a floppy boot, usually),
to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these
utilities are capable of
effectively wiping the HD if you choose the wrong
option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or

http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Unfortunately not. I'm using a friend's laptop for
most
of my search for an answer and this has no floppy
drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it
was
OK. I've been advised to download Hijackthis, which
I've
done, but to post the results I have to manually type
it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on
here,
either as a result of my tampering or something
that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you
can
download the Stinger
on a known-clean machine, and transfer to floppy, to
run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or


http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"

wrote in message
...
Can I also point out that when downloading
CWShredder
or
the Stinger I can't save them as it causes IE to
close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in
GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows.
It's
always
the large white box saying "An error has occurred
in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer
(always
at
Start Up) but changes depending on what is being
used
(i.e. MSNMGR when MSN Messenger is opening or
NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing
there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an
error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted
to
Safe
Mode and "removed any references to such a device
from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit
the
problem seemed to be solved.

Any further suggestions would be most
appreciated.
Thanks.
.



.



.



.

I've got the same problem and it started last night. I clicked on
what seemed to be a link from a friend but was actually a link to a
site with some sort of trojan running. It appears to be the
CoolWebSearch stuff. It also changed my home page to "about:blank"
I've tried everything noted above with the exception of system restore
and nothing will kill this stuff.

I have noticed that when I just turn off the computer and don't shut
it down properly, that running scan disk will cause it to come up
fine. I can access all exe files with no problem. Something is being
loaded when it is started up properly and scan disk isn't run that
causes an error in GDI.EXE anytime I try to run an executable.

We've been all through the registry entries and still can't find the
problem. Adaware, Spybot, Norton and Hijack This all come up clean.

Help!

"Noel Paton" wrote in message ...
Glad you're up and running again - Good Luck.

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

"T Peck" wrote in message
...
Tried 3 days but that didn't work so went back a week. As
far as I'm aware nothing will have been lost. It's
looking good at the moment, just have to ensure I keep up
to date with my protective software and have a general
clean up on a weekly basis.

Thanks a lot for your advice, Matthew.

-----Original Message-----
How far back did you go?? - System Restore is very good
at short-duration
problem solutions, but can cause problems if you go back
more than a week -
two at most.

Two drawbacks to System Restore -
1) any programs installed/uninstalled since the time you
restored back to
will require reinstallation/uninstallation (which may
mean that you have to
reinstall the program to uninstall it!)

2) any data/folder you keep on the desktop that has
changed since the date
restored back to will be gone (data within the
MyDocuments tree is
unaffected by System Restore) or back at the state it was
in on the date you
restored back to.

The second can be undone by undoing the Restore, moving
the data to the
MyDocuments tree, and then redoing the Restore.

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...2001/Mar01/Mar
27pmvp.asp

"Temp Peck" wrote
in message
...
It's been suggested elsewhere I run a System Restore,
which I've just done. So far my system seems perfectly
fine. No problems whatsoever. It seems quite a simple
solution though and am worried the underlying problem is
still there. I'll give it a complete check out as I can
now access the internet without problem on the PC but do
you know of any flaws in just running a System Restore?
Thanks for your continued support.

-----Original Message-----
You could try running Stinger and HiJackThis while in
Safe Mode - I'm not
sure that would give the same response, but.....
The only other thing I can think of is an HD problem -
which requires
another download...
Go to your HD manufacturer's website, and get their
Disk
testing utility -
scan the disk using that (from a floppy boot, usually),
to check that the HD
isn't on its last legs.
Read the instructions carefully - some of these
utilities are capable of
effectively wiping the HD if you choose the wrong
option!

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or

http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"
wrote in message
...
Unfortunately not. I'm using a friend's laptop for
most
of my search for an answer and this has no floppy
drive.
I could try my PC at work but I'm pretty sure I'm not
supposed to download stuff on my work PC. Apart from
that I know of no-one else nearby with a PC.

I have run Stinger on my PC and it seemed to say it
was
OK. I've been advised to download Hijackthis, which
I've
done, but to post the results I have to manually type
it
as saving anything causes it to close down.

Would the results of this be of any use to you? I am
starting to suspect there's something else going on
here,
either as a result of my tampering or something
that's
just beyond me.

Thanks.
-----Original Message-----
This looks very suspicious to me - any chance you
can
download the Stinger
on a known-clean machine, and transfer to floppy, to
run
on your suspect
box?


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to
post
messages to NG's
or


http://www.microsoft.com/presspass/f.../2001/Mar01/Ma
r27pmvp.asp

"Templeton Peck"

wrote in message
...
Can I also point out that when downloading
CWShredder
or
the Stinger I can't save them as it causes IE to
close
down and so I always have to Open them.


-----Original Message-----
I have a message posted below under the heading:
Trojan
Horse leading to "Explorer caused problem in
GDI.EXE"

I thought the problem was solved but I am still
getting
error messages as soon as I get into windows.
It's
always
the large white box saying "An error has occurred
in
your
program. TO keep working anyway, click
Ignore.....Close
or Ignore". The heading is usually Explorer
(always
at
Start Up) but changes depending on what is being
used
(i.e. MSNMGR when MSN Messenger is opening or
NMAIN
when
I
go into my Norton Antivirus).

When running CWShredder it says there's nothing
there
and
running the Stinger as suggested finds nothing.
Running
my Antivirus software gives the all clear too.
However,
the AV software's auto-protection was off and an
error
for
e-mail screening but seems to be OK now.

I've uninstalled my Webcam software and rebooted
to
Safe
Mode and "removed any references to such a device
from
Device Manager there" as suggested. Doing this
seemed to
bring the problem back as before I did this bit
the
problem seemed to be solved.

Any further suggestions would be most
appreciated.
Thanks.
.



.



.



.