Folders on Desktop

Hey,
For some crazy reason, I cant open my files, or folders on
the desktop, not even my computer, or my documents.

I have recived these error, Explorer has caused an error
in (PDF563F.Dll, or Shell32.dll, or Shiwapi.dll,
shdocvw.dll, even once i believe kernel32.dll), i have
tried restore, but to no avail, is there a way i can find
out wats wrong, like a program that scans the comp or
something and fixes this, all i have is the ability to go
online, like now, ohh one more thing i also went on safe
mode, and on safe mode the files open on my desktop and
stuff, Im running on WinME, compaq presario 7000T, or the
latest patches and stuff

Sincerely,

Adam

You may have a virus/spyware hijack

download the Stinger from here and run it to make sure that A-V-disabling
viruses are not present on your PC
http://download.nai.com/products/mca...rt/stinger.exe

- update your virus scanner and run a full system scan of all files.

Reboot to Safe Mode and run CWShredder - to remove variants of the
CoolWebSearch hijacker.
http://www.merijn.org/cwschronicles.html

Use CWShredder, the removal tool:
http://www.merijn.org/files/cwshredder.zip
http://www.merijn.org/files/CWShredder.exe
http://www.spywareinfo.com/downloads...CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip

Try BHODemon - from http://www.spywareinfo.com/downloads/bhod/

Download AdAware from www.lavasoftusa.com, install, update, and run it to
remove spyware, adware,
and other such nasties from your system.

(thanks to Graham Womack for the following)
Do all this in Safe Mode.......
Make a Restore Point - just in case it gets worse.
Using Regedit, search for 'Safeguard'. Make a note of the dll name (if
there's an entry at all).
Run BHODemon. Look for the same dll name The 'Details' key should give you
more information about when the entries were loaded. Disable the registry
entry.
Search your hard drive for the dll file (should be in Windows\System).
Rename it and a similar named lib file - change the extensions.
Reboot, cross your fingers and try 'My Computer'

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp
"Adam" wrote in message
...
Hey,
For some crazy reason, I cant open my files, or folders on
the desktop, not even my computer, or my documents.

I have recived these error, Explorer has caused an error
in (PDF563F.Dll, or Shell32.dll, or Shiwapi.dll,
shdocvw.dll, even once i believe kernel32.dll), i have
tried restore, but to no avail, is there a way i can find
out wats wrong, like a program that scans the comp or
something and fixes this, all i have is the ability to go
online, like now, ohh one more thing i also went on safe
mode, and on safe mode the files open on my desktop and
stuff, Im running on WinME, compaq presario 7000T, or the
latest patches and stuff

Sincerely,

Adam

Hey man thanks for the info, for some bizairre reason it
works now but on ocassions some error pops up, but im
gonna do wat you suggest, the two first downloads you gave
me, to search and destroy all that nonsense, but the third
thing about the regedit, i searched for the Safeguard and
found something next to it that says default, value not
set, wat does that mean ???


adam

-----Original Message-----
You may have a virus/spyware hijack

download the Stinger from here and run it to make sure
that A-V-disabling
viruses are not present on your PC
http://download.nai.com/products/mca...rt/stinger.exe

- update your virus scanner and run a full system scan of
all files.

Reboot to Safe Mode and run CWShredder - to remove
variants of the
CoolWebSearch hijacker.
http://www.merijn.org/cwschronicles.html

Use CWShredder, the removal tool:
http://www.merijn.org/files/cwshredder.zip
http://www.merijn.org/files/CWShredder.exe
http://www.spywareinfo.com/downloads...CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip

Try BHODemon - from
http://www.spywareinfo.com/downloads/bhod/

Download AdAware from www.lavasoftusa.com, install,
update, and run it to
remove spyware, adware,
and other such nasties from your system.

(thanks to Graham Womack for the following)
Do all this in Safe Mode.......
Make a Restore Point - just in case it gets worse.
Using Regedit, search for 'Safeguard'. Make a note of the
dll name (if
there's an entry at all).
Run BHODemon. Look for the same dll name The 'Details'
key should give you
more information about when the entries were loaded.
Disable the registry
entry.
Search your hard drive for the dll file (should be in
Windows\System).
Rename it and a similar named lib file - change the
extensions.
Reboot, cross your fingers and try 'My Computer'

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...2001/Mar01/Mar
27pmvp.asp
"Adam" wrote in
message
...
Hey,
For some crazy reason, I cant open my files, or folders
on
the desktop, not even my computer, or my documents.

I have recived these error, Explorer has caused an error
in (PDF563F.Dll, or Shell32.dll, or Shiwapi.dll,
shdocvw.dll, even once i believe kernel32.dll), i have
tried restore, but to no avail, is there a way i can
find
out wats wrong, like a program that scans the comp or
something and fixes this, all i have is the ability to
go
online, like now, ohh one more thing i also went on safe
mode, and on safe mode the files open on my desktop and
stuff, Im running on WinME, compaq presario 7000T, or
the
latest patches and stuff

Sincerely,

Adam


.

Did you run BHODemon first? - did it find SafeGuard there?
what EXACTLY did you do?
(searching for anything in Windows Explorer will create an entry in the
registry)


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

wrote in message
...
Hey man thanks for the info, for some bizairre reason it
works now but on ocassions some error pops up, but im
gonna do wat you suggest, the two first downloads you gave
me, to search and destroy all that nonsense, but the third
thing about the regedit, i searched for the Safeguard and
found something next to it that says default, value not
set, wat does that mean ???


adam

-----Original Message-----
You may have a virus/spyware hijack

download the Stinger from here and run it to make sure
that A-V-disabling
viruses are not present on your PC
http://download.nai.com/products/mca...rt/stinger.exe

- update your virus scanner and run a full system scan of
all files.

Reboot to Safe Mode and run CWShredder - to remove
variants of the
CoolWebSearch hijacker.
http://www.merijn.org/cwschronicles.html

Use CWShredder, the removal tool:
http://www.merijn.org/files/cwshredder.zip
http://www.merijn.org/files/CWShredder.exe
http://www.spywareinfo.com/downloads...CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip

Try BHODemon - from
http://www.spywareinfo.com/downloads/bhod/

Download AdAware from www.lavasoftusa.com, install,
update, and run it to
remove spyware, adware,
and other such nasties from your system.

(thanks to Graham Womack for the following)
Do all this in Safe Mode.......
Make a Restore Point - just in case it gets worse.
Using Regedit, search for 'Safeguard'. Make a note of the
dll name (if
there's an entry at all).
Run BHODemon. Look for the same dll name The 'Details'
key should give you
more information about when the entries were loaded.
Disable the registry
entry.
Search your hard drive for the dll file (should be in
Windows\System).
Rename it and a similar named lib file - change the
extensions.
Reboot, cross your fingers and try 'My Computer'

HTH

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post
messages to NG's
or
http://www.microsoft.com/presspass/f...2001/Mar01/Mar
27pmvp.asp
"Adam" wrote in
message
...
Hey,
For some crazy reason, I cant open my files, or folders
on
the desktop, not even my computer, or my documents.

I have recived these error, Explorer has caused an error
in (PDF563F.Dll, or Shell32.dll, or Shiwapi.dll,
shdocvw.dll, even once i believe kernel32.dll), i have
tried restore, but to no avail, is there a way i can
find
out wats wrong, like a program that scans the comp or
something and fixes this, all i have is the ability to
go
online, like now, ohh one more thing i also went on safe
mode, and on safe mode the files open on my desktop and
stuff, Im running on WinME, compaq presario 7000T, or
the
latest patches and stuff

Sincerely,

Adam


.

C:\_RESTORE\ARCHIVE\FS571.CAB\A0683596.CPY

has the W32/Bagle.n@MM virus !!!

but does this program fix this, or does it just tell you
its there, i did two scans and the virus is still there

adam

http://support.microsoft.com/?scid=263455
Note - files in the _Restore archive cannot harm your PC unless you restore
back to a time after you were infected, and before you cleaned the system.

Best advice is to leave System Restore well alone until such time as your PC
is all fixed, then reset it to clear the problem (if it's still present)

--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

wrote in message
...
C:\_RESTORE\ARCHIVE\FS571.CAB\A0683596.CPY

has the W32/Bagle.n@MM virus !!!

but does this program fix this, or does it just tell you
its there, i did two scans and the virus is still there

adam

Ok, i did the stinger, in which it stated i had the virus
which we cant do anything about, then i did the CWshreddar
which stated something could be apart of the CWS.Control.4
which uses random file names, C:\WINDOWS\UnGins.exe, i had
no clue so i clicked no, then i did the BHODEMON two
things came up,

#1 was

D:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\READER\ACTIVEX\ACROIEHELPER.OCX__BHODemonDisabled

#2 was

C:\WINDOWS\SYSTEM\PDF563F.DLL__BHODemonDisabled

i disabled them both, now what, i still cant open my
folders or computer, nothing

thanks for everything

adam

Another thing is I keep recieving that the Explorer has
caused an error in Shell32.dll, explorer will now close,
everytime i click on my computer, or a folder, why me lol

adam

You definitely need to run CWShredder again, and tell it to get rid of that
file!!

The Acroread BHO is normal - enable that.
the PDF563F.DLL BHO is dodgy - what does BHODemon say about it when you
click Details|More Details??
Now you've disabled it, reboot, and go to the file itself - rename it to
PDF563F.OLD, reboot again, and see what falls overg.



--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
or
http://www.microsoft.com/presspass/f.../Mar27pmvp.asp

wrote in message
...
Ok, i did the stinger, in which it stated i had the virus
which we cant do anything about, then i did the CWshreddar
which stated something could be apart of the CWS.Control.4
which uses random file names, C:\WINDOWS\UnGins.exe, i had
no clue so i clicked no, then i did the BHODEMON two
things came up,

#1 was

D:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\READER\ACTIVEX\ACROIEHELPER.OCX__BHODemonDisabled

#2 was

C:\WINDOWS\SYSTEM\PDF563F.DLL__BHODemonDisabled

i disabled them both, now what, i still cant open my
folders or computer, nothing

thanks for everything

adam

I re-enabled the acro one, and this is what is said about
the pdf

Details for BHO
C:\WINDOWS\SYSTEM\PDF563F.DLL__BHODemonDisabled
-----------------------------------------------------------
-----------------------------
CLSID: {D4D505DF-D582-400C-91B6-84921012AFE3}
File Size (bytes): 159744
Time Accessed: 2004/6/12 0:0:0
Time Modified: 2002/6/9 21:21:38
Time Created: 2002/6/9 21:21:36
Drive Number: 2
Comments:
CompanyName:
FileDescription:
FileVersion:
InternalName:
LegalCopyright:
LegalTrademarks:
OLESelfRegister:
OriginalFilename:
PrivateBuild:
ProductName:
ProductVersion:
SpecialBuild:


Ok ill rename it and get back to you, as for the shreddar,
ill delete the file, thanks for all the help, whatever you
did bud, its working, the comp hasnt stalled, and i can
access my folders, thanks again noel

adam