IE Freezing and Shutdown Error

I started having troubles with my Win ME system around 2 weeks ago. First, while I'm using IE6, it freezes, not always during the same actions though. It freezes while trying to access web pages or while trying to scroll in web pages. I also have many kpremium.com popups in places where I generally should not get such a popup. Now, every time I try to restart or shut down, my computer shows the blue screen with the error OE : 017F : BFF8E64B

I also have errors popup (usually while using IE) for netdde and wavedb.

I've tried IE Repair, Ad-Aware, Spybot, SwatIt, and other online virus scans, and they find nothing.

512 mb RAM, OE6, IE6... any suggestions before I simply reformat?

It would appear that you have picked up some unwanted malware despite your
checks to date having failed to find the culprit. kpremium.com appears to be
associated with the use of Kazaa. Formatting and reinstalling should be your
very last resort and is rarely necessary.

Did you check for updates before you used AdAware and SpyBot? If not may I
strongly suggest that you do so. Unfortunately few virus scans on-line or
otherwise are designed to detect commercial parasites such as the one I feel
you have picked up.

May I also suggest you download and use BHODemon
http://www.definitivesolutions.com/bhodemon.htm that checks for unwanted
Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best way
of getting rid of the many forms of the CoolWebSearch hijacker details of
which can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html). Create a
folder called hijackthis on C: and copy the file you downloaded to that
folder. Close as many applications as you can including all instances of
Internet Explorer and then run hijackthis.exe and post back the log, provided
that it isn't too long, to this thread, otherwise to the HijackThis Forum at
http://forums.spywareinfo.com/ or alternatively
http://forum.aumha.org/viewforum.php?f=30 and hopefully this will enable
someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and
Search Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--?
Mike Maltby MS-MVP



Trevor wrote:

I started having troubles with my Win ME system around 2 weeks ago.
First, while I'm using IE6, it freezes, not always during the same
actions though. It freezes while trying to access web pages or while
trying to scroll in web pages. I also have many kpremium.com popups
in places where I generally should not get such a popup. Now, every
time I try to restart or shut down, my computer shows the blue screen
with the error OE : 017F : BFF8E64B

I also have errors popup (usually while using IE) for netdde and
wavedb.

I've tried IE Repair, Ad-Aware, Spybot, SwatIt, and other online
virus scans, and they find nothing.

512 mb RAM, OE6, IE6... any suggestions before I simply reformat?

Well, I use an old version of Kazaa Lite. So I don't understand how the
kpremium.com popup is related to usage of the program. I have run
CWShredder and it found nothing. Ad-Aware and Spybot are both updated. I
tried the other programs and they did not help... I would attach the log
file for HijackThis, but as I have seen on another newsgroup, it somehow
contains an Exploit virus. (how a log file that I made contains a virus, I
have no idea)

"Mike M" wrote in message
...
It would appear that you have picked up some unwanted malware despite your
checks to date having failed to find the culprit. kpremium.com appears to
be
associated with the use of Kazaa. Formatting and reinstalling should be
your
very last resort and is rarely necessary.

Did you check for updates before you used AdAware and SpyBot? If not may
I
strongly suggest that you do so. Unfortunately few virus scans on-line or
otherwise are designed to detect commercial parasites such as the one I
feel
you have picked up.

May I also suggest you download and use BHODemon
http://www.definitivesolutions.com/bhodemon.htm that checks for unwanted
Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best
way
of getting rid of the many forms of the CoolWebSearch hijacker details of
which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a
folder called hijackthis on C: and copy the file you downloaded to that
folder. Close as many applications as you can including all instances of
Internet Explorer and then run hijackthis.exe and post back the log,
provided
that it isn't too long, to this thread, otherwise to the HijackThis Forum
at
http://forums.spywareinfo.com/ or alternatively
http://forum.aumha.org/viewforum.php?f=30 and hopefully this will enable
someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and
Search Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--?
Mike Maltby MS-MVP



Trevor wrote:

I started having troubles with my Win ME system around 2 weeks ago.
First, while I'm using IE6, it freezes, not always during the same
actions though. It freezes while trying to access web pages or while
trying to scroll in web pages. I also have many kpremium.com popups
in places where I generally should not get such a popup. Now, every
time I try to restart or shut down, my computer shows the blue screen
with the error OE : 017F : BFF8E64B

I also have errors popup (usually while using IE) for netdde and
wavedb.

I've tried IE Repair, Ad-Aware, Spybot, SwatIt, and other online
virus scans, and they find nothing.

512 mb RAM, OE6, IE6... any suggestions before I simply reformat?

Your HiJackThis log is a plain text file and can contain no virus so whoever
claims that it does needs to ..... You would however be much better served by
posting your log to either the HijackThis Forum at
http://forums.spywareinfo.com/ or alternatively
http://forum.aumha.org/viewforum.php?f=30 where hopefully someone will help
identify the cause of your problem.
--
Mike Maltby MS-MVP



Trevor wrote:

Well, I use an old version of Kazaa Lite. So I don't understand how
the kpremium.com popup is related to usage of the program. I have run
CWShredder and it found nothing. Ad-Aware and Spybot are both
updated. I tried the other programs and they did not help... I
would attach the log file for HijackThis, but as I have seen on
another newsgroup, it somehow contains an Exploit virus. (how a log
file that I made contains a virus, I have no idea)

Ok, I'll definitely do that. Thanks so much for your help.

"Mike M" wrote in message
...
Your HiJackThis log is a plain text file and can contain no virus so
whoever
claims that it does needs to ..... You would however be much better
served by
posting your log to either the HijackThis Forum at
http://forums.spywareinfo.com/ or alternatively
http://forum.aumha.org/viewforum.php?f=30 where hopefully someone will
help
identify the cause of your problem.
--
Mike Maltby MS-MVP



Trevor wrote:

Well, I use an old version of Kazaa Lite. So I don't understand how
the kpremium.com popup is related to usage of the program. I have run
CWShredder and it found nothing. Ad-Aware and Spybot are both
updated. I tried the other programs and they did not help... I
would attach the log file for HijackThis, but as I have seen on
another newsgroup, it somehow contains an Exploit virus. (how a log
file that I made contains a virus, I have no idea)