Internet explorer has encountered an error and needs to close

[lydz]

I have 3 main problems;

1) I think I may have a virus/malware/spyware on the my computer. Even
though I have removed internet explorer (via add/remove programmes) I get
error messages saying "internet explorer has encountered a programme and
needs to close". The error signature is;

AppName: iexplore.exe AppVer: 7.0.6000.16705 ModName: unknown
ModVer: 0.0.0.0 Offset: 41002047

2) I also get advert pop ups on my computer from internet explorer that ask
me to purchase antivirus software.

3)On startup I get a error message about a file
C:\WINDOWS\System32\zemupalu.dll

Please help, thanks!

[PA Bear [MS MVP]]

[Crossposted to IE General newsgroup]

Your Vista machine had W32/Fake XPA-variant and Vundo-variant infections
(and probably an SDBot-variant infection), all of which is protected by a
rootkit infection.

There is a very good chance that you are seeing the affects of a hijackware
infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT using another computer and then transfer MRT.EXE to the infected
computer.

2. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

Post by lydz
I have 3 main problems;
1) I think I may have a virus/malware/spyware on the my computer. Even
though I have removed internet explorer (via add/remove programmes) I get
error messages saying "internet explorer has encountered a programme and
needs to close". The error signature is;
AppName: iexplore.exe AppVer: 7.0.6000.16705 ModName: unknown
ModVer: 0.0.0.0 Offset: 41002047
2) I also get advert pop ups on my computer from internet explorer that ask
me to purchase antivirus software.
3)On startup I get a error message about a file
C:\WINDOWS\System32\zemupalu.dll
Please help, thanks!

[Display name:]

Post by PA Bear [MS MVP]
[Crossposted to IE General newsgroup]
Your Vista machine had W32/Fake XPA-variant and Vundo-variant
infections (and probably an SDBot-variant infection), all of which is
protected by a rootkit infection.
There is a very good chance that you are seeing the affects

Do you mean 'effects' ?

I guess people type as they hear their internal voice - but it looks so
wrong when they're misused, not to say bloody sloppy.


of a

Post by PA Bear [MS MVP]
hijackware infection.
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download
the MSRT using another computer and then transfer MRT.EXE to the
infected computer.
2. Run a /thorough/ check for hijackware, including posting the
requested logs in an appropriate forum, not here.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If the procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA) computer repair
shop.

Post by lydz
I have 3 main problems;
1) I think I may have a virus/malware/spyware on the my computer.
Even though I have removed internet explorer (via add/remove
programmes) I get error messages saying "internet explorer has
encountered a programme and needs to close". The error signature is;
AppName: iexplore.exe AppVer: 7.0.6000.16705 ModName: unknown
ModVer: 0.0.0.0 Offset: 41002047
2) I also get advert pop ups on my computer from internet explorer that ask
me to purchase antivirus software.
3)On startup I get a error message about a file
C:\WINDOWS\System32\zemupalu.dll
Please help, thanks!