Help please - I can't start windows explorer or Internet Explorer

Anic

Hi

I hope someone can help me.

After being away for a couple of days I have tried to open up Internet Explorer and it keeps causing an illegal operation and won't open.

The message I get is "Explorer has caused an invalid page fault in module kernel32.dll at 0187:bff9db61"

When I try to use Windows Explorer I get the followng messages

"Explorer caused an invalid page fault in module BHO.DLL at 0187:01f244e7"

and then when I close that box down I get

"Explorer caused an invalid page fault in module DIMM.DLL at 0187:642039de"

Luckily enough I decided to try Firefox to see what it was like and downloaded it a couple of weeks ago so can use this for the internet but have no idea how I can see my music and photographs without using Windows explorer.

Can anybody help by telling me how to fix it please. (Preferably in as symplistic terms as possible as I am not very computer literate).

Rex_Mundi

Explorer caused an invalid page fault in module BHO.DLL

The part I've highlighted as red looks like either like part of a trojan or spyware. It looks like you've got some form of infection on your computer.

Make sure your antivirus is up to date and run it. Also (if you don't have them already) download and run Adaware, and Spybot. Hopefully one of these will remove the !!!!!!.

Anic

Rex_Mundi wrote:

The part I've highlighted as red looks like either like part of a trojan or spyware. It looks like you've got some form of infection on your computer.

Make sure your antivirus is up to date and run it. Also (if you don't have them already) download and run Adaware, and Spybot. Hopefully one of these will remove the !!!!!!.

Thanks Rex

I have AVG free Antivirus, Adaware, Spybot search and destroy and also Spywareblaster. I have located updates for all of them and ran them all and they haven't found anything. Do I need to run them in safe mode?

Mr_Skint_2

Sorry to but in but did you run AVG in safe mode?

Rex_Mundi

Do I need to run them in safe mode?

If you are on XP, then it would be better to.

If your scans have so far turned up nothing. Try downloading Hijackthis . Run the scan, save the results in a log file. Then open the log (with notepad), copy the contents and paste them into THIS site. See what it flags up for you.

The BHO.DLL definately looks part of malware/spyware.

It wouldn't hurt to download and run CWShredder while you're at it.

Anic

I don't have Windows XP - I have Windows 98 SE.

I did download CWShredder and ran it - it didn't find anything either.

I will try running AVG in Safe mode and see if that makes any difference.

Thank you both for your help

Rex_Mundi

In W98SE you shouldn't have to run AVG in safe mode. Try Hijackthis.

Anic

Thanks Rex

I only seen your second message after I had already completed the scan in safemode. As earlier, it didn't find anything.

I will try hijack this and thanks for your help (and you Mr Skint).

F1F1

http://securityresponse.symantec.com/avcenter/venc/data/adware.iepagehelper.html

It's Adware.IEPageHelper apparently, which is an adware program.

"Adware.IEPageHelper highlights words on Web pages and displays text when you move the cursor over the words."

Read the removal instructions from the above link, which are basically -

1. Update your virus definitions.
2. a) Click Start, and then click Run. (The Run dialog box appears.)
b)Type, or copy and paste, the following text:

regsvr32 /u "[path to bho.dll]\bho.dll"

then click OK.

If a dialog box confirming this action appears, click OK.

3. Do a full system scan of your computer with your antivirus program.
If any files are detected as Adware.IEPageHelper, click Delete.

Anic

F1F1 wrote:

1. Update your virus definitions.
2. a) Click Start, and then click Run. (The Run dialog box appears.)
b)Type, or copy and paste, the following text:

regsvr32 /u "[path to bho.dll]\bho.dll"

then click OK.

Thanks for your help F1F1,

I tried what you suggested but when I ran the above I got the following message

"LoadLibrary("[path to bho.dll]\bho.dll")failed
GetLastErrors returns 0x00000485

F1F1

Have you noticed highlighted words in Internet Explorer which give info when you hover your cursor over them?