Error loading Explorer.exe

kammra · 08-25-2007, 08:03 AM

After running an AVG scan I got this message:

Error loading EXPLORER.EXE. You must reinstall Windows

The Win/32BubeL viruse was found and quarantined. I can only start in safe mode and cannot access the internet from that computer.

Any help would be greatly appreciated.

My transcribed log is as follows:

Logfile of HijackThis v1.99.1
Scan saved at 3:13:48 PM, on 8/19/07
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\HIJACKTHIS.EXE

R1-HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
file://C:\WINDOWS\TEMP\sp.html
R3 - Default URLsearchHook is missing
O2 - BHO: (no name) - {E99896EC-2FA7-OD42-727A-B792E2646594} -
C:\WINDOWS\SYSTEM\prorplmt\kdktpmds.dll {file missing}
O2 - BHO: COMMUNICATOR - {4E7BD74F-2B8D-469E-8DBC-A42EB79CB428} -
C:\WINDOWS\SYSTEM\communicator.dll {file missing}
02 - BHO: {no name} - {0AD937E7-2F37-4873-AO5E-548A67EF1DOE} - {no file}
02 - BHO: Searchfst Class - {000277A3-7D84-406a-9799-D12A81594693} -
C:\WINDOWS\SRCHFST.DLL {file missing}
03 - Toolbar: COMMUNICATOR - {4E7BD74F-2B8D-469E-8DBC-A42EB79CB428} -
C:\WINDOWS\SYSTEM\communicator.dll {file missing}
03 - Toolbar: Searchfst Class - {000277A3-7BD84-406a-9799-D12A81594693} -
C:\WINDOWS\SRCHFST.DLL {file missing}
03 - Toolbar: @msdxmLC.dll, - 1@1033, &Radio -
{8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
04 - HKLM\..\Run: [EnsoniqMixer] starter.exe
o4 - HKLM\..\Run: [MMHID] rundll32 mmhid.dll,StartMmHid
012 - Plugin for .spop:
C:\PROGRA-1\INTERN-1\Plugins\NPDocBox.dll
012 - Plugin for .com/banner/?661: C:Program
Files\Netscape\Communicator\Program\PLUGINS\npswf32.dll
012 - Plugin for .swf: C:\Program
Files\Netscape\Communicator\Program\PLUGINS\npswf32.dll
012 - Plugin for .dir: c:\Program
Files\Netscape\Communicator\Program\PLUGINS\NP32DSW.DLL
012 - Plugin for .dcr: C:\Program
Files\Netscape\Communicator\Program\PLUGINS\NP32DSW.DLL
012 - Plugin for .avi: C:\Program
Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll
015 - Trusted Zone: *.elitemediagroup.net
016 - DPF: {74DO5D43-3236-11D4-BDCD-00C04F9A3B61}
(Housecall Control) -
http://a840.g.akamai.net/7/840/537/2004061001/housecall.
trendmicro.com/housecall/xscan53.cab
016 -DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02}
(Housecall Control) -
http://housecall60.trendmicro.com/housecall/xsczn60.cab
016 - DPF: Yahoo! Poker -
http://download.games.yahoo.com/game...ts/y/pt3_x.cab
016 - DPF: {9AC54695-69A4-46F1-BE10-10C74F9520D5}
(elitectl.DemoCtl) -
http://cabs.elitemediagroup.net/cabs/mediaview.cab

kammra · 08-26-2007, 01:57 PM

bump.

kammra · 08-27-2007, 02:07 PM

bump.

You folks must be busy or there is no known cure.
I can wait.

kammra · 08-28-2007, 02:56 PM

bump.

kammra · 08-30-2007, 07:31 PM

One more try?

kammra · 09-01-2007, 08:10 PM

Again, I will ask, can this computer be saved?

Ried · 09-01-2007, 08:32 PM

Hello kammra,

Honestly, your system is terribly infected with many more infections that AVG hasn't cleaned. AVG was unable to clean the Bube infection properly, which is why you are now having issues loading Explorer.exe.

Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognize and logs won't show--especially as this is a 98 Gold OS.

Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.

I would suggest backing up any important data, reformat, and reinstall your OS on this computer.

kammra · 09-01-2007, 09:59 PM

Thank you Ried.

Ried · 09-01-2007, 10:59 PM

You're welcome, kammra.

In light of your recent issue, I'm sure you'd like to avoid any future infections. After you've reformatted and reinstalled your OS, please take a look at these well written articles:

PC Safety and Security--What Do I Need?

HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein
THE ANTI-SPYWARE TUTORIAL
MAKING INTERNET EXPLORER SAFER
Understanding and Using Firewalls

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

08-25-2007, 08:03 AM	#1 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Error loading Explorer.exe After running an AVG scan I got this message: Error loading EXPLORER.EXE. You must reinstall Windows The Win/32BubeL viruse was found and quarantined. I can only start in safe mode and cannot access the internet from that computer. Any help would be greatly appreciated. My transcribed log is as follows: Logfile of HijackThis v1.99.1 Scan saved at 3:13:48 PM, on 8/19/07 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\HIJACKTHIS.EXE R1-HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\WINDOWS\TEMP\sp.html R3 - Default URLsearchHook is missing O2 - BHO: (no name) - {E99896EC-2FA7-OD42-727A-B792E2646594} - C:\WINDOWS\SYSTEM\prorplmt\kdktpmds.dll {file missing} O2 - BHO: COMMUNICATOR - {4E7BD74F-2B8D-469E-8DBC-A42EB79CB428} - C:\WINDOWS\SYSTEM\communicator.dll {file missing} 02 - BHO: {no name} - {0AD937E7-2F37-4873-AO5E-548A67EF1DOE} - {no file} 02 - BHO: Searchfst Class - {000277A3-7D84-406a-9799-D12A81594693} - C:\WINDOWS\SRCHFST.DLL {file missing} 03 - Toolbar: COMMUNICATOR - {4E7BD74F-2B8D-469E-8DBC-A42EB79CB428} - C:\WINDOWS\SYSTEM\communicator.dll {file missing} 03 - Toolbar: Searchfst Class - {000277A3-7BD84-406a-9799-D12A81594693} - C:\WINDOWS\SRCHFST.DLL {file missing} 03 - Toolbar: @msdxmLC.dll, - 1@1033, &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX 04 - HKLM\..\Run: [EnsoniqMixer] starter.exe o4 - HKLM\..\Run: [MMHID] rundll32 mmhid.dll,StartMmHid 012 - Plugin for .spop: C:\PROGRA-1\INTERN-1\Plugins\NPDocBox.dll 012 - Plugin for .com/banner/?661: C:Program Files\Netscape\Communicator\Program\PLUGINS\npswf32.dll 012 - Plugin for .swf: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npswf32.dll 012 - Plugin for .dir: c:\Program Files\Netscape\Communicator\Program\PLUGINS\NP32DSW.DLL 012 - Plugin for .dcr: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NP32DSW.DLL 012 - Plugin for .avi: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll 015 - Trusted Zone: *.elitemediagroup.net 016 - DPF: {74DO5D43-3236-11D4-BDCD-00C04F9A3B61} (Housecall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall. trendmicro.com/housecall/xscan53.cab 016 -DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (Housecall Control) - http://housecall60.trendmicro.com/housecall/xsczn60.cab 016 - DPF: Yahoo! Poker - http://download.games.yahoo.com/game...ts/y/pt3_x.cab 016 - DPF: {9AC54695-69A4-46F1-BE10-10C74F9520D5} (elitectl.DemoCtl) - http://cabs.elitemediagroup.net/cabs/mediaview.cab

08-26-2007, 01:57 PM	#2 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe bump.

08-27-2007, 02:07 PM	#3 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe bump. You folks must be busy or there is no known cure. I can wait.

08-28-2007, 02:56 PM	#4 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe bump.

08-30-2007, 07:31 PM	#5 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe One more try?

09-01-2007, 08:10 PM	#6 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe Again, I will ask, can this computer be saved?

09-01-2007, 08:32 PM	#7 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,043 OS: WinXP and Vista	Re: Error loading Explorer.exe Hello kammra, Honestly, your system is terribly infected with many more infections that AVG hasn't cleaned. AVG was unable to clean the Bube infection properly, which is why you are now having issues loading Explorer.exe. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognize and logs won't show--especially as this is a 98 Gold OS. Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution. I would suggest backing up any important data, reformat, and reinstall your OS on this computer. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

09-01-2007, 09:59 PM	#8 (permalink)
kammra Registered User Join Date: Sep 2004 Posts: 46 OS: Win98	Re: Error loading Explorer.exe Thank you Ried.

09-01-2007, 10:59 PM	#9 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,043 OS: WinXP and Vista	Re: Error loading Explorer.exe You're welcome, kammra. In light of your recent issue, I'm sure you'd like to avoid any future infections. After you've reformatted and reinstalled your OS, please take a look at these well written articles: PC Safety and Security--What Do I Need? HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein THE ANTI-SPYWARE TUTORIAL MAKING INTERNET EXPLORER SAFER Understanding and Using Firewalls **Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."