Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
2/7/2004 6:47:00 PM EDT
I am getting a kernel.dll error when I open Inernet Explorer.  If I ignore the Problem encountered statement I can sometimes continue using IE.  This problem began after I got a trojan.byte.verify virus.  The virus has been removed.  

Any thoughts?
2/7/2004 6:50:45 PM EDT
[#1]
restore it from your os cd
2/8/2004 2:38:39 AM EDT
[#2]
Go to Windows Update and run all the IE service packs, if you haven't already...
2/8/2004 2:43:15 AM EDT
[#3]
What version on windows?  How did you remove virus?
2/8/2004 5:26:07 AM EDT
[#4]
Windows 98 IE 6.XX I used nortin to remove the virus.  I believe the first virus allows remote access to your PC.  I can find another virus on my machine. I will try the service packs and OS restore.
2/8/2004 5:39:34 AM EDT
[#5]
Remove the Internet Explorer virus and replace it with a better product like [url]www.opera.com[/url], get an anti-virus product and keep it up to date, install a firewall either in software or a hardware one, and finally stop opening e-mail attachments.
2/8/2004 6:00:27 AM EDT
[#6]
Quoted:
Remove the Internet Explorer virus and replace it with a better product like [url]www.opera.com[/url], get an anti-virus product and keep it up to date, install a firewall either in software or a hardware one, and finally stop opening e-mail attachments.
View Quote


Ding ding ding.  We have a winner.

I personally only use IE for updates and for our finance DB front end (won't work with Firebird...)

Geoff
2/8/2004 8:50:35 AM EDT
[#7]
IE 6 SUX.... I hadta remove it, and re-install IE 5.5...

6 is bad juju.
2/8/2004 12:12:06 PM EDT
[#8]
From my laptop

Sorry about all the typos I had to type quickly before EI locked up. I do have a current/updated version of Norton AntiVirus installed.   Not sure how I got the virus.  I don't open unknown emails. I don't have a firewall. Any suggestions concerning a firewall?


BTW the error is


[b]IEXPLORE caused an invalid page fault in
module KERNEL32.DLL at 017f:bff7a388.
Registers:
EAX=01a30dd4 CS=017f EIP=bff7a388 EFLGS=00010206
EBX=00000474 SS=0187 ESP=0314e0c8 EBP=0314e0ec
ECX=6172676f DS=0187 ESI=01934ab4 FS=10df
EDX=01930000 ES=0187 EDI=02701bf0 GS=0000
Bytes at CS:EIP:
89 41 08 8b 56 04 8b 46 08 89 50 04 8d 04 1e 50
Stack dump:
02701bf0 00000000 0193000c 01930000 01934ab4 00000000 00000000 00004036 00001935 0314e114 bff7a550 01930000 01934ab4 00000474 00000000 00000000
[/b]

2/8/2004 12:24:30 PM EDT
[#9]
Go to 'Add/Remove Programs', in Control Panel

Select 'Microsoft Internet Explorer 6.xx'

Click 'Add/Remove'

You will be presented with a list of options, pick 'repair'

ByteVerify is a spyware trojan, not a virus... You may need to use LSPFix, if you can't get on the net when the above is done...

Also, get and run both Adaware and Spybot SD, you probably have more stuff that Norton will never find...
2/8/2004 12:36:14 PM EDT
[#10]
I have Adaware it didn't remove it.  I did try to fix IE using system information. I have also restored IE to previous version 5.xx and then reinstalled IE 6 and updated from the net.Still a no-go. I will try the add/remove fix.

Updat -Adaware did find 2 new files.
[b]
Started registry scan
======================
Alexa key:HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}

Started extended registry scan
===============================
Possible Browser Hijack attempt data:Software\Microsoft\Internet Explorer\Main"Search Page" (Possible Browser Hijack attempt)


Registry scan result:
Suspicious keys found :2
[/b]
2/8/2004 12:45:20 PM EDT
[#11]
Quoted:
Remove the Internet Explorer virus and replace it with a better product like [url]www.opera.com[/url], get an anti-virus product and keep it up to date, install a firewall either in software or a hardware one, and finally stop opening e-mail attachments.
View Quote


java/byteVerify is a web page hack, it is got by visiting a untrusted site.
It is a low level, more a pain in the ass virus. Housecall and others list it as a virus, not spyware.

spybot
go to advanced mode and lock your IE settings.
the Kernel .dll is easy to replace with the disk.
Been there done that this week.
Also update your Microsoft VM or get the latest java pack from Sun.
2/8/2004 12:47:14 PM EDT
[#12]
Quoted:
I have Adaware it didn't remove it.  I did try to fix IE using system information. I have also restored IE to previous version 5.xx and then reinstalled IE 6 and updated from the net.Still a no-go. I will try the add/remove fix.

View Quote


It is stored in the java cache, delete it.
Then upgrade the java package, it will not load on more current java packages.
2/8/2004 1:44:51 PM EDT
[#13]
Adaware seems to have solved the problem.  Thanks for the help.  I will be down-loading Spybot and installing a firewall soon.  I have download Opera and will try that also.

Thanks for all the help.

Update not working again time to delete IE.