Owned by Spyware!! Please Help?

[spyware_victim]

I don't have a screen print, I gathered this info though...

Microsoft internet explorer

Microsoft Internet explorer has encountered a problem and needs to close.

Error signature
AppName: iexplorer.exe AppVer: 6.0.2800.1106 ModName: unknown
ModVer: 0.0.0.0 Offset:ffffffff

Another reads:

AppName: iexplorer AppVerunsure of this number) ModName: wininet.dll ModVer:6.0.2800.1559 Offset:000264c9

[jholland1964]

Could find no info on the first error but the second one I found this on the Microsoft website;

This behavior can occur if the AutoComplete feature for Internet Explorer or Windows Explorer is trying to use corrupted information in the History folder.

RESOLUTION
To resolve this issue:
1. On the Tools menu in Internet Explorer, click Internet Options.
2. Click the Advanced tab.
3. Click to clear the Use inline AutoComplete for Web addresses and Use inline AutoComplete for Windows Explorer check boxes.
4. Click OK.
5. Reboot your computer. Press and hold down F8 while the computer boots to display the Startup menu.
6. Choose Command Prompt Only, and then press ENTER.
7. Type the following items, pressing ENTER after each item:
cd\windows
deltree downlo~1
deltree tempor~1
deltree history
deltree cookies
NOTE: Press Y if you are prompted to confirm any deletion.

8. Reboot your your computer normally.
9. On the Tools menu in Internet Explorer, click Internet Options.
10. Click the Advanced tab.
11. Click to select the Use inline AutoComplete for Web addresses and Use inline AutoComplete for Windows Explorer check boxes.
12. Click OK.
You can test the AutoComplete feature by typing several different addresses in the Address box (one at a time):
1. Type www.msn.com and load the page.
2. Type www.yahoo.com and load the page.
3. Type www.msn and see if the AutoComplete list is displayed.

[spyware_victim]

Could find no info on the first error but the second one I found this on the Microsoft website;

I checked the 'Use inline AutoComplete for Web addresses' box. But there wasn't an option or listing for the other direction.

I got into the command prompts (cmd? i think it said at the top of the black box)
I THEN TYPED cd\windows and pressed enter & it said system cannot find path specified

Then i tryed cd\windows deltree downloa~1 and it gave thwe same error msg as above

I tryed various combinations of the other orders listed but the same error msg was given.


nb - What am I doing wrong? I feel a bit of a melvin here!!!
In startup I held down f8 and it brought me to the same option window as if i just pressed f8..I presume it doesn't make a difference?

Thanks Judy!

[jholland1964]

What am I doing wrong? I feel a bit of a melvin here!!! In startup I held down f8 and it brought me to the same option window as if i just pressed f8..I presume it doesn't make a difference?

Hey, don't feel bad, I truly believe these machines have a built in command that says "make the operator feel like an idiot"...LOL...we all have felt that way, many, many times!

As far as getting into the command prompt, if you got in there then no problem.
Why not try using CCleaner that you downloaded earlier when we began all of this. It will clean out the files we are trying to remove anyway. Just run it in Normal Mode and use the Default Scan only. Let it analyze and then remove whatever it finds. Then reboot the computer and see if the errors still appear.

Also, have looked and looked for info on your "grayware" listing TSPY_PUPER and can find virtually nothing, except the same info from others that you have posted about it found by the Trend Micro scan but not removed. I would have to guess that it is also known, somewhere, by another name and quite possible one of those trojans found by your various scans and removed was probably this one also. Honestly? I don't know.