Is this a virus ?

[steenpe]

Hi everybody,

I get several times a day this message:

Explorer.exe - erreur d'application
L'instruction à "0x77f47d85" emploie l'adresse mémoire xxxxx. La mémoire ne peut pas être "written".
Cliquez sur OK pour terminer le programme;
Cliquez sur Annuler pour déboguer le programme

It appears when the PC is not running anything (only background tasks such as antivirus, Diskeeper defragmentation etc.). It also appears when running for instance Word.

The instruction address is always the same. The memory address is different at each message.

MY PC runs under Windows XP Pro, 1GB memory, P4 2.66GHz

Thanks for helping !

 

[kiwiguy]

Probably more likely to be a corruption in a windows file.

Run system file check.

Start-Run- type "SFC /scannow" and enter

Dont type the quotes, make sure there is a space between "SFC" and "/scannow"
A dalogue box will appear if you get that correct, takes a few minutes.

 

[bobol]

Explorer.exe - erreur d'application
L'instruction à "0x77f47d85" emploie l'adresse mémoire xxxxx. La mémoire ne peut pas être "written".
Cliquez sur OK pour terminer le programme;
Cliquez sur Annuler pour déboguer le programme

I assume you are using french version xp; to translate for others reading-
Explorer.exe-application error
...0x77f47d85 uses memory address xxxxx. Memory can't be written
Click on ok to end program
click on cancel to debug the program

run adaware/spybot -free from links below//for starters

 

[steenpe]

kiwiguy,
Thanks for the advice - I just did what you said. While scanning, the process asked me 19 times to insert the CD Windows XP pro (is that normal?), what I did. At the end, no message was displayed (is that also normal?).

bobol,
Thank's for the translation! I just ran Ad-aware 6 (found 3 cookies which I deleted), and Spybot S&D. The latter found Evileye (iun6002.exe but I understand this is not really a malware) and DSO Exploit (which I also removed, but it was back at the subsequent scan (appears to be normal).

I hope that this helped. I'll be back if the error message shows up again.

 

[bobol]

great catches....please do report back- lets see if maybe you'll be advised to run a hijack this log here too.

 

[bobol]

here's how to run hijack this[link below];-

It’s very important that you save the log to its own folder on your hard drive, such as program files (not temporary files or the desktop), so that it can create proper back-ups and be able to restore them if necessary.

Close all open windows and open Hijack This. Click “Scan”. When the scan is finished (it only takes a second), the scan button will change to “Save Log”. Click on “Save Log” and then save it to NotePad. Click on “Edit” – “Select all” – “copy” and then “paste” into the thread.

DO NOT FIX ANYTHING YET;- Await further analysis here.

 

[southernlady]

steenpe, after you finish with HJack This, you might want to go back and download the newest version of AdAware, AdAware SE: http://www.majorgeeks.com/download506.html and rescan with it. You might be surprised at what you find that the old version didn't catch. Liz

 

[bobol]

thanks for the update eyes-up southern lady...

 

[southernlady]

No Problem, bobol...and just so you know, they will send you to one of a number of mirror sites, www.majorgeeks.com is one of them. Liz

 

[bobol]

actually i edited too hastily...lol,my link was for adware's homesite,lavasoft itself thnx still tho'