"Critical Sytem Error!"

Anyone else had this lately?

Spybot gives the all clear, as does Norton, and AVG.

TrojanHunter scanning at the moment.

Every screen change in IE gives the message, with a suggestion to
click on a button to download a fix.

Now, I may be stupid, but ...

A lot of sites seem to offer a highly dubious solution - one of which
involved a video of some young lady enjoying the not inconsiderable
attentions of a young gentleman.
--
| ___ Salad Dodger
|/ \
_/_____\_ GL1500SEV/CBR1100XXX/CBX1000Z
|_\_____/_| ..93550../..25068.../..31928.
(>|_|_|<) TPPFATUICG#7 DIAABTCOD#9 WG*
|__|_|__| BOTAFOT #70 BOTAFOF #09 PM#5
\ |^| / IbW#0 & KotIbW# BotTOS#6 GP#4
\|^|/ ANORAK#17 IbB#4 YTC#4 two#11
'^' RBR Clues: 00 Pts:0000 Miles:0000

 

No

I remember the days of Windows - what Joy......
There's a program called Hijack This that detects nasties on your PC -
http://www.merijn.org/programs.php#hijackthis
Think you have to use the forums as a reference though.
Also I think there's an IE protection system with Spybot (if you're
not using it already) and if you've got the bandwidth Panda do an
online scanner to root out nasties.
http://www.pandasecurity.com/homeusers/solutions/activescan/

Last of all - Get rid of Internet Exploder and move to Firefox web
browser.

Mark

 

The "Critical Sytem Error!" may not be real, just trying to get you to try
the "fix" sites in panic.

Try shutting down, clear IE Javascript caches on start-up, resart again and
see if the Error is real.

 

Yes. MS released a patch about 2 weeks ago that broke IE.
They've since released (as of thursday) a patch to unpatch
the patch they patched in the first patch.

Check with windowsupdate.com if you haven't got auto updates
installed.

 

<Pats iMac running Safari affectionately>

 

Ditto with Solaris laptop

 

I think I can fix this one for you. Assuming it is a adware type thing

Have a look in the registry for the startup bit, you will see a wierdly
named executable there.

Boot the system in safe mode and edit out the program from startup.
Open terminal window and go to the directory that the program resides in.

change the attributes of the hidden file (attrib summit)
delete the file then create a new one of the same name and set it to
sys/ro.

Reboot and the problem should be cured.

HTH

 

I'd go so far as to say it _isn't_ real. I've never come across this
sort of message, when I did Windows SysAdmin stuff.

 

Have you upgraded to 10.5 yet? I did and found that PithHelmet didn't
work. It took a while to finally get a partially working 'beta'.

 

Massively unlikely to IMHO.

--
Catman MIB#14 SKoGA#6 TEAR#4 BOTAFOF#38 Apostle#21 COSOC#3
Tyger, Tyger Burning Bright (Remove rust to reply)
116 Giulietta 3.0l Sprint 1.7 145 2.0 Cloverleaf 156 V6 2.5 S2
Triumph Sprint ST 1050: It's blue, see.
www.cuore-sportivo.co.uk

 

Well, your opinion is wrong, 'cos that is exactly how I cured my (late)
dad's PC of once such PITA adware browser hijacker recently. Sometimes the
simplest approach is the best.

 

If a site works with IE only, it isn't worth visiting.

 

If it is a browser jacker, it will get FF as well.

 

Such as this?

H/PC Connection Agent = "C:\Program Files\Microsoft
ActiveSync\WCESCOMM.EXE"
--
| ___ Salad Dodger
|/ \
_/_____\_ GL1500SEV/CBR1100XXX/CBX1000Z
|_\_____/_| ..93550../..25068.../..31928.
(>|_|_|<) TPPFATUICG#7 DIAABTCOD#9 WG*
|__|_|__| BOTAFOT #70 BOTAFOF #09 PM#5
\ |^| / IbW#0 & KotIbW# BotTOS#6 GP#4
\|^|/ ANORAK#17 IbB#4 YTC#4 two#11
'^' RBR Clues: 00 Pts:0000 Miles:0000

 

Yes, does the file in question actually exist ?

 

Indeed it does.
--
| ___ Salad Dodger
|/ \
_/_____\_ GL1500SEV/CBR1100XXX/CBX1000Z
|_\_____/_| ..93550../..25068.../..31928.
(>|_|_|<) TPPFATUICG#7 DIAABTCOD#9 WG*
|__|_|__| BOTAFOT #70 BOTAFOF #09 PM#5
\ |^| / IbW#0 & KotIbW# BotTOS#6 GP#4
\|^|/ ANORAK#17 IbB#4 YTC#4 two#11
'^' RBR Clues: 00 Pts:0000 Miles:0000

 

Sometimes, it may well be. *Most* of the time you'll just be going round
in circles.

--
Catman MIB#14 SKoGA#6 TEAR#4 BOTAFOF#38 Apostle#21 COSOC#3
Tyger, Tyger Burning Bright (Remove rust to reply)
116 Giulietta 3.0l Sprint 1.7 145 2.0 Cloverleaf 156 V6 2.5 S2
Triumph Sprint ST 1050: It's blue, see.
www.cuore-sportivo.co.uk

 

Got active sync installed? That's part of it. Remove that and it will
break.

--
Catman MIB#14 SKoGA#6 TEAR#4 BOTAFOF#38 Apostle#21 COSOC#3
Tyger, Tyger Burning Bright (Remove rust to reply)
116 Giulietta 3.0l Sprint 1.7 145 2.0 Cloverleaf 156 V6 2.5 S2
Triumph Sprint ST 1050: It's blue, see.
www.cuore-sportivo.co.uk

 

Not that one then.

Looks like not the same issue as I hit then. Nothing that looks like
WINKKZYM.EXE ?

I don't touch XP much, but from memory.

Regedit

HKEY_LOCAL_MACHINE->SOFTWARE->microsoft->Windows->CurrentVersion->Run|once|ex

Are the spots to find stuff in

 

It is to some of us.