With ME, when booted the following error message
appears: "Explorer has caused an error in ~865151355.tmp
if you continue have problems try restarting your
computer" restarting doesn't solve the problem nor does
deleting the file from safe mode. Any ideas?

Re: Error Message by Mike

Mike
Mon Oct 11 11:24:57 CDT 2004

The error "Explorer has caused an error in ~865151355.TMP.TMP" or similar
is due to malware of some sort, possibly the ClientMan/MSMC browser plugin
which is used to push ads to you and redirect your searches. For some
details of ClientMan see
http://www.pestpatrol.com/ms/pestinfo/c/clientman.asp and also
http://www.2-spyware.com/parasite-clientman.html. See also
http://www.doxdesk.com/parasite/ClientMan.html although this page makes no
reference to the MSMC variant.

Try booting to Safe Mode and emptying both your Windows\Temp folder and
also your Temporary Internet Files (Control Panel | Internet Options |
General | Delete Files and make sure you check the box "Delete all offline
content"). Next open MSConfig, (Start | Run, type MSConfig in the box and
click OK), open the Startup tab and look for an uncheck any rogue entries.

Boot back into Normal Mode.

This would be a good time to download yourself a copy of the free Ad-Aware
SE Personal edition from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot Search &
Destroy 1.3 (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as
good as when you last updated their reference files. I also use a program
called BHODemon (http://www.definitivesolutions.com/bhodemon.htm) that
checks for unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the
best way of getting rid of the many forms of the CoolWebSearch hijacker
details of which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a folder called HJT on C: (not on your desktop nor in your temp
folder) and copy the file you downloaded to that folder. Close as many
applications as you can including all instances of Internet Explorer.
Enable Explorer to see all files and folders (Tools | Folder Options |
View and check "Show hidden files and folders" and uncheck "Hide protected
operating system files") and then run hijackthis.exe and post back the log
to either the HijackThis Forum at http://forums.spywareinfo.com/ or
alternatively http://forum.aumha.org/viewforum.php?f=30 and hopefully this
will enable someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and Search
Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


Dave <anonymous@discussions.microsoft.com> wrote:

> With ME, when booted the following error message
> appears: "Explorer has caused an error in ~865151355.tmp
> if you continue have problems try restarting your
> computer" restarting doesn't solve the problem nor does
> deleting the file from safe mode. Any ideas?


Re: Error Message by Dave

Dave
Tue Oct 12 21:42:12 CDT 2004

Thanks! I did find MSMC in when I went into
msconfig/startup. From what I've read it can be hard to
get rid of, but at least I know what I am fighting.
Thanks again.
Dave
>-----Original Message-----
>The error "Explorer has caused an error in
~865151355.TMP.TMP" or similar
>is due to malware of some sort, possibly the
ClientMan/MSMC browser plugin
>which is used to push ads to you and redirect your
searches. For some
>details of ClientMan see
>http://www.pestpatrol.com/ms/pestinfo/c/clientman.asp and
also
>http://www.2-spyware.com/parasite-clientman.html. See
also
>http://www.doxdesk.com/parasite/ClientMan.html although
this page makes no
>reference to the MSMC variant.
>
>Try booting to Safe Mode and emptying both your
Windows\Temp folder and
>also your Temporary Internet Files (Control Panel |
Internet Options |
>General | Delete Files and make sure you check the
box "Delete all offline
>content"). Next open MSConfig, (Start | Run, type
MSConfig in the box and
>click OK), open the Startup tab and look for an uncheck
any rogue entries.
>
>Boot back into Normal Mode.
>
>This would be a good time to download yourself a copy of
the free Ad-Aware
>SE Personal edition from Lavasoft
>(http://www.lavasoftusa.com/software/adaware/) and also
SpyBot Search &
>Destroy 1.3 (http://www.safer-networking.org/) and use
them to check your
>system for other commercial parasites remembering that
they are only as
>good as when you last updated their reference files. I
also use a program
>called BHODemon
(http://www.definitivesolutions.com/bhodemon.htm) that
>checks for unwanted Browser Help Objects and
SpywareBlaster
>(http://www.wilderssecurity.net/spywareblaster.html)
which can help
>prevent some parasites getting a grip on your PC.
>
>Then there is CWShredder
>(http://www.spywareinfo.com/~merijn/files/cwshredder.zip)
which is the
>best way of getting rid of the many forms of the
CoolWebSearch hijacker
>details of which can be found at
>http://www.spywareinfo.com/~merijn/cwschronicles.html and
also
>http://www.pestpatrol.com/pestinfo/c/cws.asp..
>
>Finally if you still continue to experience problems
download a copy of
>HijackThis from
(http://www.spywareinfo.com/~merijn/downloads.html).
>Create a folder called HJT on C: (not on your desktop nor
in your temp
>folder) and copy the file you downloaded to that folder.
Close as many
>applications as you can including all instances of
Internet Explorer.
>Enable Explorer to see all files and folders (Tools |
Folder Options |
>View and check "Show hidden files and folders" and
uncheck "Hide protected
>operating system files") and then run hijackthis.exe and
post back the log
>to either the HijackThis Forum at
http://forums.spywareinfo.com/ or
>alternatively http://forum.aumha.org/viewforum.php?f=30
and hopefully this
>will enable someone to identify the cause of your problem.
>
>See also: Dealing with Unwanted Malware, Parasites,
Toolbars and Search
>Engines http://mvps.org/winhelp2002/unwanted.htm and also
Browser
>Hijacking http://www.spywareinfo.com/articles/hijacked/
>--
>Mike Maltby MS-MVP
>mcmaltby@hotmail.com
>
>
>Dave <anonymous@discussions.microsoft.com> wrote:
>
>> With ME, when booted the following error message
>> appears: "Explorer has caused an error in ~865151355.tmp
>> if you continue have problems try restarting your
>> computer" restarting doesn't solve the problem nor does
>> deleting the file from safe mode. Any ideas?
>
>.
>

Re: Error Message by Mike

Mike
Tue Oct 12 21:59:51 CDT 2004

Dave,

PLEASE (yes I'm shouting) post back details of what you find and how you
removed this pest as this will help me when replying to others with a
similar problem.

Cheers,
--
Mike M


Dave <anonymous@discussions.microsoft.com> wrote:

> Thanks! I did find MSMC in when I went into
> msconfig/startup. From what I've read it can be hard to
> get rid of, but at least I know what I am fighting.
> Thanks again.