Jump to content


Photo

res://ieframe.dll/acr_error.htm

Trojan.Dropper res://ieframe.dll/acr_error.h

  • This topic is locked This topic is locked
3 replies to this topic

#1 funnybone

funnybone

    New Member

  • Members
  • Pip
  • 18 posts

Posted 02 August 2012 - 04:48 PM

dear Ladies and Gentlemen,
I have on my notebook MS Vista business IE 9 and Firefox 13:

Before we beginn I would you know:
Please give some short answers,
first i'll got the overview:

i have (perhaps after OS-update?)
following error:
ieframe.dll.acr_error Internet Explorer

I get often/always on IE 9
res://ieframe.dll/acr_error.htm#,URL

before:
http://about:Tabs
http://google.de

after, 5 minutes later
res://ieframe.dll/acr_error.htm#about:Tabs,http://about:Tabs
res://ieframe.dll/acr_error.htm#google.de,http://google.de

this sites have now the title
"Failed to restore sites"

and the message on the IE
"Internet Explorer has stopped working - close program"
appears

Alwil (Avast) Antivir found nothing
If you want I can log the HijackThis file (nothing found)

MBAW crashes in normal mode

MBAW, quickscan in safe mode
hat found only this

Infizierte Dateien: 1
C:\Windows\Temp\TMP00000004DD0CB990557B4247 (Trojan.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.

english:
infected files: 1
C:\Windows\Temp\TMP00000004DD0CB990557B4247 (Trojan.Dropper) -> Successfully removed and placed in quarantine.

This notebook has no others problems.
My other PC doesn't have any problem.

My ideas now:
have I to run dds? see FAQ
have I to run chameleon? see FAQ
have I to run otl?

and, If you can ...
have I to change my passwords?
can I use the files (jpgs, docs, xls, no OS-files) of the infected PC?
perhaps i have to format the drive and setup a new OS?

thanks very much,
please, first I will get an overview.

funnybone

#2 fivealive

fivealive

    Elite Member

  • Honorary Members
  • PipPipPipPipPip
  • 960 posts
  • Gender:Male
  • Location:canada

Posted 02 August 2012 - 04:51 PM

-----------------------------------------------------------------

Sorry to hear you might be infected.
We cannot work on malware removal in this sub-section of the forum, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

There are some excellent, self-help tutorials on getting MBAM to run on an infected system in the FAQ: HERE.

IF YOU PREFER EXPERT ASSISTANCE WITH MALWARE REMOVAL, PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:
OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.
OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.
OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:
  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  • If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  • Then please start a new post in the Malware Removal Forum.
  • When starting your new post, please note the following:
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
OPTION 2:
If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them here.

OPTION 3:
If you prefer the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to the Premium Support site here.

Please be patient – someone will assist you as soon as possible.

Thank you very much,

fivealive

#3 Firefox

Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 9,973 posts
  • Gender:Male
  • Location:USA

Posted 02 August 2012 - 05:42 PM

and, If you can ...
have I to change my passwords?
can I use the files (jpgs, docs, xls, no OS-files) of the infected PC?
perhaps i have to format the drive and setup a new OS?


Hello and :welcome:

Please follow the instructions above you have your computer checked out for infections.

As for your questions, If you are going to change password, make sure you use a computer other than the one that has the infection, use a known clean and virus free computer to change those passwords.

As for using the files, it should be OK but its probably best to wait till the computer is clean. You defenitely do not want to use or run any executable files such as .exe .com .bat or the like.

Although it is quite possible that the computer can be saved and cleaned up, depending on what infections are found, sometimes the best course of action is to backup and data / documents / photos and then start over.

post-2065-0-92797800-1392234217.jpg


Dell Precision T7500, Win7 Ultimate 64bit fully updated, McAfee Corp Edition v8.8,
Watchguard Firewall, Intel Xeon E5606CPU, Dual Quad Core Processors, 16GB Ram,
E5606 @ 2.13GHz, Nvidia Quadro NVS420, Raid-1 Dual 1TB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE10, Opera, MBAM, MBSB, MBAE


#4 Maurice Naggar

Maurice Naggar

    Staff

  • Moderators
  • PipPipPipPipPipPip
  • 14,550 posts
  • Gender:Male
  • Location:USA
  • Interests:Security, Windows, Windows Update, malware prevention

Posted 03 August 2012 - 08:06 AM

@funnybone
Please stick with your topic in Malware-Removal-Help http://forums.malwar...howtopic=113588
Wait for an authorized helper to make the first reply to you there.
Maurice Naggar
Product Support

staff.png

Follow us: Twitter, Become a fan: Facebook

I close my threads if there is 5 days without a response.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users