IE6 seems to have been bitten by the Bugbear

  • Thread starter Thread starter Mr.Debug
  • Start date Start date
M

Mr.Debug

I am running WinXP Pro with IE6. One of the non-admin
users, after reading her email, attempted to launch IE6
and was faced with the following pop-up error message:

Microsoft Visual C++ Runtime Library
Runtine Error!
Program: c:\Program Files\Internet Explorer\iexplore.exe
This application has requested the Runtime to terminate
it in an unusual way.
Please contact the application's support team for more
information.

It would not let her run IE6. In fact, none of the other
users can run IE6 - but I, as the Administrator, can run
IE6 without any difficulty. I am not sure how iexplore.exe
differentiates between the Administrator and all others.

I ran a scan of Norton A/V 2004 and it discovered the
machine contracted the "W32.Bugbear.B@mm" virus/worm. NAV
did what it could to disinfect the machine, however
iexplore.exe still will not run for the users.

Anyone else have this problem? Anybody out there know
what to do? In lieu of answers to these questions, how do
I "...contact the application's support team for more
information?"

Thanks,
Mr.Debug
 
Here's a link to more info about the BugBear worm/virus

http://www.viruslist.com/eng/viruslist.html?id=60814

apparently it makes entries to the run section of the Registry which would
explain why you as administrator is unaffected when you log on to a users
machine. You can view the programs that run at start-up with the MSConfig
utility.

I would guess that it stops IE from running because it has inserted a BHO
(Browser Helper Object) into those user accounts and is missing the
necessary c++ runtime libraries to run.

I am not sure why your anti-virus software did not detect and remove all
entries in the registry made by BugBear. Did you run it under your
administrator account? Perhaps you need to immunise each user account
separately.

Also you may like to download and use Ad-aware from www.lavasoftusa.com or
Spybot Search&Destroy which will address the Browser BHO and startup run
entries in the registry.
 
Back
Top