Buffer Overrun Detected

By Dumanated
Apr 26, 2007
Topic Status:
Not open for further replies.
  1. Hey everyone.
    Here is an error message I keep getting while running IE 7 and Firefox when I switched to that.

    Microsoft Visual C++ Runtime Library
    Buffer overrun detected!
    Program C:\Program Files\Internet Explorer\iesplore.exe
    A buffer overrun has been detected which has corrupted the program's internal state. The programcannot safely continue execution and must now be terminated.

    I have checked across several forums to see what this error message means and from what I can gather, there is not one definitive source. HiJackThis seems to be the greatest method of dealing with it though. I ran the program and have attached the log. Any help you can give would be greatly appreciated. Thanks.

    Attached Files:

  2. momok

    momok Newcomer, in training Posts: 2,272

    Hi and welcome to techspot. =)

    Your system is infected with a lop hijacker, and possibly other malware.

    Download LSPFix from http://cexx.org/lspfix.htm
    1. Disconnect from the Internet, go to the LSPfix file and extract/unzip LSP-Fix into its own folder [C:\lspfix].
    2. Open the lspfix folder and double-click on LSPFix.exe to start the program.
    3. Check the "I know what I am doing" checkbox.
    4. Select (highlight) all instances of 'pctlsp.dll' in the left column under "Keep".
    5. Click the arrow >> so it goes over to the right column under "Remove".
    6. Click "Finish" and LSPfix will remove references to the file and restore the chain numbers.
    7. Restart your computer

    I noticed that you are also running an outdated version of HijackThis.

    Please go to this thread HERE.

    Important: Please read this thread HERE before you decide whether to clean or reformat your system.

    Should you decide to clean your computer, please go ahead to Viruses/Spyware/Malware, preliminary removal instructions and follow the steps to cleaning your computer.
    Do follow all the instructions exactly.

    Thereafter, please post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread. Do not copy and paste if not it will be ignored and/or removed by the moderators.
    The logs will enable us to understand more about the problems on your system.

    Hope you enjoy your stay here.


    Regards,
    Your friendly Momok =)
  3. Dumanated

    Dumanated Newcomer, in training Topic Starter

    Fresh Logs for HJT, AVG and ComboFix

    I followed the intructions on how to clean up the computer to the letter. I also have 3 fresh logs from HJT AVG and ComboFix attached. Thanks for all your help on this, it is greatly appreciated.
  4. kitty500cat

    kitty500cat Newcomer, in training Posts: 2,407   +6

    AVG Antispyware says No Action Taken for all items. Please set it to remove all items as per this guide.

    You also have not renamed HijackThis. Please do so as per these instructions.

    Then post fresh HijackThis and AVG Antispyware logs.

    Regards :)
  5. Dumanated

    Dumanated Newcomer, in training Topic Starter

    Updated Logs

    Ok, I have re-run HJT as Analyze and changed settings on AVG. Here are their logs.

    Thanks again.
  6. kitty500cat

    kitty500cat Newcomer, in training Posts: 2,407   +6

    Your HijackThis log is clean.

    Your AVG Antispyware log says no action taken. Please run it again via the instructions in the link I gave before.

    Pleast post fresh AVG Antispyware and ComboFix logs afterwards, just to ensure that the system is clean.

    Regards :)
  7. Dumanated

    Dumanated Newcomer, in training Topic Starter

    Updated AVG and ComboFix Logs

    here are the updated logs.

    Thank you
  8. kitty500cat

    kitty500cat Newcomer, in training Posts: 2,407   +6

    It looks now like your system is clean. However, it looks like you're not running any firewall software, which is a security risk. I recommend running either ZoneAlarm or Kerio (free firewall programs).

    Is your system still detecting malware?
  9. Dumanated

    Dumanated Newcomer, in training Topic Starter

    Thanks

    I downloaded ZoneAlarm. Thanks again for all your help, this site is great! Keep up the good work
  10. kitty500cat

    kitty500cat Newcomer, in training Posts: 2,407   +6

    Hey, no problem! If you have any further virus/spyware problems, please post in this thread.

    I recommend reading this thread to help you keep from getting infected again.

    Regards :)

    This thread is for the use of Dumanated only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.