Vista - Ie8 need help asap

ok one of my client's have a problem with his IE8 he is running Vista Business SP2 and has IE8 on his computer.

his problem is that everytime he opens IE8 a message comes up saying "close the program or check windows for a solution to the problem and then close the program"
I am running adaware on his PC (one of my coworkers has done this before and removed some spyware,trojans etc.)

I have reset IE8 in the tools/internet options/advanced and then reset, didnt do anything.
The problem is when the error message pops up and you press on either option, it doesnt close IE8. and when you are on the desktop and IE8 is closed the message still pops up

any immediate help would be wonderful.
I will run an antivirus soon too and I have also checked netstat.

I fear a new hardcore virus for vista.

Well can we assume your client doesn't have a backup he can restore from?

One thing you can try is to run an sfc (system file checker) by typing sfc/scannow into a cmd window. If that doesn't help you can try a repair install. Failing that re-install the OS

Hope this help

Ken

Have you tried IE "No add ons" to see what happens?
If you go back to IE7 do you get the same result?
What anti virus is installed?
I would suggest that you run Superantispyware & Malwarebytes in case malware is also involved with the glitch. See what they show after scanning

http://superantispyware.com/
http://www.malwarebytes.org/

Let us know how you go.

There is a gap between sfc and scannow - sfc /scannow. Try Sophos Anti-Rootkit
too, and if you want to spend time removing it later a trial of Norton 360 after uninstalling any current antivirus apps.

As an Avid IE user, I gotta admit, I was extremely reluctant to even hear someone telling me to try another browser (I hate changes, more so with something I am comfortable with... look & feel is everything to me).

Well, I had a few trial & error days (perhaps even a couple of weeks) with Firefox 3 but, after giving it some time + the installation of a few add-ons, I gotta tell you, I am a happy man, I have less (or none) Malware, viruses, trojans, worms or whatever you want to call it.

No, not a solution but perhaps a simple work-a-round to his problem... for now and the future.

If your client using any pdf related addons for ie8 disable it first. Because ie8 is having a biiiiig compatiblity issue with the pdf addons. Like pdf creator, pdf link helper etc

Hope this will help

Check out these resources:
How to troubleshoot Internet Explorer issues in Windows Vista and in Windows XP - How to troubleshoot Internet Explorer issues in Windows Vista and in Windows XP
And this step-by-step guide to solving IE 8 crashes - Internet Explorer stops responding, stops working, or restarts
If you don't find the answer you're looking for there, I would suggest posting your issue on the Internet Explorer board on the Microsoft Answers forums - Internet Explorer Forum
- Jake
MSFT Internet Explorer Outreach Team

ok guys sorry for the late reply, Ive been working on this for awhile now. I used process explorer to get a more indepth analysis and hijack this, along with a full virus scan from Avira (high detection level) and adaware. They came up with nothing.

I did find a self replicating program called internet.exe (process explorer-it would flash momentarily) , which latches onto iexplore.exe and generates the error. I cannot delete this. I have deleted the registry keys associated with this but to no avail. also there is another instance of explorer.exe (which is a duplicate of the original, same pathname, same explorer.exe, no differentiation between the two except that this one uses less memory/cpu)
Need more help asap. Thanks

I reset the IE8, (which deleted all the temp files) if I suspend explorer.exe (the second) the problem goes away. Im now looking for a related file.
Is there something I can type into the command prompt to find all registry keys and all other files associated with this internet.exe?

the internet.exe is a virus, internet.exe - internet - Process Information

From process explorer itself you can filter the reg keys used by the process.

Type tasklist in command prompt.

it will show all the process of your computer, find the pid for internet.exe and apply filter in process explorer with this pid.
Through that you can isolate the internet.exe and its activities

I would suggest you to download a
W32.Mytob@mm Removal Tool and follow the instructions described on that page to remove that worm.

This will work good on vista also...

Hope this will help

alright guys, figured it out thanks, you all get rep for being nice to me