IAPro.exe has stopped working

NannaNoComputa · January 19, 2009

IAPro.exe has stopped working

This message window popped up on my computer.

Googled it and came to this site where I read beeceebee's reply to rloya99 exact same post.

I tried to follow the very clear instructions but:

1. i dont have TEA TIMEr

2 couldnt download ATF on link supplied

I was getting desperate windows start button has stopped working via mouse button and when I tried the windows key on keyboard it only worked a few times then also stopped working.

I downloaded Windows Live 'OneCare Safety Scanner Beta' which I ran on advanced setting and a few hours later it had run the first part and then began the Registry cleaner scan and came up with error no 0x1C600C0F.

So I started again - another few hours later I reached the same point and the same error no came up.

At that point I turned the computer off and it has not been turned back on.

Am I doing the right thing?

What should I be downloading?

Who should I take the #### computer to?

I forgot to say dell home pc less than a year old.

I am now calmer and rational and would greatly appreciate any advice or help offered.

NannaNoComputa · January 19, 2009

IAPro.exe has stopped working

This message window popped up on my computer.

Googled it and came to this site where I read beeceebee's reply to rloya99 exact same post.

I tried to follow the very clear instructions but:

1. i dont have TEA TIMEr

2 couldnt download ATF on link supplied

I was getting desperate windows start button has stopped working via mouse button and when I tried the windows key on keyboard it only worked a few times then also stopped working.

I downloaded Windows Live 'OneCare Safety Scanner Beta' which I ran on advanced setting and a few hours later it had run the first part and then began the Registry cleaner scan and came up with error no 0x1C600C0F.

So I started again - another few hours later I reached the same point and the same error no came up.

At that point I turned the computer off and it has not been turned back on.

Am I doing the right thing?

What should I be downloading?

Who should I take the #### computer to?

I forgot to say dell home pc less than a year old.

I am now calmer and rational and would greatly appreciate any advice or help offered.

BeeCeeBee · January 19, 2009

Ok Nanna, first thing is if you do not use Spybot you will not have teatimer and you may simply ignore that instruction.

You have obviously looked at an older version of the instructions as the link to ATF

has been changed.

This is the revision and you should find that all links will be working.

Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
It is a combination of the words malicious and software.
The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

Required Cleanup Steps
1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
2. Run a Temporary file and cache cleaner (ATF)
3. Run 2 Anti-Malware scanners (Listed Below)
4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
5. Clear out old System Restore points
6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif

____________________________________________

STEP 1

Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
1. Run Spybot-S&D in Advanced Mode.
2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
3. On the left hand side, Click on Tools
4. Then click on the Resident Icon in the List
5. Uncheck "Resident TeaTimer" and OK any prompts.
6. Restart your computer.

__________________________________________________

STEP 2

Follow these instructions carefully.
Download ATF-Cleaner from
SCANWITH.com
to remove un-needed temporary files from your computer that may contain malware.
When you run ATF-Cleaner, check the items as shown below for Main.
For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
NOTE:
If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
Then click on "Empty Selected".

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif

.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif

__________________________________________________

STEP 3

Install and run the free version (not the Professional version) of SUPERAntiSpyware from
SUPERAntiSpyware.com
- Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
- You do not have to send them your e-mail address, just click next.
- You can leave the automated check for updates on.
- You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
- DO NOT
  allow SUPERAntiSpyware to protect your Home Page settings.
- On the
  Top Left
  select the
  Scan your computer
  button.
- Make sure there is a CHECK MARK on all
  Fixed Drives
  .
- Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.

__________________________________________________

STEP 4

Install and run
Malwarebytes' Anti-Malware
from
Malwarebytes - (direct download)
- Accept all defaults for the installer
- Allow the program to update the definitions
- Click on the
  Quick Scan
  and click Next.
- If any items are found allow it to clean them and then Reboot your computer.

__________________________________________________

STEP 5

Run an online scan with ESET from
Free Virus Scan: Use ESET's Online Antivirus Scanner
- You
  must
  use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
- If your computer is running Window's Vista, then you
  must first
  start Internet Explorer as an Administrator. To do so, right-click on the
  Internet Explorer
  icon in the Start Menu and select "
  Run as administrator
  " from the popup context menu.
- Accept the terms and click "Start".
- Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
- Click "Start" to begin the scan.
- When completed restart your computer

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to Extreme Tech Support - Free PC Help and tell us how the computer seems to be operating.

At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

If required this is the download link for TrendMicro™ HijackThis™

Unless instructed to by the Technician helping you then do not download this tool.

Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.

Please follow the instructions here

How to turn off and turn on System Restore in Windows XP

How to turn off and turn on System Restore in Windows Vista

BeeCeeBee · January 19, 2009

Ok Nanna, first thing is if you do not use Spybot you will not have teatimer and you may simply ignore that instruction.

You have obviously looked at an older version of the instructions as the link to ATF

has been changed.

This is the revision and you should find that all links will be working.

Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
It is a combination of the words malicious and software.
The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

Required Cleanup Steps
1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
2. Run a Temporary file and cache cleaner (ATF)
3. Run 2 Anti-Malware scanners (Listed Below)
4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
5. Clear out old System Restore points
6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif

____________________________________________

STEP 1

Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
1. Run Spybot-S&D in Advanced Mode.
2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
3. On the left hand side, Click on Tools
4. Then click on the Resident Icon in the List
5. Uncheck "Resident TeaTimer" and OK any prompts.
6. Restart your computer.

__________________________________________________

STEP 2

Follow these instructions carefully.
Download ATF-Cleaner from
SCANWITH.com
to remove un-needed temporary files from your computer that may contain malware.
When you run ATF-Cleaner, check the items as shown below for Main.
For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
NOTE:
If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
Then click on "Empty Selected".

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif

.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif

__________________________________________________

STEP 3

Install and run the free version (not the Professional version) of SUPERAntiSpyware from
SUPERAntiSpyware.com
- Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
- You do not have to send them your e-mail address, just click next.
- You can leave the automated check for updates on.
- You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
- DO NOT
  allow SUPERAntiSpyware to protect your Home Page settings.
- On the
  Top Left
  select the
  Scan your computer
  button.
- Make sure there is a CHECK MARK on all
  Fixed Drives
  .
- Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.

__________________________________________________

STEP 4

Install and run
Malwarebytes' Anti-Malware
from
Malwarebytes - (direct download)
- Accept all defaults for the installer
- Allow the program to update the definitions
- Click on the
  Quick Scan
  and click Next.
- If any items are found allow it to clean them and then Reboot your computer.

__________________________________________________

STEP 5

Run an online scan with ESET from
Free Virus Scan: Use ESET's Online Antivirus Scanner
- You
  must
  use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
- If your computer is running Window's Vista, then you
  must first
  start Internet Explorer as an Administrator. To do so, right-click on the
  Internet Explorer
  icon in the Start Menu and select "
  Run as administrator
  " from the popup context menu.
- Accept the terms and click "Start".
- Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
- Click "Start" to begin the scan.
- When completed restart your computer

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to Extreme Tech Support - Free PC Help and tell us how the computer seems to be operating.

At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

If required this is the download link for TrendMicro™ HijackThis™

Unless instructed to by the Technician helping you then do not download this tool.

Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.

Please follow the instructions here

How to turn off and turn on System Restore in Windows XP

How to turn off and turn on System Restore in Windows Vista

NannaNoComputa · January 19, 2009

Thank you beeceebee for quick response.

I am trying to download ATF Cleaner 3.0.0.2 but it says it is for XP and Windows 2000 only. I use Home Premium version of Vista. Will ATF still work on my computer?

Also on turning computer on I got a couple of message windows:

First an Application Error Box

'ExceptionEregistrException in module IAPro.exe at 000321EB failed to set data for 'EnablaeLUA'

and Secondly a Windows Defender Warning

'Trojan:Win32/InternetAntiVirus High Alert

I selected the Remove All option for the second box.

:confused: What shall I do next?

NannaNoComputa · January 19, 2009

Thank you beeceebee for quick response.

I am trying to download ATF Cleaner 3.0.0.2 but it says it is for XP and Windows 2000 only. I use Home Premium version of Vista. Will ATF still work on my computer?

Also on turning computer on I got a couple of message windows:

First an Application Error Box

'ExceptionEregistrException in module IAPro.exe at 000321EB failed to set data for 'EnablaeLUA'

and Secondly a Windows Defender Warning

'Trojan:Win32/InternetAntiVirus High Alert

I selected the Remove All option for the second box.

:confused: What shall I do next?

BeeCeeBee · January 19, 2009

Nanna it will work just fine with Vista.

I don't mean this to sound rude but you have to decide to either follow the program or not.

If it does not solve all of your problems we will at least know where not to look. Picking and choosing from other programs is not productive.

BeeCeeBee · January 19, 2009

Nanna it will work just fine with Vista.

I don't mean this to sound rude but you have to decide to either follow the program or not.

If it does not solve all of your problems we will at least know where not to look. Picking and choosing from other programs is not productive.

NannaNoComputa · January 19, 2009

Sorry beeceebee for being a non believer. Just a little apprehensive. I value your advice and shall now follow it. Thanks again.

Nanna :o

NannaNoComputa · January 19, 2009

Sorry beeceebee for being a non believer. Just a little apprehensive. I value your advice and shall now follow it. Thanks again.

Nanna :o

NannaNoComputa · January 19, 2009

:)Can I now change my name to NannaHasAWorkingComputa:D

I have religiously followed all five Steps. Turned firewall on. Start button and windows key both working. THANK YOU VERY VERY MUCH.

SUPERAntiSpyware found following threats

RootkitITGRDEngine

Rogue.InternetAntivirus Pro

Rootkit.TDSServ/Fake-IV

Adware Tracking Cookies

Malwarebytes found 27 infected items

Eset online antivirus scanner found no threats

windows defender has removed - Trojan:Win32/InternetAntivirus

windows defender has quaranteened - Trojan:Win32/InternetAntivirus

- Trojan Downloader:Win32/FakeIA.A

One strange item.

I can log onto this site from upstairs computer ok no problems.

My computer downstairs will not accept password - tells me it is case sensitive.

The two computers are not connected.

Thank you once again.

NannaNoComputa · January 19, 2009

:)Can I now change my name to NannaHasAWorkingComputa:D

I have religiously followed all five Steps. Turned firewall on. Start button and windows key both working. THANK YOU VERY VERY MUCH.

SUPERAntiSpyware found following threats

RootkitITGRDEngine

Rogue.InternetAntivirus Pro

Rootkit.TDSServ/Fake-IV

Adware Tracking Cookies

Malwarebytes found 27 infected items

Eset online antivirus scanner found no threats

windows defender has removed - Trojan:Win32/InternetAntivirus

windows defender has quaranteened - Trojan:Win32/InternetAntivirus

- Trojan Downloader:Win32/FakeIA.A

One strange item.

I can log onto this site from upstairs computer ok no problems.

My computer downstairs will not accept password - tells me it is case sensitive.

The two computers are not connected.

Thank you once again.

BeeCeeBee · January 19, 2009

Thats great Nanna. :)

Case sensitive means that you must type your password the same as it was entered. All lower case or all CAPITAL letters etc.

If you have password problems contact us please.

BeeCeeBee · January 19, 2009

Thats great Nanna. :)

Case sensitive means that you must type your password the same as it was entered. All lower case or all CAPITAL letters etc.

If you have password problems contact us please.

NannaNoComputa · January 19, 2009

To prevent this situation occuring again I have been trawling the threads and

I have read Wolfeymole's free pc help recommended security products and also Plastic Nev's reply to Ross ' A little advice needed re security software'.

As a result I have downloaded the following:

Malwarebytes Anti Malware

SUPERAntiSpyware

Spyware Blaster

WinPatrol

Avira AntiVir

Comodo

Already had windows defender and Norton Internet security.

I would value your thoughts - will these all slow my computer down? and have I omitted anything glaringly obvious?

I also now have an icon for RegCure with the windows security centre shield attached on my desktop - do you know what it is? I can't remember installing it or seeing it before this recent episode.

thanks again for help, advise and being there.

regards

nanna

:)

NannaNoComputa · January 19, 2009

To prevent this situation occuring again I have been trawling the threads and

I have read Wolfeymole's free pc help recommended security products and also Plastic Nev's reply to Ross ' A little advice needed re security software'.

As a result I have downloaded the following:

Malwarebytes Anti Malware

SUPERAntiSpyware

Spyware Blaster

WinPatrol

Avira AntiVir

Comodo

Already had windows defender and Norton Internet security.

I would value your thoughts - will these all slow my computer down? and have I omitted anything glaringly obvious?

I also now have an icon for RegCure with the windows security centre shield attached on my desktop - do you know what it is? I can't remember installing it or seeing it before this recent episode.

thanks again for help, advise and being there.

regards

nanna

:)

BeeCeeBee · January 19, 2009

Nanna STOP!!!!

The only thing you have omitted is the kitchen sink. :D

First if you still have Norton Running you cannot run Avira and/or the antivirus part of the Comodo Security suite at the same time. I really do not care for Norton at all and would remove it entirely. You do that by going to your control panel and then "add and Remove Programs"and once the list is populated uninstall anything and everything Norton. You may then run the Norton Removal Tool to get anything that you may have missed.

Download and run the Norton Removal Tool

If you choose to keep norton uninstall Avira and either disble or uninstall the antivirus portion of Comodo.

If you remove Norton then you must choose between Avira and Comodo antivirus. Personally I use Avira and know little about Comodo except for the firewall.

You are totally over loaded with anti malware programs. Stick with the first 2 (antimalwere bytes and SuperAntiSpyware and get rid of the rest)

Immediately uninstall regcure (same as you did with Norton) and do not even think about trying to use it.

Finally what colour is this shield and where is it located on your desktop?

Please do not disregard or wait on following this advice. More is not better!!!

BeeCeeBee · January 19, 2009

Nanna STOP!!!!

The only thing you have omitted is the kitchen sink. :D

First if you still have Norton Running you cannot run Avira and/or the antivirus part of the Comodo Security suite at the same time. I really do not care for Norton at all and would remove it entirely. You do that by going to your control panel and then "add and Remove Programs"and once the list is populated uninstall anything and everything Norton. You may then run the Norton Removal Tool to get anything that you may have missed.

Download and run the Norton Removal Tool

If you choose to keep norton uninstall Avira and either disble or uninstall the antivirus portion of Comodo.

If you remove Norton then you must choose between Avira and Comodo antivirus. Personally I use Avira and know little about Comodo except for the firewall.

You are totally over loaded with anti malware programs. Stick with the first 2 (antimalwere bytes and SuperAntiSpyware and get rid of the rest)

Immediately uninstall regcure (same as you did with Norton) and do not even think about trying to use it.

Finally what colour is this shield and where is it located on your desktop?

Please do not disregard or wait on following this advice. More is not better!!!

NannaNoComputa · January 19, 2009

Dear beeceebee

I have elected to keep norton - as a non techie its familiar and easy for me to understand and use.

couldnt find avira - so havent uninstalled it

comodo has been uninstalled

spyware blaster and winpatrol deleted

regcure has been uninstalled but it did leave me a message window stating that 998 errors were detected and if I uninstalled the software the errors would not be repaired.

As for the shield it was the four colours of windows button but in the shape of a shield and it was located on the bottom right corner of the icon with the shortcut arrow located at the bottom left corner.

That just leaves norton, windows defender, malwarebytes AM and SUPERAntiSpyware still on the computer.

I have checked in the security centre and all systems are checked and on. Hopefully its safe to turn off for the night.

But first thank you so much for your continued help and advise to someone who thought they knew a little but now feels like an utter beginner. Its never ever too late for me to learn.

Thank you once again.

Regards

Nanna

NannaNoComputa · January 19, 2009

Dear beeceebee

I have elected to keep norton - as a non techie its familiar and easy for me to understand and use.

couldnt find avira - so havent uninstalled it

comodo has been uninstalled

spyware blaster and winpatrol deleted

regcure has been uninstalled but it did leave me a message window stating that 998 errors were detected and if I uninstalled the software the errors would not be repaired.

As for the shield it was the four colours of windows button but in the shape of a shield and it was located on the bottom right corner of the icon with the shortcut arrow located at the bottom left corner.

That just leaves norton, windows defender, malwarebytes AM and SUPERAntiSpyware still on the computer.

I have checked in the security centre and all systems are checked and on. Hopefully its safe to turn off for the night.

But first thank you so much for your continued help and advise to someone who thought they knew a little but now feels like an utter beginner. Its never ever too late for me to learn.

Thank you once again.

Regards

Nanna

BeeCeeBee · January 19, 2009

I have elected to keep norton - as a non techie its familiar and easy for me to understand and use.

Your choice, but Avira is easier and give some thought to why Norton is the only antivirus program that needs a special tool to remove and that the company itself had to create it.

couldnt find avira - so havent uninstalled it

The logo for avira is red with a white umbrella on it. If it is installed it will appear in the taskbar near the clock on the bottom right. It should also be in the list of programs in "Add or Remove Programs" in your control panel. You can uninstall it there. It is possible that you downloaded it but did not install it. If so it will appear where you save downloads.

regcure has been uninstalled but it did leave me a message window stating that 998 errors were detected and if I uninstalled the software the errors would not be repaired.

Have you met my flying pig? Dont worry about it.

As for the shield it was the four colours of windows button but in the shape of a shield and it was located on the bottom right corner of the icon with the shortcut arrow located at the bottom left corner.

If I understand correctly this was part of the Regcure Icon? If so and the icon is still there delete it.

Hopefully its safe to turn off for the night.

It should be now! :) Edited January 19, 2009 by BeeCeeBee

BeeCeeBee · January 19, 2009

I have elected to keep norton - as a non techie its familiar and easy for me to understand and use.

Your choice, but Avira is easier and give some thought to why Norton is the only antivirus program that needs a special tool to remove and that the company itself had to create it.

couldnt find avira - so havent uninstalled it

The logo for avira is red with a white umbrella on it. If it is installed it will appear in the taskbar near the clock on the bottom right. It should also be in the list of programs in "Add or Remove Programs" in your control panel. You can uninstall it there. It is possible that you downloaded it but did not install it. If so it will appear where you save downloads.

regcure has been uninstalled but it did leave me a message window stating that 998 errors were detected and if I uninstalled the software the errors would not be repaired.

Have you met my flying pig? Dont worry about it.

As for the shield it was the four colours of windows button but in the shape of a shield and it was located on the bottom right corner of the icon with the shortcut arrow located at the bottom left corner.

If I understand correctly this was part of the Regcure Icon? If so and the icon is still there delete it.

Hopefully its safe to turn off for the night.

It should be now! :) Edited January 19, 2009 by BeeCeeBee

Chriscan · January 21, 2009

Hi Beeceebee,was landed with the IAPro.exe virus yeasterday evening.I did a Google search and ended up here.I followed your instructions to a T...et Voila...all gone and system running as it should.Have now signed up to the site,obviously the people on here giving advice are in the know.Many thanks

Chris

Chriscan · January 21, 2009

Hi Beeceebee,was landed with the IAPro.exe virus yeasterday evening.I did a Google search and ended up here.I followed your instructions to a T...et Voila...all gone and system running as it should.Have now signed up to the site,obviously the people on here giving advice are in the know.Many thanks

Chris

BeeCeeBee · January 21, 2009

Many thanks Chris, it great that we have helped without knowing it. Please feel free to continue browsing and post when you have a question.

You do not have to have a problem to get advice.:)

Sign In

IAPro.exe has stopped working

Recommended Posts

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Join the conversation

Similar Content