HELP: APPCRASH explorer.exe in Vista

[AC3]

I have read so many forums and have not found my answer. My computer started having the following everytime I try to open my computer or click on the desktop:

Problem signature:
Problem Event Name: APPCRASH
Application Name: explorer.exe
Application Version: 6.0.6000.16549
Application Timestamp: 46d235d0
Fault Module Name: SHELL32.dll
Fault Module Version: 6.0.6000.16513
Fault Module Timestamp: 4681d936
Exception Code: c0000005
Exception Offset: 000000000015402b
OS Version: 6.0.6000.2.0.0.768.2
Locale ID: 1033
Additional Information 1: 5daa
Additional Information 2: 55d0f5f1315e1b50803ff13bbf9a191b
Additional Information 3: 4e8d
Additional Information 4: 7d38412fd536b2efd1a6bd718dcbf45f

Your help is greatly appreciated.

[nitesh mehta]

That SHELL32.dll is from SpyLocked

Please download this tool to remove it:

http://spywaresignatures.com/forums/...php?name=&t=36



SpyLocked Descriptions:

SpyLocked (also known as SpywareLocked) is counterfeit anti-spyware software. SpyLocked usually installed itself onto your PC without your permission, through Trojan, Virus or fake software. SpyLocked will display fake system alerts or fake security alerts to trick user to buy the Paid Version of SpyLocked.

To avoid putting your computer at risk, it is important to remove SpyLocked or SpywareLocked thoroughly.

Manual Removal Instructions:

Stop SpyLocked Processes:
(Learn how to do this)
spylocked.exe

Unregister SpyLocked DLL Files:
(Learn how to do this)
xkrdk.dll
onwtj.dll
fyxkaah.dll
higehsg.dll
geplxss.dll
tvomnc.dll
tahxqcj.dll
qvjpt.dll
oyopu.dll (new)
yronl.dll (new)
isadd.dll (new)

Find and Delete these SpyLocked Files:
(Learn how to do this)
spylocked.exe
xkrdk.dll
onwtj.dll
fyxkaah.dll
higehsg.dll
geplxss.dll
tvomnc.dll
tahxqcj.dll
qvjpt.dll
oyopu.dll (new)
yronl.dll (new)
isadd.dll (new)
pmsnrr.exe (new)
pmmnt.exe (new)
isamntr.exe (new)
avD.exe (new)
codecaddon1169[1].exe (new)

[SUpER CoP]

Where is the file SHELL32.dll on your system?
What are the properties on that file? Who made it?

The only reference I saw to this was that that file might be part of
SmitFraud--
http://www.download.fi/muutoshistoria/smitfraudfix.cfm
which leads to--
http://en.wikipedia.org/wiki/Smitfraud

I don't know much about this whole Smitty issue, but that's a touch more
information than it sounds like you had before. Do your tools detect
SmitFraud... ?

[AC3]

Thank you for your help. I am going to try your sugestions. I'll keep you posted.

[AC3]

It wasn't SpyLocked.

Shell32.dll is located in my windows/ system32 folder. Its 12MB and was created in August 2007.

Thank you for your help.

This is driving me crazy!!!!!!!!!!!!!!!!!!!!