My IE has the following problem: when I'm refreshing some pages the folowing
messages appears:
1. The following suplement was in execution when this problem occurred: File
: AcrolEhelper
2. The following suplement was in execution when this problem occurred: File
: Comet.dll
3. The instruction in the ""0x0147b7b3" made reference To memory in
"0x00000000". The memory could not been "read". Click in "OK" to terminate th
program.

Wnen I click in "OK" the page disappears

What should I do?

Best regards João

Courtesy of Robear Dyer (PA Bear)
- MS MVP-Windows (IE/OE, Security, Shell/User) -

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware.
**Post your log to http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30
for expert analysis, not here.**

--
Vincenzo Di Russo
Microsoft® MVP - Most Valuable Professional
Windows - Internet Explorer 2003/2004/2005
My home: http://mvp.support.microsoft.com/
My Blog: http://blogs.dotnethell.it/vincent/

João Carmona wrote:
> My IE has the following problem: when I'm refreshing some pages the
> folowing messages appears:
> 1. The following suplement was in execution when this problem occurred:
> File
>> AcrolEhelper
> 2. The following suplement was in execution when this problem occurred:
> File
>> Comet.dll
> 3. The instruction in the ""0x0147b7b3" made reference To memory in
> "0x00000000". The memory could not been "read". Click in "OK" to
> terminate th program.
>
> Wnen I click in "OK" the page disappears
>
> What should I do?
>
> Best regards João

"João Carmona" <JooCarmona@discussions.microsoft.com> wrote in message
news:9C7F3F27-9087-4277-B270-57807F3667A2@microsoft.com...
> My IE has the following problem: when I'm refreshing some pages the
> folowing
> messages appears:
> 1. The following suplement was in execution when this problem occurred:
> File
> : AcrolEhelper
> 2. The following suplement was in execution when this problem occurred:
> File
> : Comet.dll
> 3. The instruction in the ""0x0147b7b3" made reference To memory in
> "0x00000000". The memory could not been "read". Click in "OK" to terminate
> th
> program.
>
> Wnen I click in "OK" the page disappears

AcroIEhelper.dll (with an "eye" character) is for Adobe Acrobat.
AcrolEhelper.dll (with an "ell character) is malware. How do I know?
Because the a-hole that wrote it wants you to confuse a lower-case ell
character ("l") with an uppercase non-xxx eye character ("I") with each
other. It helps to use serif characters to see the difference. It doesn't
take much of a Google search on "comet.dll" to turn up articles about the
spyware. So what anti-malware programs have you used so far to disinfect
your system?

Thank you for the answer.

I use a McAfee Bundle (Antivirus, Antihacker,Antiabuse and AntiSpam).

Can you help me ?

Best regards

"Vanguard" wrote:

> "João Carmona" <JooCarmona@discussions.microsoft.com> wrote in message
> news:9C7F3F27-9087-4277-B270-57807F3667A2@microsoft.com...
> > My IE has the following problem: when I'm refreshing some pages the
> > folowing
> > messages appears:
> > 1. The following suplement was in execution when this problem occurred:
> > File
> > : AcrolEhelper
> > 2. The following suplement was in execution when this problem occurred:
> > File
> > : Comet.dll
> > 3. The instruction in the ""0x0147b7b3" made reference To memory in
> > "0x00000000". The memory could not been "read". Click in "OK" to terminate
> > th
> > program.
> >
> > Wnen I click in "OK" the page disappears
>
> AcroIEhelper.dll (with an "eye" character) is for Adobe Acrobat.
> AcrolEhelper.dll (with an "ell character) is malware. How do I know?
> Because the a-hole that wrote it wants you to confuse a lower-case ell
> character ("l") with an uppercase non-xxx eye character ("I") with each
> other. It helps to use serif characters to see the difference. It doesn't
> take much of a Google search on "comet.dll" to turn up articles about the
> spyware. So what anti-malware programs have you used so far to disinfect
> your system?
>
>

"João Carmona" <JooCarmona@discussions.microsoft.com> wrote in message
news:35C54336-426A-4C66-A0CB-C17EC2228149@microsoft.com...
> Thank you for the answer.
>
> I use a McAfee Bundle (Antivirus, Antihacker,Antiabuse and AntiSpam).
>
> Can you help me ?
>
> Best regards
>
> "Vanguard" wrote:
>
>> "João Carmona" <JooCarmona@discussions.microsoft.com> wrote in message
>> news:9C7F3F27-9087-4277-B270-57807F3667A2@microsoft.com...
>> > My IE has the following problem: when I'm refreshing some pages the
>> > folowing
>> > messages appears:
>> > 1. The following suplement was in execution when this problem occurred:
>> > File
>> > : AcrolEhelper
>> > 2. The following suplement was in execution when this problem occurred:
>> > File
>> > : Comet.dll
>> > 3. The instruction in the ""0x0147b7b3" made reference To memory in
>> > "0x00000000". The memory could not been "read". Click in "OK" to
>> > terminate
>> > th
>> > program.
>> >
>> > Wnen I click in "OK" the page disappears
>>
>> AcroIEhelper.dll (with an "eye" character) is for Adobe Acrobat.
>> AcrolEhelper.dll (with an "ell character) is malware. How do I know?
>> Because the a-hole that wrote it wants you to confuse a lower-case ell
>> character ("l") with an uppercase non-xxx eye character ("I") with each
>> other. It helps to use serif characters to see the difference. It
>> doesn't
>> take much of a Google search on "comet.dll" to turn up articles about the
>> spyware. So what anti-malware programs have you used so far to disinfect
>> your system?
>>
>>


Again, what anti-malware products have you already tried? Some of the
freebies available are:

Ad-Aware
Spybot Search & Destroy
Microsoft Antispyware

You might also want to try other anti-virus scanners to see if the one you
use is missing the malware. Several anti-virus vendors provide online
scanners (they scan and detect but don't remove the infection), like:

Symantec
McAfee
Trend Micro
Pest Patrol

If it is running as a brower help object (BHO) in Internet Explorer, you
could also try deleting the add-in or using a tool to do it:

Internet Options -> Programs -> Manager Add-ons
BHO Cop

A Google search on "comet.dll" also lists info on getting rid of the pest.