JSI Tip 7117. When you start Windows XP, you receive 'Explorer has encountered an error and needs to close'?

In addition to the subject message, you may be unable to open My Documents or My Computer.

This behavior could be the result of the Qcbar.dll library, an object that adds adult Web site links to the Internet Explorer Favorites menu.

To remove this infection:

1. Copy / Paste the following to a KillQcbar.reg file:

REGEDIT4

[-HKEY_CLASSES_ROOTAllch.IEObj]

[-HKEY_CLASSES_ROOTAllch.IEObj.1]

[-HKEY_CLASSES_ROOTCLSID\{765E6B09-6832-4738-BDBE-25F226BA2AB0}]

[-HKEY_CLASSES_ROOTCLSID\{D6FC35D1-04AB-4D40-94CF-2E5AE4D0F8D2}]

[-HKEY_CLASSES_ROOTInterface\{ED7D1356-F7C2-4A27-A87C-C0DFEB3A628F}]

[-HKEY_CLASSES_ROOTInterface\{242CA913-1637-4F74-9729-EA349AF3ECAC}]

[-HKEY_CLASSES_ROOTQcBar]

[-HKEY_CLASSES_ROOTQcBar.1]

[-HKEY_CLASSES_ROOTTypeLib\{C02EE3A0-1881-419F-A5ED-737223463292}]

[-HKEY_CLASSES_ROOTTypeLib\{60381D4B-8129-449A-A5F2-5417AD0571CC}]

[-HKEY_CURRENT_USERSoftwareQcBar]

[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftCode Store DatabaseDistribution Units\{765E6B09-6832-4738-BDBE-25F226BA2AB0}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]]
"{765E6B09-6832-4738-BDBE-25F226BA2AB0}"=-

[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar\{765E6B09-6832-4738-BDBE-25F226BA2AB0}]

2. Merge the KillQcbar.reg file with your registry, or run regedit /s KillQcbar.reg.

3. Restart Windows XP.

4. Copy / Paste the following to a KillQcbar.bat file:

pushd "%UserProfile%"
del "%SystemRoot%Downloaded Program Filesallch.dll"
del "%SystemRoot%Downloaded Program FilesQcBar.dll"
rd /s Favorites
rd /s "Adult Links"
rd /s AdultSearch
rd /s Sports
del /q "%UserProfile%Start MenuProgramsAccessoriesAdult Links Daily.lnk"
del /q "%UserProfile%DesktopAdult Links Daily.lnk"
del /q "%UserProfile%Start MenuProgram FilesAdult Links Daily.lnk"
del /q "%UserProfile%Start MenuAdult Links Daily.lnk"
popd

5. Double-click the KillQcbar.bat file.