Thank you for all that Info Richard....I have downloaded and installed the
following software to try and fix this issue, Malwarebytes, SuperAntiSpyware,
Spybot S&D, AVG 9.0, HijackThis....I have run the all both in safe mode and
normal mode, all are now reporting a very squeaky clean machine. Have
searched the registry for Dlder.exe and removed the reference. Have deleted
the Dlder.exe file. Deleted all temp files on the PC, deleted all Thumbs.db
to force the computer to re-cache them. No ClickTillYouWin found in the
registry. Nothing running as a sheduled task. Nothing running in startup,
have used msconfig to turn off all un-needed functions, still the problem
exsists in normal and safe mode. The strange part is that the PC behaves
normally under general operation...ie explorer.exe sits around 22k...but as
soon as I open a folder with pics in it, can spike to 120mb or more...this
has got me completely stumped. Thank you all so much for your help this
far...bout to wipe the computer i think. Cheers

"Richard" wrote:

[see bottom reply]
"Anthony" wrote in message
...
Thanks for the reply, tried it and I'm afraid it didnt work...yes it
registered the dll, but the memory problem still exsists. The PC did have
the Dlder.exe trojan, which I'm told can be part of the problem, that has
been removed and any traces of it in the registry deleted. I think now
the only course of action is to wipe it and start afresh, unless anyone
else has any ideas. Screen res and drivers haven't changed at all. I am
sure that the small icons and the memory prob is linked somehow as the
issue only happens when opening a folder containing pics.
Anyway, thanks for trying. Cheers

Anthony wrote:
Hi there, I can use my PC like normal, opening and closing programs,
but as soon as I browse using My Computer or Windows Explorer to a
folder that contains images, explorer.exe goes though the roof with
the memory usage. Shoots from 25k to over 100mb in no time. Even saw
it go over 1gb yesterday. I have virus scanned repeatedly, scanned
for spyware, run hijack this, and the computer looks completely
clean. Also, I dont know if this is related or not, but the
thumbnails of the pictures are alot smaller than normal, and some of
them look like the are in 256 colors not the usual 32 bit. I'm
stumped on this one, hopefully someone can point me in a direction I
should be looking. I've googled my butt off looking for an answer,
but thus far, to no avail. Cheers

"Olórin" wrote:
Try this: click Start Run type
regsvr32 shimgvw.dll
and press Enter. Hopefully you'll get a message saying
"DllRegisterServer in shimgvw.dll succeeded". Click OK on that and see
if things are better on the memory front.

Not sure on the thumbnail sizes - have you changed your screen
resolution/colour depth or your video card driver recently?
- - -

http://www.google.com/search?hl=en&n...der.exe+trojan

Description of the Win32.DlDer Trojan Program
http://support.microsoft.com/kb/317013
D1Der.exe was installed in November and December 2001 as an added component
called "ClickTillUWin" with LimeWire, KaZaa, Grokster, Net2Phone,
BonziBUDDY, and some other person-to-person file-sharing software programs.
The trojan program was installed even if you selected not to install any
additional components from those packages during setup. Most software
packages no longer contain DlDer.

NOTE: DlDer is NOT a virus, because it does not spread.

The trojan program downloads the Explorer.exe file, which connects to a Web
site and reports the user's ID (unique for each computer), IP address,
which Web browser a user is using, and each URL that a Web browser opens.
Explorer.exe is installed in C:\Windows\Explorer\ folder.

NOTE: The Windows Explorer executable file is also called Explorer.exe. By
default, it is located in the Windows folder and is not changed or replaced
by this trojan program. Do not confuse the Windows Explorer Explorer.exe
file with the Windows\Explorer\Explorer.exe file (the trojan program).

For more information about DlDer.exe, see the following Web site:
http://www.europe.f-secure.com/v-descs/dlder.shtml

dlder_exe dlder_exe Removal Instructions
http://www.spywareremove.com/removedlderexe.html

dlder_exe - Useless
http://www.greatis.com/appdata/u/d/dlder.exe.htm
Manual removal:
Delete this keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run\Dlder
HKEY_LOCAL_MACHINE\Software\games\ClickTillUWin
- - -

Important: If possible, you should Download and install MBAM, update it,
and run the FULL scan. It may be necessary to run it in Safe Mode.

FREE MalwareBytes Anti-Malware (MBAM)
http://www.malwarebytes.org/mbam.php

There is some excellent information he
http://www.elephantboycomputers.com/...moving_Malware

If you do not have a good paid AV like NOD32 or Kaspersky, try this:
FREE Home Edition Avast! antivirus - anti-spyware protection
http://www.avast.com/eng/avast-free-...tispyware.html

It may be necessary to remove the drive and attach it to another
(protected) computer to get your Valued Data copied. If so, make sure that
System Restore on the other computer is not monitoring your drive.

HTH. (Hope This Helps.
--Richard



.