Application Layer Gateway Service

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Everytime I start Windows XP Pro, I get a dialogue box stating "Application
Layer Gateway Service encountered a problem and had to close" and asking me
to send an error message to Microsoft. Any ideas about how to fix this?
 
Tim,

What is the error report contents? Module name, memory address etc

Maybe it is just the 'alg.exe' file itself, but maybe not

Awaiting more info
 
The link to the error message details contains:

F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\alg.exe.mdmp
F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\appcompat.txt
 
Is this what you meant?

szAppName : alg.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll

szModVer : 5.1.2600.2180 offset : 0002d9cb
 
On 9/16/2007 11:12 AM On a whim, Tim Heslip pounded out on the keyboard
Is this what you meant?

szAppName : alg.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll

szModVer : 5.1.2600.2180 offset : 0002d9cb
Click to expand...

Hi Tim,

One thing I see is that an exe file should not reside in a temp folder
(although it has a different extension, it could be a downloaded file).
Specifically, alg.exe should reside in the System32 folder.

Do you have an updated AV program? Run a full scan, and even try an
online scanner like Kaspersky:

http://www.kaspersky.com/virusscanner

Also a malware check using Spybot Search & Destroy and/or Lavasoft Ad-Aware.

This is just a start. If these suggestions don't cure it, you will have
to get more aggressive.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
Hi Terry, thanks for responding.

I searched for alg.exe and found three hits.

One copy in WINDOWS\system32 and two copies in
WINDOWS\PCHEALTH\ErrorRep\UserDumps

I do have a recent version of McAfee virus checker and Lavasoft adware.

Can you advise please.

Tim
 
On 9/17/2007 5:40 PM On a whim, Tim Heslip pounded out on the keyboard
Hi Terry, thanks for responding.

I searched for alg.exe and found three hits.

One copy in WINDOWS\system32 and two copies in
WINDOWS\PCHEALTH\ErrorRep\UserDumps

I do have a recent version of McAfee virus checker and Lavasoft adware.

Can you advise please.

Tim
Click to expand...

Hi Tim,

First, use the advise I provided in the first post (using at least two
of each type of scanner), then report back.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
Hi Terry, I updated and ran both the McAfee virus checker (no viruses were
found) and the lavasoft adware scanner (lots of hits were found and all
removed).

I still get the same problem at startup.
 
On 9/18/2007 5:18 PM On a whim, Tim Heslip pounded out on the keyboard
Hi Terry, I updated and ran both the McAfee virus checker (no viruses were
found) and the lavasoft adware scanner (lots of hits were found and all
removed).

I still get the same problem at startup.
Click to expand...

Well, you ran one of each. Often times it takes more than one to find
everything. That is why I suggested the online virus scanner and Spybot
also.

Open MSCONFIG (Start, Run, type msconfig and click OK), click on the
Startup tab. Look for the path in the error message under the "Command"
heading. If you find it, uncheck it, click OK and reboot to see if the
error message is gone. If not, report back.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
Hi Terry,

I ran the MSCONFIG but could not find the path in the error message in the
startup list. The path is

F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\alg.exe.mdmp
F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\appcompat.txt


I also couldn't find those file in that Temp folder either.
 
On 9/19/2007 1:12 PM On a whim, Tim Heslip pounded out on the keyboard
Hi Terry,

I ran the MSCONFIG but could not find the path in the error message in the
startup list. The path is

F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\alg.exe.mdmp
F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\appcompat.txt


I also couldn't find those file in that Temp folder either.
Click to expand...

Okay. Open regedit (Start, Run, type regedit and click OK). Press the
Home key once, and then press Ctrl-F. In the "Find what" box, type in
WER9bf4.dir00 and click Find Next. See if you come up with the entry.
If so, see if the path matches your error message and if it does, delete
it. Press F3 to continue and repeat until it says finished. Report back.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
On 9/19/2007 2:18 PM On a whim, Tim Heslip pounded out on the keyboard
I ran the regedit and searched for WER9bf4.dir00 but it wasn't found.
Click to expand...


Download autoruns here:
http://www.microsoft.com/technet/sysinternals/Utilities/AutoRuns.mspx

Extract autoruns.exe and launch it. In the Everything tab, press Ctrl-F
and enter WER9bf4.dir00 and see if it can be located, then report back.


--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
On 9/19/2007 7:54 PM On a whim, Tim Heslip pounded out on the keyboard
Tried the search with autoruns.exe and no match was found
Click to expand...

Click on Options, Include empty locations, press f5 and try again. I'm
running out of ideas here, so hang in there.

Click Start, Run, type win.ini and click OK. Do you see any of the
entries there?

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
 
Tried that too, no hits on the search.

Terry R. said:
On 9/19/2007 7:54 PM On a whim, Tim Heslip pounded out on the keyboard


Click on Options, Include empty locations, press f5 and try again. I'm
running out of ideas here, so hang in there.

Click Start, Run, type win.ini and click OK. Do you see any of the
entries there?

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.
Click to expand...
 
Terry R. said:
On 9/19/2007 7:54 PM On a whim, Tim Heslip pounded out on the keyboard


Click on Options, Include empty locations, press f5 and try again. I'm
running out of ideas here, so hang in there.

Click Start, Run, type win.ini and click OK. Do you see any of the
entries there?
Click to expand...

Terry, you're doing a heroic job here trying to help Tim, but if you
don't mind my saying, I think you've gone off on slightly the wrong
tack.

Basically Tim hasn't given the full text of the error message he sees.
The files he mentioned:
F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\alg.exe.mdmp
F:\DOCUME~1\Tim\LOCALS~1\Temp\WER9bf4.dir00\appcompat.txt
are files that would be included in the error report to Microsoft, if
Tim chose to send one. If he clicks "Do not send", I suspect they're
deleted, and that's why they're not being found by Search.

See for instance:
http://www.hardwaresoftwarearticles.com/archive/index.php/t-13239.html


I also suspect that when Tim said:
I searched for alg.exe and found three hits.

One copy in WINDOWS\system32 and two copies in
WINDOWS\PCHEALTH\ErrorRep\UserDumps
Click to expand...

the "copies" in the PCHealth sub-directory are not alg.exe (or malware
masquerading as alg.exe) but files with aleg.exe as part of their name,
such as "alg.exe.mdmp" (a minidump?) mentioned above.

I hope I don't sound like I'm criticising because I'm certainly not and
unfortunately I don't know the answer to the problem either :-) But I
think looking for the temp folder is a red herring. Tim really needs to
post the *exact* and *full* text of the entire error message.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Cant start Application Layer Gateway Service ALG 1
gateway service 1
Application Layer Gateway Service encountered a problem 5
application layer gateway (alg.exe) 1
events 7000 and 7009. 3
error message - unsolvable 8
event id 7000. the application layer gateway service. 2
alg.exe - ENABLE or DISABLE 2

Back
Top