ERROR MESSAGE

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?
 
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect
 
PA Bear,

Thanks for your reply. Have tried all your suggestions but
nothing has changed.

The details of the error message I get are:

App.name - iexplore.exe
App. ver - 6.0.2800.1108
Mod. name - msvcrt.dll
Mod. ver - 6.1.8293.0
Offset - 00015ca2

This means nothing to me. Does this help you identify the
problem?

Thanks,
Alan
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect
Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?
Click to expand...

.
Click to expand...
 
Long shot: http://support.microsoft.com/?kbid=300107

IMHO you don't need it if you don't have a Tablet PC. Acrobat Reader will
work just fine. Otherwise...
...When all else fails, HijackThis
Click to expand...
--
~PA Bear

PA Bear,

Thanks for your reply. Have tried all your suggestions but
nothing has changed.

The details of the error message I get are:

App.name - iexplore.exe
App. ver - 6.0.2800.1108
Mod. name - msvcrt.dll
Mod. ver - 6.1.8293.0
Offset - 00015ca2

This means nothing to me. Does this help you identify the
problem?

Thanks,
Alan
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect
Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?
Click to expand...

.
Click to expand...
Click to expand...
 
Bear,

I have at last managed to get hijackthis to work.
Following is the report it gave:


Logfile of HijackThis v1.97.7
Scan saved at 1:26:11 p.m., on 26/05/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\VANTA\VI_GRM.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\MIXER.EXE
C:\KMAESTRO\KMAESTRO.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\GSICON.EXE
C:\WINDOWS\SYSTEM\DSLAGENT.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\SCANBUTTON 2.1\SCANBUTTON.EXE
C:\PROGRAM FILES\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 3.0
SE\CALCHECK.EXE
C:\PROGRAM FILES\NIKON\NKVIEW5\NKVMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\Twunk_16.exe
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACRORD32.EXE
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\8P6F4123
\HIJACKTHIS[1].EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://xtra.co.nz/home/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window
Title = Actrix Networks
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) = http://www.eznsearch.com/index.htm
F1 - win.ini: load=C:\VANTA\vi_grm.exe
F1 - win.ini: run=C:\WINDOWS\SYSTEM\cmmpu.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-
11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [KeyMaestro] C:\KMAESTRO\KMaestro.exe
O4 - HKLM\..\Run: [StillImageMonitor]
C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRAM
FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE"
O4 - HKLM\..\Run: [CriticalUpdate]
C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6
\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1
\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [TrueVector]
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1
\GRISOFT\AVG6\Avgserv9.exe
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk
= C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O4 - Startup: ScanButton 2.1.lnk = C:\Program
Files\ScanButton 2.1\ScanButton.exe
O4 - Startup: Ulead Photo Express 3.0 SE Calendar
Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo
Express 3.0 SE\CalCheck.exe
O4 - Startup: NkvMon.exe.lnk = C:\Program
Files\Nikon\NkView5\NkvMon.exe
O4 - Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1
\Plugins\NPDocBox.dll
O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin.dll
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin2.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
(Shockwave ActiveX Control) -
http://download.macromedia.com/pub/shockwave/cabs/director/
swdir.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37884.0710185185
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61}
(HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2004033001/housecall.ant
ivirus.com/housecall/xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove
Control) -
http://www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}
(Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/SharedContent/vc/bin/AvS
niff.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
(ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5/asinst.cab

Can you tell from this if I have a virus?

Thanks for your help.

Alan


-----Original Message-----
Long shot: http://support.microsoft.com/?kbid=300107

IMHO you don't need it if you don't have a Tablet PC. Acrobat Reader will
work just fine. Otherwise...
...When all else fails, HijackThis
Click to expand...
--
~PA Bear

[email protected] said:
PA Bear,

Thanks for your reply. Have tried all your suggestions but
nothing has changed.

The details of the error message I get are:

App.name - iexplore.exe
App. ver - 6.0.2800.1108
Mod. name - msvcrt.dll
Mod. ver - 6.1.8293.0
Offset - 00015ca2

This means nothing to me. Does this help you identify the
problem?

Thanks,
Alan
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

Alan wrote:
Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?

.
Click to expand...
Click to expand...

.
Click to expand...
 
See my earlier reply giving you a KB article.

Also:
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Bear,

I have at last managed to get hijackthis to work.
Following is the report it gave:


Logfile of HijackThis v1.97.7
Scan saved at 1:26:11 p.m., on 26/05/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\VANTA\VI_GRM.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\MIXER.EXE
C:\KMAESTRO\KMAESTRO.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\GSICON.EXE
C:\WINDOWS\SYSTEM\DSLAGENT.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\SCANBUTTON 2.1\SCANBUTTON.EXE
C:\PROGRAM FILES\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 3.0
SE\CALCHECK.EXE
C:\PROGRAM FILES\NIKON\NKVIEW5\NKVMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\Twunk_16.exe
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACRORD32.EXE
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\8P6F4123
\HIJACKTHIS[1].EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://xtra.co.nz/home/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window
Title = Actrix Networks
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) = http://www.eznsearch.com/index.htm
F1 - win.ini: load=C:\VANTA\vi_grm.exe
F1 - win.ini: run=C:\WINDOWS\SYSTEM\cmmpu.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-
11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [KeyMaestro] C:\KMAESTRO\KMaestro.exe
O4 - HKLM\..\Run: [StillImageMonitor]
C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRAM
FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE"
O4 - HKLM\..\Run: [CriticalUpdate]
C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6
\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1
\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [TrueVector]
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1
\GRISOFT\AVG6\Avgserv9.exe
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk
= C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O4 - Startup: ScanButton 2.1.lnk = C:\Program
Files\ScanButton 2.1\ScanButton.exe
O4 - Startup: Ulead Photo Express 3.0 SE Calendar
Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo
Express 3.0 SE\CalCheck.exe
O4 - Startup: NkvMon.exe.lnk = C:\Program
Files\Nikon\NkView5\NkvMon.exe
O4 - Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1
\Plugins\NPDocBox.dll
O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin.dll
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin2.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
(Shockwave ActiveX Control) -
http://download.macromedia.com/pub/shockwave/cabs/director/
swdir.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37884.0710185185
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61}
(HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2004033001/housecall.ant
ivirus.com/housecall/xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove
Control) -
http://www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}
(Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/SharedContent/vc/bin/AvS
niff.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
(ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5/asinst.cab

Can you tell from this if I have a virus?

Thanks for your help.

Alan


-----Original Message-----
Long shot: http://support.microsoft.com/?kbid=300107

IMHO you don't need it if you don't have a Tablet PC. Acrobat Reader will
work just fine. Otherwise...
...When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**
Click to expand...
--
~PA Bear

PA Bear,

Thanks for your reply. Have tried all your suggestions but
nothing has changed.

The details of the error message I get are:

App.name - iexplore.exe
App. ver - 6.0.2800.1108
Mod. name - msvcrt.dll
Mod. ver - 6.1.8293.0
Offset - 00015ca2

This means nothing to me. Does this help you identify the
problem?

Thanks,
Alan
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan.
From now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

Alan wrote:
Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?

.
Click to expand...

.
Click to expand...
Click to expand...
 
Did you set your start page at xtrac.o?
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://xtra.co.nz/home/
--
This site is blocked by M. Burgess, it may be some traking site. Check it
out.
The best way is to block the server from tracking you in the first place
Blocking Ads with a Hosts File and AdShield. Under the Security Tab download
the hosts.zip file.
http://www.mvps.org/winhelp2002/hosts.htm

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===
Bear,

I have at last managed to get hijackthis to work.
Following is the report it gave:


Logfile of HijackThis v1.97.7
Scan saved at 1:26:11 p.m., on 26/05/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\VANTA\VI_GRM.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\MIXER.EXE
C:\KMAESTRO\KMAESTRO.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\GSICON.EXE
C:\WINDOWS\SYSTEM\DSLAGENT.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\SCANBUTTON 2.1\SCANBUTTON.EXE
C:\PROGRAM FILES\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 3.0
SE\CALCHECK.EXE
C:\PROGRAM FILES\NIKON\NKVIEW5\NKVMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\Twunk_16.exe
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACRORD32.EXE
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\8P6F4123
\HIJACKTHIS[1].EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://xtra.co.nz/home/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window
Title = Actrix Networks
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) = http://www.eznsearch.com/index.htm
F1 - win.ini: load=C:\VANTA\vi_grm.exe
F1 - win.ini: run=C:\WINDOWS\SYSTEM\cmmpu.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-
11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [KeyMaestro] C:\KMAESTRO\KMaestro.exe
O4 - HKLM\..\Run: [StillImageMonitor]
C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRAM
FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE"
O4 - HKLM\..\Run: [CriticalUpdate]
C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6
\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1
\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [TrueVector]
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1
\GRISOFT\AVG6\Avgserv9.exe
O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk
= C:\WINDOWS\SYSTEM\E_SRCV03.EXE
O4 - Startup: ScanButton 2.1.lnk = C:\Program
Files\ScanButton 2.1\ScanButton.exe
O4 - Startup: Ulead Photo Express 3.0 SE Calendar
Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo
Express 3.0 SE\CalCheck.exe
O4 - Startup: NkvMon.exe.lnk = C:\Program
Files\Nikon\NkView5\NkvMon.exe
O4 - Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1
\Plugins\NPDocBox.dll
O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin.dll
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1
\PLUGINS\npqtplugin2.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
(Shockwave ActiveX Control) -
http://download.macromedia.com/pub/shockwave/cabs/director/
swdir.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37884.0710185185
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61}
(HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2004033001/housecall.ant
ivirus.com/housecall/xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove
Control) -
http://www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}
(Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/SharedContent/vc/bin/AvS
niff.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
(ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5/asinst.cab

Can you tell from this if I have a virus?

Thanks for your help.

Alan


-----Original Message-----
Long shot: http://support.microsoft.com/?kbid=300107

IMHO you don't need it if you don't have a Tablet PC. Acrobat Reader will
work just fine. Otherwise...
...When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**
Click to expand...
--
~PA Bear

[email protected] said:
PA Bear,

Thanks for your reply. Have tried all your suggestions but
nothing has changed.

The details of the error message I get are:

App.name - iexplore.exe
App. ver - 6.0.2800.1108
Mod. name - msvcrt.dll
Mod. ver - 6.1.8293.0
Offset - 00015ca2

This means nothing to me. Does this help you identify the
problem?

Thanks,
Alan
-----Original Message-----
Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

Alan wrote:
Two days ago my computer started getting random error
messages when surfing the net
The message I get is "Internet Explorer has encountered a
problem and needs to close. We are sorry for the
inconvenience."
Then an auto error report box comes up.

This error only comes up on some websites and more often
not on the opening page. It seems to occur when I try to
open a second page on a website.I can't see any pattern
asto the websites which cause the error.

I have already;

- cleaned up my PC with Adware and Spybot
- Cleared the history
-Uninstalled and reinstalled (fromMS site) IE6
- Uninstalled IE6 and gone back to my previous browser
(IE5) but the error still occurs

I suspect this maybe a Windows and not a browser problem.

Can anybody offer any advise on fixing this problem?

.
Click to expand...

.
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Error Message 1
IE 5 & 6 Browsers Cannot find page 3
Can't surf from IE6 but can from Outlook 1
Page Errors IE6/IE7 3
Permission denied error 1
Browser closes when trying to print page in iframe 2
IE error message in IE7 aqnd now IE6 1
No error message display 1

Back
Top