in windows xp, non-administrator cannot start IE

[Randy Meinking]

My wife's account on our Windows XP system is suddenly
unable to start IE, but when I change her account to an
administrator, it works fine.

The error we receive is:
Internet Explorer has encountered a problem and needs to
close.

When looking at the details, the file it fails on is
mos030715s.dll. We are running IE 6.0.2800.1106

Any advise would be greatly appreciated.

 

[Sandi - Microsoft MVP]

It is essential to check for spyware/hijackware/foistware.

Go to IE tools, internet options, general tab. Click on the cache settings
button and then 'view objects'. Delete anything you don't recognise. If you
are unsure, or no objects appear, for diagnosis purposes I REALLY like
BHODemon, available at http://www.definitivesolutions.com/bhodemon.htm. It
does not need installing - simply unzip and run the EXE programme. It is
very easy to use.

I find this programme is a better option than IE6's ability to turn off
"Enable third-party browser extensions (requires restart)". This disables
*all* plug-ins and makes troubleshooting very difficult.

Many people like AdAware, available at www.lavasoft.de . Make sure you keep
the signature files up to date and remember, AdAware may only remove the
current installation of spyware; it may not do anything about software that
reinstalls itself, so unless you want to get stuck in an endless loop of
hijack/cleanout/hijack/cleanout make sure you get rid of whatever is
installing the junk. See my Troubleshooting advice for information about
how to track down and get rid of spyware completely.
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot

An excellent replacement for AdAware is Spybot. Again, it is a free
programme which can be downloaded from:
http://spybot.eon.net.au/


--
Install the latest IE cumulative patch for protection against QHost:
http://www.microsoft.com/security/security_bulletins/ms03-040.asp
More information about QHosts can be found here:
http://www.mvps.org/inetexplorer/darnit_3.htm#qhost
________________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://www.mvps.org/inetexplorer

 

[H Leboeuf]

Check this parasite. Random file names with the same pattern.

WurldMedia http://www.doxdesk.com/parasite/WurldMedia.html
Files: M030106shop.dll, Bpboh.dll, M030206POHS.DLL, mdefshop.dll,
mdefshop.dll, mbho.dll, mo030414s.dll, moaa030425s.dll, MSCStat.exe,
MSCStat2.exe, mostat.exe, moconfig.exe, rdxrnnnnnn, adnnnnnn.de.xml,
mscnnnnnn.de, moz02NNNNNN.de ( n being a number.)

Read on.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

 

[Sandi - Microsoft MVP]

Question. How can 'random file names' have a 'pattern'? Its a contradiction
in terms.

--
Install the latest IE cumulative patch for protection against QHost:
http://www.microsoft.com/security/security_bulletins/ms03-040.asp
More information about QHosts can be found here:
http://www.mvps.org/inetexplorer/darnit_3.htm#qhost
________________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://www.mvps.org/inetexplorer