Internet Explorer had encountered a problem and needs to close.

[Guest]

I have the message "Internet Explorer had encountered a problem and needs to
close" every time I close my IE 6., Windows XP, SP2. I don't know how to fix
the issue. CAn someone help please.

Thank you.

 

[Frank Saunders, MS-MVP, IE/OE]

Eliminate any scumware.
CAUTION!!!!! Before you try to remove spyware using any of these programs ,
download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.


See this link for information about malware:
http://arstechnica.com/articles/paedia/malware.ars

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

I'm running WinXP (SP2) and am experiencing the identical problem.

When I try to access a html file on my HDD MSIE6 simply closes and I get no
error message whatsoever?

I have tried numerous suggestions posted on this forum including removing
spyware (S&D, LavaSoft AdWare...), reparing/reinstalling IE, disabling
settings and other registry tweaks - all to no avail.

I load up MSIE6, attempt to access a website and then I get:

---------
"Internet Explorer has encountered a problem and needs to close. We are
sorry for the inconvenience."

Error signature:
"AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: unknown
ModVer: 0.0.0.0 Offset: 00147153"
---------

This seems to be a common problen with no solution. Surely someone has a
solution!

mmmm, help!?

 

[Frank Saunders, MS-MVP, IE/OE]

Then it isn't the same problem, is it?

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

Apologies, not the exact same problem - similar to a degree.

I have already run through all the spyware instructions (including the
Hijack suggestion) and still am experiencing the same problem.

I've read and tried many of the suggestions posted to this forum with no
success.

The last resort would be running a clean install, but want to avoid this....

Any other ideas?

Then it isn't the same problem, is it?

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

I'm running WinXP (SP2) and am experiencing the identical problem.

When I try to access a html file on my HDD MSIE6 simply closes and I get
no
error message whatsoever?

I have tried numerous suggestions posted on this forum including removing
spyware (S&D, LavaSoft AdWare...), reparing/reinstalling IE, disabling
settings and other registry tweaks - all to no avail.

I load up MSIE6, attempt to access a website and then I get:

---------
"Internet Explorer has encountered a problem and needs to close. We are
sorry for the inconvenience."

Error signature:
"AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: unknown
ModVer: 0.0.0.0 Offset: 00147153"
---------

This seems to be a common problen with no solution. Surely someone has a
solution!

mmmm, help!?

 

[Frank Saunders, MS-MVP, IE/OE]

If the experts at http://www.spywareinfo.com/forums pronounced you clean
then I don't know what to suggest.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

Apologies, not the exact same problem - similar to a degree.

I have already run through all the spyware instructions (including the
Hijack suggestion) and still am experiencing the same problem.

I've read and tried many of the suggestions posted to this forum with no
success.

The last resort would be running a clean install, but want to avoid
this....

Any other ideas?

Then it isn't the same problem, is it?

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save
Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

I'm running WinXP (SP2) and am experiencing the identical problem.

When I try to access a html file on my HDD MSIE6 simply closes and I
get
no
error message whatsoever?

I have tried numerous suggestions posted on this forum including
removing
spyware (S&D, LavaSoft AdWare...), reparing/reinstalling IE, disabling
settings and other registry tweaks - all to no avail.

I load up MSIE6, attempt to access a website and then I get:

---------
"Internet Explorer has encountered a problem and needs to close. We
are
sorry for the inconvenience."

Error signature:
"AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: unknown
ModVer: 0.0.0.0 Offset: 00147153"
---------

This seems to be a common problen with no solution. Surely someone has
a
solution!

mmmm, help!?

 

[Robert Aldwinckle]

"AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: unknown

ModVer: 0.0.0.0 Offset: 00147153"

Crashes in ModName: unknown are usually signs of interference
from incompatible (or malicious) third-party programs.

If you like you can get more information about your crash from
a drwtsn32.log which corresponds with it. E.g. if the last dump
captured details about the crash browse it with Notepad;
go to the bottom and do a find up for FAULT -> (assuming an
English version of Windows); scroll ahead to the Stack Back Trace;
there will be module names and entry point information there which
can give you clues about what was happening leading up to the crash.

The section after that, called the Raw Stack Dump is occasionally
useful too. E.g. in case the Stack itself is corrupt or loaded with
readable strings the interpreted portion of the Raw Stack Dump
makes the information in those stack entries easier to see.
Often, when there is readable information there the module name
of a possible culprit has been there too.


Good luck

Robert Aldwinckle

 

[Guest]

If you like you can get more information about your crash from
a drwtsn32.log which corresponds with it. E.g. if the last dump
captured details about the crash browse it with Notepad;
go to the bottom and do a find up for FAULT -> (assuming an
English version of Windows); scroll ahead to the Stack Back Trace;
there will be module names and entry point information there which
can give you clues about what was happening leading up to the crash.

Thanks Robert for your suggestion. I have run Dr Watson but am unsure how to
interpret the log (summary attached below).

Is there a way to repair damaged or corrupt dll files?

Where do I go from here?

Thanks...

Application exception occurred:
App: C:\Program Files\Internet Explorer\iexplore.exe (pid=6764)
When: 14/12/2004 @ 18:43:09.013
Exception number: c0000005 (access violation)


*----> State Dump for Thread Id 0x1a70 <----*

eax=00000000 ebx=00000000 ecx=000003e5 edx=7c97c380 esi=040e2848 edi=00000000
eip=00147153 esp=001470ec ebp=00000013 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

function: <nosymbols>
No prior disassembly possible
00147153 0000 add [eax],al
00147155 0000 add [eax],al
00147157 0000 add [eax],al
00147159 0000 add [eax],al
0014715b 0000 add [eax],al
0014715d 0000 add [eax],al
0014715f 0000 add [eax],al
00147161 0000 add [eax],al
00147163 0000 add [eax],al
FAULT ->00147153 0000 add [eax],al
ds:0023:00000000=??
00147155 0000 add [eax],al
00147157 0000 add [eax],al
00147159 0000 add [eax],al
0014715b 0000 add [eax],al
0014715d 0000 add [eax],al
0014715f 0000 add [eax],al
00147161 0000 add [eax],al
00147163 0000 add [eax],al
00147165 0000 add [eax],al
00147167 0000 add [eax],al

*----> Stack Back Trace <----*
ChildEBP RetAddr Args to Child
00000013 00000000 00000000 00000000 00000000 0x147153

*----> State Dump for Thread Id 0x1ad4 <----*

eax=7d4a7f98 ebx=7c901005 ecx=9b52404c edx=00000086 esi=0000025c edi=00000000
eip=7c90eb94 esp=02c4ff14 ebp=02c4ff78 iopl=0 nv up ei ng nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000293

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ntdll.dll -
function: ntdll!KiFastSystemCallRet


*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\Mshtml.dll -
ChildEBP RetAddr Args to Child
02c4ff78 7c802542 0000025c 000927c0 00000000 ntdll!KiFastSystemCallRet
02c4ff8c 7d50f701 0000025c 000927c0 00000005 kernel32!WaitForSingleObject+0x12
02c4ffb4 7c80b50b 023f27a0 00000005 001a2e30 Mshtml+0x6f701
02c4ffec 00000000 7d55dcb7 023f27a0 00000000 kernel32!GetModuleFileNameA+0x1b4


*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\RPCRT4.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
02d4ff80 77e76c22 02d4ffa8 77e76a3b 001a8ce0 ntdll!KiFastSystemCallRet
02d4ff88 77e76a3b 001a8ce0 00000000 0014d7e4 RPCRT4!I_RpcBCacheFree+0x5ea
02d4ffa8 77e76c0a 00174298 02d4ffec 7c80b50b RPCRT4!I_RpcBCacheFree+0x403
02d4ffb4 7c80b50b 001a2800 00000000 0014d7e4 RPCRT4!I_RpcBCacheFree+0x5d2
02d4ffec 00000000 77e76bf0 001a2800 00000000 kernel32!GetModuleFileNameA+0x1b4


*----> State Dump for Thread Id 0x14ec <----*

eax=774f319a ebx=00007530 ecx=7ffde000 edx=00000000 esi=00000000 edi=02e4ff50
eip=7c90eb94 esp=02e4ff20 ebp=02e4ff78 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206



*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\ole32.dll -
ChildEBP RetAddr Args to Child
02e4ff78 7c802451 0000ea60 00000000 02e4ffb4 ntdll!KiFastSystemCallRet
02e4ff88 774f2fcb 0000ea60 001b2a38 774f314d kernel32!Sleep+0xf
02e4ffb4 7c80b50b 001b2a38 7c910945 7c91094e ole32!StringFromGUID2+0x2d1
02e4ffec 00000000 774f319a 001b2a38 00000000 kernel32!GetModuleFileNameA+0x1b4



*----> Stack Back Trace <----*
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\wdmaud.drv -
ChildEBP RetAddr Args to Child
033fff6c 7c809c86 00000002 033fffa4 00000000 ntdll!KiFastSystemCallRet
033fff88 72d2312a 00000002 033fffa4 00000000
kernel32!WaitForMultipleObjects+0x18
033fffb4 7c80b50b 00000000 00000000 00160000 wdmaud!midMessage+0x348
033fffec 00000000 72d230e8 00000000 00000000 kernel32!GetModuleFileNameA+0x1b4


*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\WINMM.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
ChildEBP RetAddr Args to Child
034fff78 76b44e3d 034fff98 00000000 00000000 ntdll!KiFastSystemCallRet
034fffb4 7c80b50b 000003a4 00000200 0000002b WINMM!PlaySoundW+0x7e6
034fffec 00000000 76b44dd6 000003a4 00000000 kernel32!GetModuleFileNameA+0x1b4


*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\mswsock.dll -
WARNING: Stack unwind information not available. Following frames may be
wrong.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\System32\WS2_32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINDOWS\system32\WININET.dll -

 

[Robert Aldwinckle]

....

I have run Dr Watson but am unsure how to
interpret the log (summary attached below).

FAULT ->00147153 0000 add [eax],al
ds:0023:00000000=??

*----> Stack Back Trace <----*
ChildEBP RetAddr Args to Child
00000013 00000000 00000000 00000000 00000000 0x147153

</extracts>

It looks like the registers have been trashed.
E.g. notice that the instruction pointer is within a field of binary zeros
and the Stack Pointer is somewhere in low storage.

The only potential clue in your dump that I can see is a reference
to wdmaud.drv (e.g. perhaps that driver is the cause of the corruption.)

Is there a way to repair damaged or corrupt dll files?

Here are some general repair procedures for NT5 systems:

<title>KB831429 - Windows XP stops responding when you download updates from Windows Update</title>

in addition to the sfc /scannow procedure specified for XP
you can also use the regsvr32 commands specified for W2K.
XP doesn't have an IE Repair like the one mentioned there
but XPsp2 does have a new substitute for it: iexplore /rereg

<title>KB870700 - How to troubleshoot problems accessing secure Web pages with Internet Explorer 6 Service Pack 2</title>


BTW if sfc replaces a module and that module has a registration
procedure it is not clear to me that re-registration will occur.
I would repeat the regsvr32 commands, etc. *after* doing a /scannow.


Good luck

Robert
---

 

[Old_Timer]

...

I have run Dr Watson but am unsure how to
interpret the log (summary attached below).

FAULT ->00147153 0000 add [eax],al
ds:0023:00000000=??

*----> Stack Back Trace <----*
ChildEBP RetAddr Args to Child
00000013 00000000 00000000 00000000 00000000 0x147153

</extracts>

It looks like the registers have been trashed.
E.g. notice that the instruction pointer is within a field of binary zeros
and the Stack Pointer is somewhere in low storage.

The only potential clue in your dump that I can see is a reference
to wdmaud.drv (e.g. perhaps that driver is the cause of the corruption.)

Is there a way to repair damaged or corrupt dll files?

Here are some general repair procedures for NT5 systems:

<title>KB831429 - Windows XP stops responding when you download updates from Windows Update</title>

in addition to the sfc /scannow procedure specified for XP
you can also use the regsvr32 commands specified for W2K.
XP doesn't have an IE Repair like the one mentioned there
but XPsp2 does have a new substitute for it: iexplore /rereg

<title>KB870700 - How to troubleshoot problems accessing secure Web pages with Internet Explorer 6 Service Pack 2</title>


BTW if sfc replaces a module and that module has a registration
procedure it is not clear to me that re-registration will occur.
I would repeat the regsvr32 commands, etc. *after* doing a /scannow.


Good luck

Robert

When I had this "Microsoft Internet Explorer has encountered a problem
and needs to close" I resolved it by going to Control Panel/Internet
Options/Advanced and unchecking "enable third party extensions"

I really don't know what caused the problem but I found a way to
resolve it.

Please reply as to how this solution works for you.

Old_Timer

 

[Frank Saunders, MS-MVP IE/OE]

When I had this "Microsoft Internet Explorer has encountered a problem
and needs to close" I resolved it by going to Control Panel/Internet
Options/Advanced and unchecking "enable third party extensions"

I really don't know what caused the problem but I found a way to
resolve it.

Please reply as to how this solution works for you.

Old_Timer

If that fixed it you have spyware on your system.

CAUTION!!!!! Before you try to remove spyware using any of these programs ,
download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://www.spywareinfo.com/forums/
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/ or the Spyware forum at
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.


See this link for information about malware:
http://arstechnica.com/articles/paedia/malware.ars

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx