Windows Explorer error repeatedly

J

James

I keep getting a "Windows Explorer has encountered a problem and needs to
close" error. After pressing send or don't send it just comes back up. Here
is the info---- Appname:explorer.exe AppVer:6.-.2900.5512
ModName:user32.dll ModVer: 5.1.2600.5512 Offset:00009de9

I have tried cleanup- CCleaner, Spybot, Norton 2008
 
N

nass

J

James

The sfc /scannow didn't seem to work. The next solution required the xp cd
and I don't have that. Best Buy installed xp at the time of purchase. Is
there anything else???--thanks
 
M

Ms. L MS MVP

There is no porn on my site, believing in those kooks and trolls make you
one of them.


--
Stalking is a Crime
Stalking charges are serious and
almost every state now has a strict stalking law.
 
P

Peter Foldes

Pcbutts

Stop posting links that contain s*****ly explicit material or even better. STOP posting
 
L

Laura MS MVP

You stupid idiot what links are you referring too? the ones everybody say I
do but no one can find.


--
Stalking is a Crime
Stalking charges are serious and
almost every state now has a strict stalking law.




Pcbutts

Stop posting links that contain s*****ly explicit material or even better.
STOP posting
 
N

nass

James
Borrow an exact CD from a friend and perform the steps mentioned in the link
I gave earlier!
If that not vaiable to you then take the machine to your local repair shop,
but backup your data first.
Or Try to run the checker on start up.
Also you can copy the file from the C:\Windows\ServicePackFiles\i386 copy
it from this location to this:
C:\Windows\System32
or from this location:
C:\Windows\SoftwareDistribution\SelfUpdate\16.........long number
Open a local search for "user32.dll" and you will find it in more than one
location.
Reboot your machine after copying the file, does it help?
HTH.
nass
 
J

James

Here is what I've tried. I tried using system recovery from an earlier point
but every earlier point said it didn't work since there were no changes in
settings. In the recovery console I did run chkdsk /r which didn't solve the
problem. Trying to copy the user32.dll file from the service pack files to
system32 (to copy over old) didn't work since it said it was being used by
another person or program. I didn't find user32 in software
distribution-ofcourse running search uses windows explorer so it
fails(refreshes desktop).--Anything else to do?
Thanks for still helping me.
 
N

nass

Hi James,
Download the file from here
http://www.dlldump.com/download-dll-files_new.php/dllfiles/U/user32.dll/5.1.2600.2180/download.html

Then run these cleaning steps:
Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

If the above didn't help try to create a new user account by following these
steps:
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151
 
J

James

onecare found virus: Win32/Parite.B Could this be what is messing up
Explorer? I don't think onecare removed it though or and others like
W97m/Thus.G or TrojanWINREG/lowzones.a or some trojandownloader:BAT/ftper.gen
Norton 2008 hadn't seen these before. I'm still running others like avast
now. Someone else had a similiar problem to mine with explorer messing up on
startup and said it was malware.

nass said:
Hi James,
Download the file from here:
http://www.dlldump.com/download-dll-files_new.php/dllfiles/U/user32.dll/5.1.2600.2180/download.html

Then run these cleaning steps:
Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

If the above didn't help try to create a new user account by following these
steps:
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151

James said:
Here is what I've tried. I tried using system recovery from an earlier point
but every earlier point said it didn't work since there were no changes in
settings. In the recovery console I did run chkdsk /r which didn't solve the
problem. Trying to copy the user32.dll file from the service pack files to
system32 (to copy over old) didn't work since it said it was being used by
another person or program. I didn't find user32 in software
distribution-ofcourse running search uses windows explorer so it
fails(refreshes desktop).--Anything else to do?
Thanks for still helping me.
Click to expand...
Click to expand...
 
N

nass

James said:
onecare found virus: Win32/Parite.B Could this be what is messing up
Explorer? I don't think onecare removed it though or and others like
W97m/Thus.G or TrojanWINREG/lowzones.a or some trojandownloader:BAT/ftper.gen
Norton 2008 hadn't seen these before. I'm still running others like avast
now. Someone else had a similiar problem to mine with explorer messing up on
startup and said it was malware.
Click to expand...


Hi James,
Yes it likely the infection is messing up your system.
Please can you download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my add : to_you_ross(atremove this and repalce with the abvoius)yahoo.co.uk

( _ is underscore)
HTH.
nass
 
L

Laura MS MVP

Yes it can, that's a PE executable. There are removal instructions here
http://www.sophos.com/support/disinfection/pedis.html#q3 also check for the
presence of this registry key and delete it if found
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PINF]



--
Stalking is a Crime
Stalking charges are serious and
almost every state now has a strict stalking law.




James said:
onecare found virus: Win32/Parite.B Could this be what is messing up
Explorer? I don't think onecare removed it though or and others like
W97m/Thus.G or TrojanWINREG/lowzones.a or some
trojandownloader:BAT/ftper.gen
Norton 2008 hadn't seen these before. I'm still running others like avast
now. Someone else had a similiar problem to mine with explorer messing up
on
startup and said it was malware.

nass said:
Hi James,
Download the file from here:
http://www.dlldump.com/download-dll-files_new.php/dllfiles/U/user32.dll/5.1.2600.2180/download.html

Then run these cleaning steps:
Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button
called
[ Clear History ..] click on it to clear your History caches, then click
on
[Delete Files..] to delete Internet Files created over the time, click on
[
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on
your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there
Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them
one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

If the above didn't help try to create a new user account by following
these
steps:
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151

James said:
Here is what I've tried. I tried using system recovery from an earlier
point
but every earlier point said it didn't work since there were no changes
in
settings. In the recovery console I did run chkdsk /r which didn't
solve the
problem. Trying to copy the user32.dll file from the service pack
files to
system32 (to copy over old) didn't work since it said it was being used
by
another person or program. I didn't find user32 in software
distribution-ofcourse running search uses windows explorer so it
fails(refreshes desktop).--Anything else to do?
Thanks for still helping me.

:


James
Borrow an exact CD from a friend and perform the steps mentioned in
the link
I gave earlier!
If that not vaiable to you then take the machine to your local repair
shop,
but backup your data first.
Or Try to run the checker on start up.
Also you can copy the file from the C:\Windows\ServicePackFiles\i386
copy
it from this location to this:
C:\Windows\System32
or from this location:
C:\Windows\SoftwareDistribution\SelfUpdate\16.........long number
Open a local search for "user32.dll" and you will find it in more
than one
location.
Reboot your machine after copying the file, does it help?
HTH.
nass
---
http://www.nasstec.co.uk

:

The sfc /scannow didn't seem to work. The next solution required
the xp cd
and I don't have that. Best Buy installed xp at the time of
purchase. Is
there anything else???--thanks

:



:

I keep getting a "Windows Explorer has encountered a problem
and needs to
close" error. After pressing send or don't send it just comes
back up. Here
is the info---- Appname:explorer.exe AppVer:6.-.2900.5512
ModName:user32.dll ModVer: 5.1.2600.5512 Offset:00009de9

I have tried cleanup- CCleaner, Spybot, Norton 2008


How to repair damaged or corrupt user32.dll:
http://forums.techguy.org/windows-nt-2000-xp/544919-explorer-exe-crash-startup.html

HTH.
nass
Click to expand...
Click to expand...
Click to expand...
 
J

James

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:35:14 AM, on 7/6/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
C:\PROGRA~1\NORTON~4\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\java.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\PROGRA~1\NORTON~4\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navw32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://us10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://srch-us10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://srch-us10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://srch-us10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft
Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = localhost;*.local
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention -
{6D53EC84-6AAE-4787-AEEE-F4628F01010C} -
C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper -
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live
Toolbar\msntb.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program
Files\HP\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
- C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O4 - HKLM\..\Run: [GuidedHelpReboot] "C:\Program Files\ACW\acw.exe" /TaskID
"filecat:C:\DOCUME~1\Owner\LOCALS~1\Temp\{A71B2D14-D515-4DAE-B4D0-8E62C56978B7}\310353a.xml"
/ExecutionMode ShowMe /Extensions "C:\Program Files\ACW\AcwPSSExtn.DLL"
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card
Reader\shwicon2k.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program
Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet
Security\osCheck.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NSWosCheck] "C:\Program Files\Norton SystemWorks Basic
Edition\osCheck.exe"
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks
Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink
Advisor\Linksys EasyLink Advisor.exe" /minimized
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program
Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program
Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital
Imaging\bin\backupnotify.exe
O4 - S-1-5-18 Startup: Greetings Workshop Reminders.lnk = C:\Program
Files\Greetings Workshop\GWREMIND.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Greetings Workshop Reminders.lnk = C:\Program
Files\Greetings Workshop\GWREMIND.EXE (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: Greetings Workshop Reminders.lnk = C:\Program Files\Greetings
Workshop\GWREMIND.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program
Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from
HP\137903\Program\BackWeb-137903.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Windows Live Search - res://C:\Program
Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites -
http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56}
- C:\Program Files\Norton SystemWorks Basic Edition\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup -
{5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks
Basic Edition\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program
Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration
Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety
Center Base Module) -
http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1208064569149
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download
Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1208065070500
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload
Manager Class) -
http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_2/axofupld.cab
O16 - DPF: {6F750203-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload
Manager Class) -
http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_2/axofupld.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) -
http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class)
- http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common
Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation -
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program
Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec
Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program
Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program
Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program
Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program
Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks,
Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec
Corporation - C:\PROGRA~1\NORTON~4\NORTON~1\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation -
C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program
Files\SPAMfighter\sfus.exe
O23 - Service: Speed Disk service - Symantec Corporation -
C:\PROGRA~1\NORTON~4\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program
Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: Symantec Core LC - Unknown owner -
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation -
C:\Program Files\Viewpoint\Common\ViewpointService.exe
 
J

James

I don't have another xp computer to extract those files from to write to a
disk. How do I search for that registry key?

Laura MS MVP said:
Yes it can, that's a PE executable. There are removal instructions here
http://www.sophos.com/support/disinfection/pedis.html#q3 also check for the
presence of this registry key and delete it if found
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PINF]



--
Stalking is a Crime
Stalking charges are serious and
almost every state now has a strict stalking law.




James said:
onecare found virus: Win32/Parite.B Could this be what is messing up
Explorer? I don't think onecare removed it though or and others like
W97m/Thus.G or TrojanWINREG/lowzones.a or some
trojandownloader:BAT/ftper.gen
Norton 2008 hadn't seen these before. I'm still running others like avast
now. Someone else had a similiar problem to mine with explorer messing up
on
startup and said it was malware.

nass said:
Hi James,
Download the file from here:
http://www.dlldump.com/download-dll-files_new.php/dllfiles/U/user32.dll/5.1.2600.2180/download.html

Then run these cleaning steps:
Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button
called
[ Clear History ..] click on it to clear your History caches, then click
on
[Delete Files..] to delete Internet Files created over the time, click on
[
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on
your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there
Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them
one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

If the above didn't help try to create a new user account by following
these
steps:
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151

:

Here is what I've tried. I tried using system recovery from an earlier
point
but every earlier point said it didn't work since there were no changes
in
settings. In the recovery console I did run chkdsk /r which didn't
solve the
problem. Trying to copy the user32.dll file from the service pack
files to
system32 (to copy over old) didn't work since it said it was being used
by
another person or program. I didn't find user32 in software
distribution-ofcourse running search uses windows explorer so it
fails(refreshes desktop).--Anything else to do?
Thanks for still helping me.

:


James
Borrow an exact CD from a friend and perform the steps mentioned in
the link
I gave earlier!
If that not vaiable to you then take the machine to your local repair
shop,
but backup your data first.
Or Try to run the checker on start up.
Also you can copy the file from the C:\Windows\ServicePackFiles\i386
copy
it from this location to this:
C:\Windows\System32
or from this location:
C:\Windows\SoftwareDistribution\SelfUpdate\16.........long number
Open a local search for "user32.dll" and you will find it in more
than one
location.
Reboot your machine after copying the file, does it help?
HTH.
nass
---
http://www.nasstec.co.uk

:

The sfc /scannow didn't seem to work. The next solution required
the xp cd
and I don't have that. Best Buy installed xp at the time of
purchase. Is
there anything else???--thanks

:



:

I keep getting a "Windows Explorer has encountered a problem
and needs to
close" error. After pressing send or don't send it just comes
back up. Here
is the info---- Appname:explorer.exe AppVer:6.-.2900.5512
ModName:user32.dll ModVer: 5.1.2600.5512 Offset:00009de9

I have tried cleanup- CCleaner, Spybot, Norton 2008


How to repair damaged or corrupt user32.dll:
http://forums.techguy.org/windows-nt-2000-xp/544919-explorer-exe-crash-startup.html

HTH.
nass
Click to expand...
Click to expand...
Click to expand...
 
N

nass

James said:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:35:14 AM, on 7/6/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Click to expand...

Can you please contact me on the add I gave earlier, if you don't wish to
contact me, please send your log to other hijackthis forums that can help you
to clean up your machine.
Thank you.
nass
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Windows Explorer Error 16
Explorer crashes when deleting files 1
windows explorer error message 1
Windows Explorer error 1
Windows Explorer has encountered a problem and needs to close... 2
Error starting windows 3
IE 8 mshtml.dll error 7
Volume Control 2

Top