Solved

IE will not close down unless I terminate the IEXPLORE process

Posted on 2003-11-12
30
381 Views
Last Modified: 2010-04-13
Hello,

A user reported a problem with IE5 that when he went into a browser session he couldn't close the window.  I had a look and the 'X', File>Close or Alt+F4 wouldn't close IE only killing the IEXPLORE.EXE process would.

I then upgraded to IE6, and the same problem persists.

I then upgraded from SP3 to SP4 thinking some windows files may have been corrupted, still no joy.
(I was going to run SFC /SCANNOW but didn't have SP3 on a CDR at hand so upgraded to SP4)

I have reset all the Internet Options back to default as well.

Does anyone have any idea's on what to do?

Thanks
0
Comment
Question by:Rob Stone
  • 11
  • 8
  • 4
  • +3
30 Comments
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9731847
Try doing these

Repair IE :
-----------

Start > Run rundll32 setupwbv.dll,IE6Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g

or

Start > Run rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 C:\windows\inf\ie.inf

Reinstall IE:
-------------

Description of the Internet Explorer Repair Tool
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q194/1/77.asp&NoWebContent=1

How to Reinstall or Repair Internet Explorer and Outlook Express in Windows XP
http://support.microsoft.com/?kbid=318378

Repair Internet Explorer 6
http://www.theeldergeek.com/repair_ie6.htm

http://support.microsoft.com/?kbid=293907

Sunray
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9731867
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9731874
Also check to see if he/she has got the latest updates for IE

Sunray
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9731960
Will check for spyware but would be suprised if thats it.

Tried the first rundll32 option and that didn't fix it and the repair didn't either.  I will try the  rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 C:\windows\inf\ie.inf as I've not seen that one before.

Will check updates for IE too. It was IE6 SP1 but I think there is a new update.

Ta

0
 
LVL 67

Expert Comment

by:sirbounty
ID: 9732146
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 9732162
Running Norton? (http://service1.symantec.com/SUPPORT/nav.nsf/b69c799adfa31ecc85256aa30052f4d0/f0c69fcb50e2eeaa85256b180068dbf5?OpenDocument&src=bar_sch_nam)
Disable auto-protect from Norton's tray icon and see if IE comes back to life (may take a few moments).
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9732585
Not running Norton.

Ran Ad/Spyware and it did detect a few files but after cleaning still have the same problem.

The other rundll32 command also didn't fix it.

I have emailed my mate at MS to see if he can find anything out on this (its about time I used his resources).

I have also searched google and found one other forum with the same problem but no answer :-(  

I'm not going to do all what symantec say to do a clean boot, that would take bloody ages and I don't think that will help to be honest.  If the worst happens I will use him as the test subject for the new XP build being sent out in a few weeks (which he is hoping for I think!)  

If I find the answer I'll let you guys know.
0
 

Expert Comment

by:spooner27
ID: 9732613
does this problem exist in all user profiles?  if not just log in as an admin, rename the users folder to name_old (or what ever) and log off admin and have that user log back in.  it will recreate the profile using the default users settings.  all that is left is to copy documents (they should be on a network share for security) , internet favorites, remap network drives, install printers, and set up mail.  it seems like a lot, but it is a sure thing and better than uninstalling and reinstalling.


Hope it helps,

Steve
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9738170
Sorry, I remembered that I never mentioned that I tried different profiles on my way home last night so unfortuantly that doesn't work either.
0
 

Expert Comment

by:spooner27
ID: 9739268
can i get a list of processes that are running when you try and close IE.   you probably dont want to hear it, but a rebuild may be necessary.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 9739401
Boot to Safe Mode with networking and see if the problem still exists.  
If not, you can try weeding through the services to find the culprit.  
Start->Run->MSCONFIG will allow you to disable all non-MS services.
Identify the critical ones that you need and load those as well (Blkviper's site that I commented on above should help with explanations of each service).  Reboot and determine if the problem is still present.
If not, continue to add servcies back in your configuration until you've found the bugger.
More often than not, one of these services, and thus its underlying application, will be the source of your conflict.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9786100
I had a simmilar problem with outlook not closing and in the end it was a problem of the antivirus. The user logged in did not have permissions over the antivirus log file. McAfee would leave outlook in a "closing" state. Once the permissions for the log file were modified everything went back to normal (yes, I know, what's the point of an antivirus log file when everyone can modify it...)

If you have some time, you could try regmon and filemon (from sysinternals.com) and see what files are accessed while you try to close IE. Then try to see what registry keys are accessed. Usually "Access Denied" or "file not found" -style messages are your biggest chances of finding the problem.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9786125
some other wild guess.

From the IE properties, in the temporary internet files' settings, view the "objects". Maybe you have some activeX control that is behaving improperly.

Does the problem exist if you just open a local html file?

Have you tried to uninstall all antivirus-like software?
what about uninstalling IE completely and reinstall?
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9786314
Hi,

Little update for everyone.

I thought maybe the NoClose virus was on the machine so updated AV signatures but it found nothing.

Ralonso, I have tried uninstalling IE (as far as I can) and reinstalling but no luck.
I will check out the local HTML file and ActiveX controller.

Don't think its a permission issue as it happens with local admin too.

Still waiting to go through the services too.
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 5

Expert Comment

by:ralonso
ID: 9786588
I think I found it! (forget the las comment)

there's a policy:
User Configuration\administrative templates\windows components\internet explorer\browser menus
"File menu: disable closing the browser and explorer windows"

(this setting includes alt+f4)

This will map to some key in the registry in
File Menu: Disable closing the browser and Explorer windows
KEY: HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
DWORD: NoBrowserClose = 1

Someone may have used a tool like ilock, registrytuner, tweakingtoolbox or simmilar.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9786595
By the way, you may want to take a look at this page
http://home.covad.net/~zeiler07/gphome.html

that has the mappings of group policies to registry keys (microsoft is always so helpful with this sort of stuff...)

I hope that one worked
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9787260
Ralonso,

Gave it ago but still didn't fix it.
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9787335
The NoBrowserClose was set to 0?

Does the problem happen if logging in with a freshly created local user account (no existing profile)?

is there any registry activity when attempting to close IE?

have you tried to remove all registry information in
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
and
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer
and then install again IE?

Does the problem happen in outlook express?
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9787471
Answers:
NoBrowserClose was set to 0 and 1 (tried both)
freshly created local user account - still happens
Haven't checked if there was any activity with regmon
Don't use OE but will try tomorrow (hopefully)
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9811498
Newest update.

Ghosted dodgy 2K build to another laptop so I can have more time on this baby!

Problem persists after disableing nearly all services, only left the major ones running.

I am about to create the local user account and test OE.  The user also pointed out that when in a secure site he just gets Done appear with a white screen.  I've seen that before too but never managed to fix that either (updates didn't fix), and I am wondering if its releated.
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9824167
FIXED IT!! WHOOH.

Found the answer on a very hard to find forum.

Deleting the registry key below does the trick:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

I will refund the points and leave this on here as someone may find this easier than what I had to go through.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 9824178
Sounds like a great forum (wouldn't be experts-exchange.com, now would it? :-)
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9824582
I think I found that forum :)

by the way, did you keep a copy of the CLSIDs present in your registry?

It looks like some software (maybe spyware) had a problem and by tracking the CLSID you could find what it actually was

(maybe a spyware removal tool deleted the related keys in CLASSESS_ROOT but left that key there)
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9824677
This was what was there.  Doesn't mean much to me to be honest.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39AF31DD-EAFC-45EA-A56C-385B52E25CC0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4CEBBC6B-5CEE-4644-80CF-38980BAE93F6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B12DABB-0B7C-44FA-B0B3-4BAFF3790256}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BC0D2038-2DE5-4A6F-92BC-B18A3E0DE32A}]

0
 
LVL 5

Expert Comment

by:ralonso
ID: 9830690
The first one is ok (Acrobat reader, you may need to reinstall it)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

But for the rest...
The first one is SnagIT (SnagITBHO.dll)

The following three are from some other spyware (inetspeak)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39AF31DD-EAFC-45EA-A56C-385B52E25CC0}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4CEBBC6B-5CEE-4644-80CF-38980BAE93F6}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B12DABB-0B7C-44FA-B0B3-4BAFF3790256}]

Look at: http://www.safersite.com/PestInfo/I/INetSpeak.asp

And the last one is WurldMedia:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BC0D2038-2DE5-4A6F-92BC-B18A3E0DE32A}] - http://www.safersite.com/PestInfo/w/wurldmedia.asp

-------------------

You will have tons of crap in your machine (registered dll's, registry entries,...) Consider reinstalling it and giving a shout to the user

0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9830725
Cheers for that Ralonso.

How did you get the info?
0
 
LVL 5

Expert Comment

by:ralonso
ID: 9830758
run a search on the CLSIDs in google (i.e. 06849E9F-C8D7-4D59-B87D-784B7D6BE0B3). I'm not very confident on this but I believe that the CLSIDs are unique identifiers, therefore every application will have its own.

you may also find this page interesting:
http://www.spywareinfo.com/bhos/

The pages in safersite.com are quite nice too, they tell you what dll's to unregister and remove, registry files and so on. I believe that you will be able to track the same structure of files/registry for snagIT

cheers
0
 
LVL 15

Author Comment

by:Rob Stone
ID: 9830812
You were right on the Snag-it as that is used here and adobe.

Cheers
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 9842514
PAQed, with points refunded (200)

Computer101
E-E Admin
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now