Solved

iexplore - application error

Posted on 2004-09-06
18
1,831 Views
Last Modified: 2008-01-09
When working with explorer i get frequently the following message:
iexplore-application error"The instruction at 0x77745b8 refrenced memory at 0x02181f20. The memory could not be read. Click OK to terminate the program"
after clicking OK Explorer does not work anymore and I have to re-boot the pc to get normal operation.
Any idea what causes it,please.
0
Comment
Question by:vaustel
  • 10
  • 8
18 Comments
 
LVL 34

Expert Comment

by:sramesh2k
ID: 11993800
A browser extension ma be causing this. First, eliminate spyware from the system:
http://www.winxptutor.com/antispy.htm

Standard response material re Spyware, Adware, BHOs, and other Malware:
http://www.experts-exchange.com/Web/Browser_Issues/Q_20975384.html

Further more, post the HijackThis log here after running all the spyware removers. Someone here (or me) can assist you on that.
0
 
LVL 34

Accepted Solution

by:
sramesh2k earned 250 total points
ID: 11993804
Temporary workaround:

1. Click Start, Run, type Control Inetcpl.cpl.
2. Click the Advanced tab.
3. Under Browsing, click to clear the Enable third-party browser extensions (requires restart) check box.
4. Restart Internet Explorer.
0
 

Author Comment

by:vaustel
ID: 12005442
the HijackThis webpage is currently not available therefore I cannot give it to you now.  Have run Ad-Aware and installed SpywareBlaster, result is the error message does not pop up anymore - but WINDOWS EXPLORER still stops working!!
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12005637
HijackThis available from majorgeeks.com
0
 

Author Comment

by:vaustel
ID: 12005830
Logfile of HijackThis v1.98.2
Scan saved at 20:55:26, on 08/09/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\STGSymbols.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Internet Security\tmproxy.exe
C:\Program Files\Trend Micro\Internet Security\PccPfw.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.exe
C:\Program Files\Telstra\Cable Login\bpcable.exe
C:\Program Files\Telstra\Toolbar\bpumTray.exe
G:\program files\ScreenPrint32 v3\ScreenPrint32.exe
G:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\WINDOWS\system32\CTHELPER.EXE
G:\Program Files\Caere\OmniPagePro10.0\opware32.exe
C:\program files\u-storage tool2.91\ustorage.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Plaxo\2.0.3.16\InstallStub.exe
G:\DOWNLOADS\FREERAM\FreeRAM XP Pro 1.40.exe
C:\Program Files\Trend Micro\Internet Security\pccguide.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\WINDOWS\explorer.exe
G:\DOWNLOADS\highjackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - G:\program files\DAP\DAPBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipAlbum Pro\FpLaunch.dll
O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O2 - BHO: PrintMe - {97387E2B-B2FA-4E4A-A607-F3B5C134F71C} - C:\Program Files\EFI\PrintMeToolbar\htpmcap.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - G:\program files\DAP\DAPIEBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: PrintMe - {97387E2B-B2FA-4E4A-A607-F3B5C134F71C} - C:\Program Files\EFI\PrintMeToolbar\htpmcap.dll
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [BigPondCable] "C:\Program Files\Telstra\Cable Login\bpcable.exe" /r
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O4 - HKLM\..\Run: [ScreenPrint32] G:\program files\ScreenPrint32 v3\ScreenPrint32.exe -startup
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DownloadAccelerator] G:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [OmniPage] G:\Program Files\Caere\OmniPagePro10.0\opware32.exe
O4 - HKLM\..\Run: [UStorag] c:\program files\u-storage tool2.91\ustorage.exe sys_auto_run C:\Program Files\U-Storage Tool2.91
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.0.3.16\InstallStub.exe -a
O4 - HKCU\..\Run: [FreeRAM XP] "G:\DOWNLOADS\FREERAM\FreeRAM XP Pro 1.40.exe" -win
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O8 - Extra context menu item: &Download with &DAP - G:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Download &all with DAP - G:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - G:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - https://www.plaxo.com/down/release/PlaxoInstall.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=2f3013f10d81e286156882fc0b98d97c32f6943bb4275ec39645325ab1afb435c44e77e63db2d3fb7cc8afcc70873d9cb3ae926d:158854fc4a27381a6ed667336045adce
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/220dd051bebfc74f6705/netzip/RdxIE601_de.cab

Here is the HighjackThis log file. I got it from the location you mentioned, thanks
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12006475
Acquire ToolbarCop from my site and *disable* these BHOs.

O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - G:\program files\DAP\DAPBHO.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipAlbum Pro\FpLaunch.dll
O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

Toolbarcop download: http://www.mvps.org/sramesh2k/toolbarcop.htm

Delete this BHO below:
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

Note that you can enable the BHOs later once you determine which one is causing the problem.
0
 

Author Comment

by:vaustel
ID: 12012883
Looks like your advice has done the trick!!  I have disabled all 6 BHO's and so far WINDOWS EXPLORER and INTERNET EXPLORER are working fine.  I will now start to lokate the one causing the problem and wil let you know.  It may take a few days but I thought I give you the good news first!
Best regards.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12012939
All the Best!
0
 

Author Comment

by:vaustel
ID: 12033682
It appears the problem is still there.  I noticed that each time I have been in the Internet and returned to "normal" pc activities I cannot open WINDOWS EXPLORER and/or MY COMPUTER. I still have all BHO's neutralised as per your recommendation.  Nothing else has changed in my system - no new programs installed.  The only thing that happened is that my INTERNET SERVICE PROVIDER (TELSTRA BIGPOND BROADBAND) has modified my E-mail account profile.  Can you help ,please?
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Author Comment

by:vaustel
ID: 12033691
In the TOOLBARCOP I noticed that one toolbarbutton (Microsoft Activesync) is doubbled.  Is this important?
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12033886
duplicate Microsoft Activesync button is non-fatal and can be ignored safely.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12033890
BTW, do you still get this error while opening Windows Explorer or IE?
0
 

Author Comment

by:vaustel
ID: 12037067
I take it the question starting with BTW is not directed to vaustel?
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12037085
Sorry, it was directed to vaustel.
0
 

Author Comment

by:vaustel
ID: 12051068
I'm a bit at a loss here.  Who or what is BTW? Did you want to direct the question to me or are you addressing a person called BTW and erroneously directed the question to me. Please let me konow.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12051096
BTW implies By the way. <chat>
0
 

Author Comment

by:vaustel
ID: 12052815
When I boot up the pc I normally check my mail with MICROSOFT OUTLOOK.  On this occasion I used the link in the e-mail from experts-exchange and read your note on BTW - thank you very much.  I than minimized the Internet and tried WINDOWS EXPLORER.  WINDOWS EXPLORER opened once without problem but thereafter no more.  Same applies for MY COMPUTER.  I will now have to re-boot first if I want to re-activate WINDOWS EXPLORER. I have no idea what causes it.
0
 
LVL 34

Expert Comment

by:sramesh2k
ID: 12053103
vaustel:

No idea why this problem is intermittent. You may perhaps wait for someone here to solve this problem, or request for refund of points from the Community Forum.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now