?
Solved

IE6 DLLs gone wild

Posted on 2006-06-06
19
Medium Priority
?
467 Views
Last Modified: 2012-06-21
Dear Experts,

I have what seems to be a nastier version of Musky29's problem (http://www.experts-exchange.com/Q_21422223.html) - some 3rd party installation has knocked my DLLs out of whack.  I am using Win2k, Office XP Pro and IE6, and I keep Windows Update right up to the minute.

My symptoms are:
* Internet Explorer gives me runtime errors saying "Error in loading DLL" on any page with any sort of script on it
* MS Word repeatedly says "The Visual Basic environment could not be initialized"
* The Windows Update website will not load because of the DLL error (presumably preventing it from loading the ActiveX stuff)
* Add/Remove programs either will not open at all or will give an error while opening and show only the tabs on the left, with nothing on the right
* No programs with embedded HTML browsers will work, like iTunes or PHPEdit.

Here's what I've tried and what's happened:
* Office 'Detect and Repair' results in lots of "Error 1911: Setup cannot register type library for file..."
* SFC /scannow determines that some of my files need restoring, goes through the motions with no errors, but has no effect
* Installing VB6 runtime SP6 ran into the error "Error registering the OCX C:\WINNT\system32\OLEAUT32.DLL"
* Running this backdoor IE repair (rundll32 setupwbv.dll,IE6Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g "C:\WINDOWS\IE Uninstall Log.Txt") fails because it is unable to register a long list of DLLs

I will be eternally grateful to anyone who can offer helpful suggestions.  Thanks in advance,
Luke
0
Comment
Question by:lukehendricks
  • 11
  • 8
19 Comments
 
LVL 7

Expert Comment

by:Chatable
ID: 16846106
First of all it's a good idea to check whether there's a malware still installed that keeps f-ing up your files.
Install and scan your system using one of the following tools -
Lavasoft Ad-Aware SE - http://www.lavasoft.de/
Microsoft Windows Defender - http://www.microsoft.com/athome/security/spyware/software/default.mspx
Webroot SpySweeper - http://www.spysweeper.com/
SpyBot S&D - http://www.safer-networking.org/
Then run sfc /scannow again to restore your files.
If you don't have SP4 and/or the update rollup installed yet, it's time to install them.
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/default.mspx
http://www.microsoft.com/downloads/details.aspx?familyid=B54730CF-8850-4531-B52B-BF28B324C662&displaylang=en
For every DLL file that has a problem:
- Check that the file actually exists. If it doesn't, copy it from your Windows CD.
- Run regsvr32.exe [dll-filename]
0
 

Author Comment

by:lukehendricks
ID: 16851385
Thanks for the response!  

I am well-protected with AVG, Spybot and Windows Defender.

I was on SP4 and fully updated with Windows Update BUT I am trying that suggestion first - reinstalling SP4 and that update rollup, since sfc /scannow might have downgraded some DLLs.  Also your suggestion of manually copying and registering problem DLLs sounds very promising.  I'll report back on how it goes - thanks again!
0
 

Author Comment

by:lukehendricks
ID: 16851944
Well they were definitely good suggestions, but I'm still stuck.

The SP4 install went through with no complaints, but didn't fix the problems.  I ran that IE repair again because it gives a nice list of the files it couldn't register.  It says the exact same thing for all of them;
An error occurred calling "DllRegisterServer" in "C:\WINNT\system32\browseui.dll". (HRESULT = 80029c4a)
" shdocvw.dll " <-- ditto marks
" browsewm.dll "
" mshtml.dll "
" plugin.ocx "
" asctrls.ocx "
" mshtmled.dll "
" dxtrans.dll "
" dxtmsft.dll "
" iepeers.dll "
" tdc.ocx "

So I copied all those files over from a healthy machine running Win2k SP4, IE6, all updates... in most cases I was overwriting files with the exact same datestamps.  As I go down the list trying to register these files with regsvr32, I get a similar result;
DllRegisterServer in [any.dll] failed.  Return code was 0x80029c4a

Darn.  Anything else anyone can suggest?
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 

Author Comment

by:lukehendricks
ID: 16852055
P.S.  I just looked up that error code in case it was something useful, but it's not.  It means "Error loading type library/DLL."
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16856734
Well it looks like your registry is corrupted.
First of all fixing this is not going to be easy. Next, you can try downloading RegMon:
http://www.sysinternals.com/Utilities/Regmon.html
It's a little freeware tool that logs all access to the registry. You can try running it and filtering *regsvr32*
Then try running: regsvr32.exe browseui.dll (in your system32 directory of course).
It should log the entire operation and maybe you'll find out where it fails and why.
P.S. - When using regmon, for your own sake I hope you're not a newbie :)
0
 

Author Comment

by:lukehendricks
ID: 16860732
Youch.  On any other machine that would be bad enough to scrap everything and start over.

This RegMon is a cool tool - thanks for introducing it to me.  I'm no newbie but I haven't tried manually un-corrupting a registry before.  I filtered on regsvr32, and also filtered out the successes.  Here is the log of the errors; http://lukehendricks.com/Regmon.log  (it is rather long for posting here).  So all but one of the errors were "NOT FOUND" - can I look at a healthy machine's registry and just manually create the missing keys?

Continuing to thank you for your knowledge & helpfulness...
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16864196
It's very normal that there will be errors. In normal systems there are usually serveral registry access errors (usually not found) every second.
The catch is finding those which are not normal.
I'd really like to see the entire log of regmon - not just the errors.

P.S. - Unrelated to this issue, at the same website there's also a tool called filemon. You can guess what it does.
0
 

Author Comment

by:lukehendricks
ID: 16864249
Yeah I see all sorts of cool "mons" on there.  I can't wait to try them when my computer is working again!

Here is a log filtered on just regsvr32; http://lukehendricks.com/Regmon_full.log
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16864718
Is this the output of regsvr32 browseui.dll or another dll?
0
 

Author Comment

by:lukehendricks
ID: 16869624
Ah, sorry, I believe that was for mshtml.dll.  Here is the one for browseui.dll; http://lukehendricks.com/Regmon_browseui.log
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16870922
Well, I can't find a registry problem (damn).
I'm quite running out of ideas... try sending me a filemon log. Maybe I'll find something there.
0
 

Author Comment

by:lukehendricks
ID: 16871518
http://lukehendricks.com/Filemon.log

Nothing jumps out at me there either.  Hmmm!

Any suggestions on a sneaky way to uninstall & reinstall IE without being able to access Add/Remove Programs?

Well your persistence is admirable!
0
 

Author Comment

by:lukehendricks
ID: 16914373
Well Chatable I really appreciate all the effort and expertise!  I am still hung up though!  Nothing will install because installers are unable to register their type libraries, ocx's, dll's...  IE is unusable and so is MS Office.

Should I try replacing regsvr32.exe and its dependencies?  Is there some way to get more info on where the registration is failing?
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16925998
First, sorry for my extremely late response.
Now, are you using an IBM machine and a driver called "IBM Rapid Access Keyboard driver"?
For some reason it seems to be related...
0
 

Author Comment

by:lukehendricks
ID: 16933498
Wow!  You nailed that one.  It is a dell machine, but yes I am using that fancy IBM keyboard and its driver.  I am disabling its startup registry entry now and rebooting...
0
 

Author Comment

by:lukehendricks
ID: 16941663
That didn't seem to change anything.  The keyboard extension isn't running now - I uploaded another filemon log - http://lukehendricks.com/Filemon_no_keyboard.LOG
0
 
LVL 7

Accepted Solution

by:
Chatable earned 2000 total points
ID: 16946591
Actually the only reason I've asked you this is because there's also a virus using that file name.
Allright, I have two more suggestions -
1) I also noticed that you have Google Desktop installed. I've already had some problems with it (though nothing similiar to this one... but still). Maybe it's worth to try without it.
2) Check your system32 folder for files with the extension .tlb - especially these:
stdole2.tlb
stdole32.tlb
mshtml.tlb
msdatsrc.tlb
Try copying them again from the Windows CD (backup first!) and try again.
Also try rebooting, I don't know whether changes to these files take effect immediately.
0
 

Author Comment

by:lukehendricks
ID: 16950455
Chatable, you have saved me!

I uninstalled Google Desktop, and also Google Sketchup, which I added a lot more recently.  I also applied the windows update that arrived yesterday.  Upon rebooting - everything seeems to be healed!

If only I had more points to give you.  I am in your debt - thank you so much!
0
 
LVL 7

Expert Comment

by:Chatable
ID: 16957421
Another reason not to install google desktop enters the list ;)
If there are any more problems, don't hesitate to write.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In the below post we have mentioned the best hosting type for startups. Also, check out some of the superlative web hosting companies that are proposing affordable web hosting solutions to host your startup website.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses
Course of the Month14 days, 14 hours left to enroll

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question