Explorer.EXE - Entry Point Not Found

"Explorer.EXE - Entry Point Not Found
The procedure entry point BUF_MEM_grow_clean could not be located in the dynamic link library libeay32.dll."

I get this error when booting into my profile in windows.  I don't run any programs.  It just comes up.
This may be related to a corrupted tcpip.sys file that I had deleted from the system32/drivers directory in order to have windows replace it.
MEM-grow-clean.JPG
LVL 4
dlancelotAsked:
Who is Participating?
 
dlancelotConnect With a Mentor Author Commented:
I scanned with spybot 1.52 and found a bunch of junk including smitfraud C, and a few other nasties, we've collectively decided to do a w/r on this one.
0
 
and235100Commented:
Try sfc /scannow from a command prompt:
http://www.updatexp.com/scannow-sfc.html
0
 
and235100Commented:
Alternatively - boot to Safe Mode - and recover the system to an earlier time:
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx
0
Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
and235100Commented:
Of course - if all else fails - run a repair install:
http://www.michaelstevenstech.com/XPrepairinstall.htm
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx

Quick and easy process - you will just need to re-download and install all critical updates from WIndowsUpdate - you won't lose any data - nor have to reinstall any programs.
0
 
Mark BradyPrincipal Data EngineerCommented:
Probably a virus.
Best bet is to do a Destructive Restore. That should help just in case a virus did get in.
elvin
0
 
and235100Commented:
As elvin66 states - this could be a virus.
But, if the rest of Windows is working correctly - then I doubt it.
You can verify with:
HouseCall: http://housecall.trendmicro.com/ (preferably run this scan in Safe Mode)
0
 
dlancelotAuthor Commented:
I would agree that a destructive restore is unnecessarily overkill in this situation.

I have scanned with with NOD32 which I find is far better than anything else I've used thus far (including Norton 2007&260, Mcaffee, trend, panda, kaspersky, AVG, antivir, avast, etc.).

and235100, I will try your suggestions with the client...and get back to you guys
0
 
dlancelotAuthor Commented:
The other thing I noticed is that this error is only on one of the clients profiles...when starting the other profile, it doesn't show up.  And if I log off of one profile and log on to the other, it will still show up on only the one.
0
 
dlancelotAuthor Commented:
R. Proffitt from CNET mentioned:
Read and try http://forums.miranda-im.org/showthread.php?t=8047

So, I'm looking into this one tomorrow as well...will keep everyone posted
0
 
and235100Commented:
If this on;y affects one profile - then the chances are - it isn't a computer issue.
Can you not just backup any required data in the profile, then delete it, and create a new one?
0
 
Mark BradyPrincipal Data EngineerCommented:
Yes and235100 I was going to say the same thing.  It definately won't be a computer problem now that you have told us about the user profile.  Once you create a new User account for this client, you should make it an administrator account then delete the old one and at the option to save or delete files, choose [save].  Once done, simply go take ownership of those folders/files and move them into the new users directory.  Should work very easily.

Elvin
0
 
dlancelotAuthor Commented:
I have created a new user profile and selectively copied over the "mydocuments" and "favorites", and after I put on the screensavers.com background image, the error showed up again, however, when I remove that background image, the error still comes up after I log off and back on again....I have attached a hijack this! log file as I noticed a system tray icon that didn't belong..
hijackthis.log
0
 
Mark BradyPrincipal Data EngineerCommented:
Dlancelot

Okay that hijack log helps.  Firstly, you have way to much happening when you machine boots up.  You need to get rid of all of it (including the systray icon).  To do this, go to regedit [start/run/regedit]

Open the key HKEY_LOCAL_MACHINE
then open as follows....
SOFTWARE
                   Microsoft
                                  Windows
                                                 CurrentVersion
                                                                          Run

In the run key you will see about 9 lines of data entries.  You can safely delete all these entries except this one  //  [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
You can remove this also but it will come back.  It's a windows system file so let it be.  All the rest are programs that are starting up when windows boots and slowing down your systems.
Once you delete all these and reboot, you will notice two things.
1:  It boots faster and performance is faster.
2:  You have less junk in your icon tray (and hopefully the problem is solved now)

Regards
Elvin
0
 
dlancelotAuthor Commented:
9 entries in that section and are as follows:

default --> value not set
dscactivate --> dsca.exe
hotkeyscmds --> hkcmd.exe
igfxhkcmd --> hkcmd.exe
igfxpers --> igfxpers.exe
igfxtray --> igfxtray.exe
iTunesHelper --> iTunesHelper.exe
nod32kui --> nod32kui.exe /waitservice
soundmaxpnp --> soundmax4pnp.exe

doesn't look like there's anything malicious there...
0
 
and235100Commented:
dsca.exe could be harmful:
http://www.prevx.com/filenames/X483279309326372771-0/DSCA.EXE.html
Where is this file located?
If this is a Dell, however, this file could be fine.
0
 
dlancelotAuthor Commented:
it is a Dell PC
0
 
Mark BradyPrincipal Data EngineerCommented:
No nothing malicious looking there but still there are all those programs running and chewing up your resources.  you can safely delete all of those as you do not need anything in this 'Run' key.  If you need to use a program then simply click on it's shortcut or select it from a menu and it will run fine but why have them all running at startup ?  The only thing I have in there is AVG as I like to have my antivirus running all the time.  Something in your list may be causing a conflict and therefore creating your problem.  You won't know unless you try.

If you are worried, backup your registry before you delete the entries.

Elvin
0
All Courses

From novice to tech pro — start learning today.