Explorer.EXE - Entry Point Not Found

"Explorer.EXE - Entry Point Not Found
The procedure entry point BUF_MEM_grow_clean could not be located in the dynamic link library libeay32.dll."

I get this error when booting into my profile in windows.  I don't run any programs.  It just comes up.
This may be related to a corrupted tcpip.sys file that I had deleted from the system32/drivers directory in order to have windows replace it.
MEM-grow-clean.JPG
LVL 4
dlancelotAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

and235100Commented:
Try sfc /scannow from a command prompt:
http://www.updatexp.com/scannow-sfc.html
0
and235100Commented:
Alternatively - boot to Safe Mode - and recover the system to an earlier time:
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx
0
and235100Commented:
Of course - if all else fails - run a repair install:
http://www.michaelstevenstech.com/XPrepairinstall.htm
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx

Quick and easy process - you will just need to re-download and install all critical updates from WIndowsUpdate - you won't lose any data - nor have to reinstall any programs.
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

Mark BradyPrincipal Data EngineerCommented:
Probably a virus.
Best bet is to do a Destructive Restore. That should help just in case a virus did get in.
elvin
0
and235100Commented:
As elvin66 states - this could be a virus.
But, if the rest of Windows is working correctly - then I doubt it.
You can verify with:
HouseCall: http://housecall.trendmicro.com/ (preferably run this scan in Safe Mode)
0
dlancelotAuthor Commented:
I would agree that a destructive restore is unnecessarily overkill in this situation.

I have scanned with with NOD32 which I find is far better than anything else I've used thus far (including Norton 2007&260, Mcaffee, trend, panda, kaspersky, AVG, antivir, avast, etc.).

and235100, I will try your suggestions with the client...and get back to you guys
0
dlancelotAuthor Commented:
The other thing I noticed is that this error is only on one of the clients profiles...when starting the other profile, it doesn't show up.  And if I log off of one profile and log on to the other, it will still show up on only the one.
0
dlancelotAuthor Commented:
R. Proffitt from CNET mentioned:
Read and try http://forums.miranda-im.org/showthread.php?t=8047

So, I'm looking into this one tomorrow as well...will keep everyone posted
0
and235100Commented:
If this on;y affects one profile - then the chances are - it isn't a computer issue.
Can you not just backup any required data in the profile, then delete it, and create a new one?
0
Mark BradyPrincipal Data EngineerCommented:
Yes and235100 I was going to say the same thing.  It definately won't be a computer problem now that you have told us about the user profile.  Once you create a new User account for this client, you should make it an administrator account then delete the old one and at the option to save or delete files, choose [save].  Once done, simply go take ownership of those folders/files and move them into the new users directory.  Should work very easily.

Elvin
0
dlancelotAuthor Commented:
I have created a new user profile and selectively copied over the "mydocuments" and "favorites", and after I put on the screensavers.com background image, the error showed up again, however, when I remove that background image, the error still comes up after I log off and back on again....I have attached a hijack this! log file as I noticed a system tray icon that didn't belong..
hijackthis.log
0
Mark BradyPrincipal Data EngineerCommented:
Dlancelot

Okay that hijack log helps.  Firstly, you have way to much happening when you machine boots up.  You need to get rid of all of it (including the systray icon).  To do this, go to regedit [start/run/regedit]

Open the key HKEY_LOCAL_MACHINE
then open as follows....
SOFTWARE
                   Microsoft
                                  Windows
                                                 CurrentVersion
                                                                          Run

In the run key you will see about 9 lines of data entries.  You can safely delete all these entries except this one  //  [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
You can remove this also but it will come back.  It's a windows system file so let it be.  All the rest are programs that are starting up when windows boots and slowing down your systems.
Once you delete all these and reboot, you will notice two things.
1:  It boots faster and performance is faster.
2:  You have less junk in your icon tray (and hopefully the problem is solved now)

Regards
Elvin
0
dlancelotAuthor Commented:
9 entries in that section and are as follows:

default --> value not set
dscactivate --> dsca.exe
hotkeyscmds --> hkcmd.exe
igfxhkcmd --> hkcmd.exe
igfxpers --> igfxpers.exe
igfxtray --> igfxtray.exe
iTunesHelper --> iTunesHelper.exe
nod32kui --> nod32kui.exe /waitservice
soundmaxpnp --> soundmax4pnp.exe

doesn't look like there's anything malicious there...
0
and235100Commented:
dsca.exe could be harmful:
http://www.prevx.com/filenames/X483279309326372771-0/DSCA.EXE.html
Where is this file located?
If this is a Dell, however, this file could be fine.
0
dlancelotAuthor Commented:
it is a Dell PC
0
Mark BradyPrincipal Data EngineerCommented:
No nothing malicious looking there but still there are all those programs running and chewing up your resources.  you can safely delete all of those as you do not need anything in this 'Run' key.  If you need to use a program then simply click on it's shortcut or select it from a menu and it will run fine but why have them all running at startup ?  The only thing I have in there is AVG as I like to have my antivirus running all the time.  Something in your list may be causing a conflict and therefore creating your problem.  You won't know unless you try.

If you are worried, backup your registry before you delete the entries.

Elvin
0
dlancelotAuthor Commented:
I scanned with spybot 1.52 and found a bunch of junk including smitfraud C, and a few other nasties, we've collectively decided to do a w/r on this one.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.