RE: IE is dead - error shell32.dll

From: Arnold (anonymous_at_discussions.microsoft.com)
Date: 05/27/04


Date: Thu, 27 May 2004 15:26:04 -0700

Please’ post your Hijack This Logs, in any of the following “Expert Forums”
 http://forums.spywareinfo.com/
http://computercops.biz/forums.html
http://boards.cexx.org/
http://www.techsupportforums.com/
http://forums.techguy.org/
http://forums.net-integration.net/index.php
http://www.wilderssecurity.com/forumdisplay.php?f=26
http://forums.tomcoyote.com/index.php?s=ee20672a32e5b13837eb98d5e43b840f&showforum=27

     
     ----- Claudiaoc wrote: -----
     
     Dear helpers,
     
     I was having several different problems with Internet
     Explorer (errors closing the application, running slow,
     uninvited ads,.) and after reading about it, I installed
     and ran a few anti-pest software. After deleting plenty of
     pests, NOW I CANNOT OPEN INTERNET EXPLORER. I have
     followed several leads (thank you for your suggestions)
     with no luck. I am sending the error report, the history
     and list of installed anti-pests files, and the hijack
     log.
     
     I DEEPLY appreciate your help!
     
     Claudia
     
     
     The error report:
     Iexplore has caused an error in Shell32.dll. Iexplore will
     now close. If you continue to experience problems, try
     restarting your computer.
     
     Details:
     AppName: iexplore AppVer: 6.0.2800.1106
     Mod Name: Shell32.dll Mod Ver: 5.50.4134100
     Offset: 00002006
     
     Before IE stopped working: I had installed and run the
     following as part of the pests-cleaning process (My OS is
     Windows ME):
     Spyboy 1.2.: Found plenty of pests, all deleted.
     Pest Patrol: Found plenty of pests (402), all deleted. I
     still have problems when I run it (shortly after it starts
     scanning, a window shows to say: "PestPatrol: an Error has
     occurred in your program. You can close . or ignore." . I
     have ignored it.
     Also, before IE stopped working ,I had run Norton
     Antivirus (professional 2003 + updates), installed a few
     Microsoft windows updates for ME (non critical). I check
     periodically for the critical updates and always installed
     them. I have not installed all ME (non critical). About
     those I installed last, I wrote down KB837009 and
     kb832894. I 're-installed' them because when I checked the
     logs and noticed that it said 'failure' to install - that
     was in April. However after the re-installations, the log
     (history of updates) did not changed.
     Among the non-critical (ME), I remember I installed one
     having to do with NET. I also reinstalled q273017. I also
     wrote down that I checked for 831167 (?) and that q823559
     was running.
     I did not turn the NAV (Norton Anti-virus) before
     installing the updates.
     Also, I went to add/remove programs and uninstalled
     programs were not used anymore such as: SBC used to be my
     prior internet provider (now I use cable), Yahoo and AOL
     which I do not use, software for HP printer I do not use
     any more. NAV was not disabled when I uninstalled the
     applications from add/remove programs.
     Also I installed all pest cleaners with NAV on.
     I have not reinstalled WinME.
     And IE does not open if I Restart in Safe Mode.
     
     PLEASE HELP!
     
     
     Last time my internet explorer was alive, I was visiting a
     page that used real player (version 10)
     
     Then Interner explorer DIE: error in shell32.dll.
     
     This is what I have done to try to solve the problem
     following your advise:
     I tried to run the QUICK CHECK from Aumha but again I can
     open IE.
     Spyboy: I have updated to 1.3, originally installed as
     1.2 . One more pest found, and deleted
     Ad-adware 6.0 181: I have downloaded and installed, it
     found 36 files/keys- All were deleted
     CWShredder: I have downloaded and installed, it Installed
     it and run it today: found nothing.
     Norton Antivirus (professional 2003 + updates): I ran it
     after disabling system restore (Millennium edition).
     However last update definition was 5/19 and I do not have
     the most recent update because again I have no access to
     IE..
     
     Latest news: I am sending this message USING NESCAPE 6.
     BUT IT IS EXPERIENCING PROBLEMS NOW AS WELL. PLEASE HELP!
     
     HijackThis: I have downloaded and installed. I have the
     HijackThis log:
     
     Logfile of HijackThis v1.97.7
     Scan saved at 7:14:39 AM, on 5/25/2004
     Platform: Windows ME (Win9x 4.90.3000)
     MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
     
     Running processes:
     C:\WINDOWS\SYSTEM\KERNEL32.DLL
     C:\WINDOWS\SYSTEM\MSGSRV32.EXE
     C:\WINDOWS\SYSTEM\mmtask.tsk
     C:\WINDOWS\SYSTEM\MPREXE.EXE
     C:\WINDOWS\SYSTEM\MSTASK.EXE
     C:\WINDOWS\SYSTEM\SSDPSRV.EXE
     C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
     C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE
     C:\WINDOWS\EXPLORER.EXE
     C:\WINDOWS\TASKMON.EXE
     C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
     C:\WINDOWS\SYSTEM\SYSTRAY.EXE
     C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
     C:\WINDOWS\SYSTEM\WMIEXE.EXE
     C:\WINDOWS\WSCRIPT.EXE
     C:\WINDOWS\SYSTEM\HPZTSB03.EXE
     C:\WINDOWS\LOADQM.EXE
     C:\WINDOWS\SYSTEM\SPOOL32.EXE
     C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
     C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
     C:\PROGRAM FILES\PESTPATROL\PPCONTROL.EXE
     C:\PROGRAM FILES\PESTPATROL\PPMEMCHECK.EXE
     C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
     C:\PROGRAM FILES\SONY\VAIO ACTION SETUP\VASERV.EXE
     C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE
     C:\WINDOWS\SYSTEM\DDHELP.EXE
     C:\PROGRAM FILES\SUPPORT.COM\CLIENT\BIN\TGCMD.EXE
     C:\WINDOWS\WUAUCLT.EXE
     C:\CLAUDIA OCANA AUSTIIN DEC 2002\COMPUTER
     STUFF\WINZIP\WINZIP32.EXE
     C:\WINDOWS\TEMP\HIJACKTHIS.EXE
     
     R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
     Bar =
     http://rd.yahoo.com/customize/sbcy/defaults/sb/*http://www.
     yahoo.com/search/ie.html
     R1 - HKLM\Software\Microsoft\Internet
     Explorer\Main,Default_Page_URL = http://www.prodigy.net/
     R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
     (Default) =
     http://rd.yahoo.com/customize/sbcy/defaults/su/*http://www.
     yahoo.com
     R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-
     3D5FEC94A183} - (no file)
     N2 - Netscape 6: user_pref
     ("browser.startup.homepage", "http://eltiempo.terra.com.co/
     "); (C:\WINDOWS\Application
     Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
     N2 - Netscape 6: user_pref
     ("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%
     20FILES%5CNETSCAPE%5CNETSCAPE%206%5Csearchplugins%
     5CSBWeb_01.src"); (C:\WINDOWS\Application
     Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
     O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
     784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
     \ACROBAT\ACTIVEX\ACROIEHELPER.OCX
     O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
     FADC6B084872} - C:\Program Files\Norton
     AntiVirus\NavShExt.dll
     O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
     206D7942484F} - C:\temp\Spybot - Search &
     Destroy\SDHelper.dll
     O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
     7859DF00B1D6} - C:\Program Files\Norton
     AntiVirus\NavShExt.dll
     O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
     00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
     O4 - HKLM\..\Run: [ScanRegistry]
     C:\WINDOWS\scanregw.exe /autorun
     O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
     O4 - HKLM\..\Run: [PCHealth]
     C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
     O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
     O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
     powrprof.dll,LoadCurrentPwrScheme
     O4 - HKLM\..\Run: [OmgStartup] C:\Program Files\Common
     Files\Sony Shared\OpenMG\OmgStartup.exe
     O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1
     \ADAPTEC\DIRECTCD\DIRECTCD.EXE
     O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program
     files\support.com\client\lserver\server.vbs
     O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
     C:\WINDOWS\SYSTEM\hpztsb03.exe
     O4 - HKLM\..\Run: [LoadQM] loadqm.exe
     O4 - HKLM\..\Run: [SBC Yahoo! Connection Manager]
     C:\Program Files\SBC Yahoo!\Connection
     Manager\ConnectionManager.exe -Show
     O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\PROGRAM
     FILES\SBC YAHOO!\CONNECTION MANAGER\IP
     INSIGHT\IPMon32.exe"
     O4 - HKLM\..\Run: [C:\Program Files\SBC Yahoo!\Connection
     Manager\ConnectionManager.exe ] SBC Yahoo! Connection
     Manager
     O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common
     Files\Symantec Shared\ccApp.exe"
     O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common
     Files\Symantec Shared\ccRegVfy.exe"
     O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1
     \NORTON~1\ADVTOOLS\ADVCHK.EXE
     O4 - HKLM\..\Run: [NPROTECT] C:\PROGRA~1\NORTON~1
     \ADVTOOLS\NPROTECT.EXE
     O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
     Files\Real\Update_OB\realsched.exe" -osboot
     O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
     files\WinTools\WToolsA.exe
     O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1
     \PESTPA~1\PPControl.exe
     O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1
     \PPMemCheck.exe
     O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
     powrprof.dll,LoadCurrentPwrScheme
     O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
     O4 - HKLM\..\RunServ



Relevant Pages

  • Re: commander toolbar
    ... > immediately after installing the latest security updates, ... > this extra toolbar, i would be most grateful if you would ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Computer cant shut down
    ... That does not clean it up, and neither does installing the patch you should ... You have to clean up the machine.. ... Know that even if you have the normal updates for Norton, ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsupdate)
  • Re: KB889293 causes malfunction of IE? (MS04-040)
    ... > installing, disable anti-virus app and close all application windows. ... > update and not as an Internet Explorer update. ...
    (microsoft.public.security)
  • Re: PC Crashes whilst connected to internet
    ... > Since installing Norton System, ... > disable the Norton Internet Security program. ... Know that even if you have the normal updates for Norton, ...
    (microsoft.public.windowsxp.security_admin)
  • Details on Errors : 0x800C00008 & 0x800C00005
    ... This will affect Internet ... Explorer as it can not make a secure or complete connection with the ... Windows Update site. ... NEVER click Yes to installing ...
    (microsoft.public.windowsupdate)