Re: IE App Hang post XP SP2

From: PA Bear (PABear_at_mvps.org)
Date: 09/05/04 

Date: Sun, 5 Sep 2004 01:36:23 -0400

1. Upgrading in hopes of fixing an ongoing problem is seldom a wise idea.
Do so usually only makes solving the problem that much more difficult.

2. Windows Update now should be offering you Microsoft .Net Framework v1.1.
Contrary to the above, this *may* fix your problem.

3. Disconnected from the 'net, uninstall your current anti-virus
application. If you machine came with another AV app's trial version
pre-installed and you didn't unintall it before installing your present one,
also uninstall it. Carefully use a Registry cleaner like Easy Cleaner to
remove all traces of these AV apps (only!) from your Registry. Reboot and,
still disconnected, reinstall your newest AV app.

4. Your problem may be spyware-related. Ad-aware alone is not enough.

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
     http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow all Removal steps.

If this scan finds anything, create a new Restore Point then Disk Cleanup >
More options > Delete all but the most recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957 

-- 
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP
Are You Ready for WinXP SP2?
http://www.microsoft.com/athome/security/protect/default.aspx
WinXP SP2 Release Notes
http://support.microsoft.com/default.aspx?scid=kb;en-us;835935
AumHa Forums
http://forum.aumha.org
Shred wrote:
> I've been seeing this same error even before I upgrade to
> XP Pro service pack 2. I was hoping the service pack would
> fix the browser.
>
> Tried these without success, let me know if you find the
> culprit.
>
> - sfc /scannow
> - winsock32 diags
> - adaware (my system is still clean as usual)
>
> One clue:  I noticed that the system infomation program
> shows that I am missing two files (iecont.dll and
> iecontle.dll).  I think these could be causing the problem
> but I'm not sure how to find them.
>
> Do you have them?
>
> Seems like more and more are posting to this thread...
>
> Thanks,
>
> Shred
>
>
>
>
>> -----Original Message-----
>> Ever since installing Windows XP SP2 I'm getting frequent IE App Hangs. I
>> will be surfing along and it will just stall. I have to kill IE. It 
>> happens
>> at least a dozen times a day. I've seen this on 2 different machines.
>>
>> Event logs only show:
>>
>> Event Type: Error
>> Event Source: Application Hang
>> Event Category: (101)
>> Event ID: 1002
>> Date: 9/2/2004
>> Time: 1:23:38 PM
>> User: N/A
>> Computer: JJM1
>> Description:
>> Hanging application iexplore.exe, version 6.0.2900.2180, hang module
>> hungapp, version 0.0.0.0, hang address 0x00000000.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 41 70 70 6c 69 63 61 74   Applicat
>> 0008: 69 6f 6e 20 48 61 6e 67   ion Hang
>> 0010: 20 20 69 65 78 70 6c 6f     iexplo
>> 0018: 72 65 2e 65 78 65 20 36   re.exe 6
>> 0020: 2e 30 2e 32 39 30 30 2e   .0.2900.
>> 0028: 32 31 38 30 20 69 6e 20   2180 in
>> 0030: 68 75 6e 67 61 70 70 20   hungapp
>> 0038: 30 2e 30 2e 30 2e 30 20   0.0.0.0
>> 0040: 61 74 20 6f 66 66 73 65   at offse
>> 0048: 74 20 30 30 30 30 30 30   t 000000
>> 0050: 30 30                     00
>>
>>
>> Anyone else seeing this? I'm losing my mind and I don't have that much
>> left. :)
>> .

Relevant Pages