A Windows 98 & ME forum. Win98banter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » Win98banter forum » Windows 98 » Software & Applications
Site Map Home Authors List Search Today's Posts Mark Forums Read Web Partners

Explorer caused an invalid page fault



 
 
Thread Tools Display Modes
  #1  
Old May 29th 04, 11:45 PM
Glenn
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000: 07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.
  #2  
Old May 30th 04, 01:06 AM
glee
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

Have a look here for possibilities:
http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-system virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it, click its 'Check for
Updates' link in the app to install updates, then use it to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in message
...
When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000: 07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.


  #3  
Old May 30th 04, 07:21 PM
Glenn
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.), but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having problems
with Internet Explorer. Do the symptoms I describe match
your advice, or did I imply the problem was with Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:
http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-system

virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it,

click its 'Check for
Updates' link in the app to install updates, then use it

to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan

your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these

locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp

folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will

change into a "Save Log"
button.
Press that, save the log somewhere you can find it

(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required,

so do NOT fix anything yet.

Copy the log files and paste them into a new post at one

of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked

on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000:

07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.


.

  #4  
Old May 30th 04, 10:07 PM
glee
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

IE and its support files are integrated into the Windows shell (explorer.exe) to
such a point that problems with the Windows shell are most often fixed by repairing
or reinstalling IE. Likewise many of the current shell errors are being traced back
to spyware that installs through Internet Explorer.

You may have better luck running Ad-Aware and SpyBot from Safe Mode, where other
processes are not loaded. I would run Ad-aware, remove what it finds, reboot, and
run it again at least once or twice more; then run SpyBot the same way.

Be sure that you download the latest updates for them first.

After that, run Hijack This per the instruction sand tutorial, and post the logs in
an appropriate forum, with a copy here, please.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in message
...
Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.), but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having problems
with Internet Explorer. Do the symptoms I describe match
your advice, or did I imply the problem was with Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:
http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-system

virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it,

click its 'Check for
Updates' link in the app to install updates, then use it

to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan

your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these

locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp

folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will

change into a "Save Log"
button.
Press that, save the log somewhere you can find it

(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required,

so do NOT fix anything yet.

Copy the log files and paste them into a new post at one

of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked

on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000:

07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.


.


  #5  
Old June 3rd 04, 04:25 AM
Glenn
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

I followed your instructions and have the following to
report:

1. The problem does not occur in "Safe Mode."

2. I ran Spybot, Adware, and Norton Ant-Virus, removing
any files found (I did each of these twice, once in Safe
mode).

3. When I ran Spybot, I got an error message "Bad
Checksum" when trying to download updates.

4. After I ran Spybot, I got a message "Error during
check" (Winpup32).

5. I could not download "CoolWebShredder" or run "Hijack
This." In both cases I got the error
message "required .DLL file not found MSVBVM60.DLL was
not found."

Does this information gives you some ideas on what I
should try next?

Thanks,

Glenn

-----Original Message-----
IE and its support files are integrated into the Windows

shell (explorer.exe) to
such a point that problems with the Windows shell are

most often fixed by repairing
or reinstalling IE. Likewise many of the current shell

errors are being traced back
to spyware that installs through Internet Explorer.

You may have better luck running Ad-Aware and SpyBot

from Safe Mode, where other
processes are not loaded. I would run Ad-aware, remove

what it finds, reboot, and
run it again at least once or twice more; then run

SpyBot the same way.

Be sure that you download the latest updates for them

first.

After that, run Hijack This per the instruction sand

tutorial, and post the logs in
an appropriate forum, with a copy here, please.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.),

but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having problems
with Internet Explorer. Do the symptoms I describe

match
your advice, or did I imply the problem was with

Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:
http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-system

virus scan.

Use CWShredder, the CoolWeb removal tool, available

he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start

it,
click its 'Check for
Updates' link in the app to install updates, then use

it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan

your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?

page=download

Download, unzip, and run Hijack This from one of these

locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html


http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp

folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will

change into a "Save Log"
button.
Press that, save the log somewhere you can find it

(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even

required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at

one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
When trying to open up folders on my desktop, I get

a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I

clicked
on
the "details" button the error says "Explorer

caused an
invalid page fault in module unknown 0000:

07c07fc6e."
This is followed by a series of numbers & letters

under
the headings "register" and "stack dump." Please

advise
on how to correct; I tried using Windows

configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.

.


.

  #6  
Old June 3rd 04, 12:15 PM
glee
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

3. Try downloading updates from a different server (there is a dropdown box to
choose one). The European server often has trouble.

4. Winpup32: Adware/spyware
Follow the manual removal instructions he
http://www.kephyr.com/spywarescanner...32/index.phtml

5. The answer is on this page:
http://www.javacoolsoftware.com/downloadfaq.html
Download and install the Visual Basic 6 Run-time libraries from the link there.

Please run Hijack This per the instructions I gave....do not "fix" anything with it
yet; post the log file.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in message
...
I followed your instructions and have the following to
report:

1. The problem does not occur in "Safe Mode."

2. I ran Spybot, Adware, and Norton Ant-Virus, removing
any files found (I did each of these twice, once in Safe
mode).

3. When I ran Spybot, I got an error message "Bad
Checksum" when trying to download updates.

4. After I ran Spybot, I got a message "Error during
check" (Winpup32).

5. I could not download "CoolWebShredder" or run "Hijack
This." In both cases I got the error
message "required .DLL file not found MSVBVM60.DLL was
not found."

Does this information gives you some ideas on what I
should try next?

Thanks,

Glenn

-----Original Message-----
IE and its support files are integrated into the Windows

shell (explorer.exe) to
such a point that problems with the Windows shell are

most often fixed by repairing
or reinstalling IE. Likewise many of the current shell

errors are being traced back
to spyware that installs through Internet Explorer.

You may have better luck running Ad-Aware and SpyBot

from Safe Mode, where other
processes are not loaded. I would run Ad-aware, remove

what it finds, reboot, and
run it again at least once or twice more; then run

SpyBot the same way.

Be sure that you download the latest updates for them

first.

After that, run Hijack This per the instruction sand

tutorial, and post the logs in
an appropriate forum, with a copy here, please.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.),

but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having problems
with Internet Explorer. Do the symptoms I describe

match
your advice, or did I imply the problem was with

Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:
http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-system
virus scan.

Use CWShredder, the CoolWeb removal tool, available

he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start

it,
click its 'Check for
Updates' link in the app to install updates, then use

it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan
your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?

page=download

Download, unzip, and run Hijack This from one of these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html

http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even

required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at

one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in
message
...
When trying to open up folders on my desktop, I get

a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I

clicked
on
the "details" button the error says "Explorer

caused an
invalid page fault in module unknown 0000:
07c07fc6e."
This is followed by a series of numbers & letters

under
the headings "register" and "stack dump." Please

advise
on how to correct; I tried using Windows

configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.

.


.


  #7  
Old June 8th 04, 01:07 AM
Glenn
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

Thanks. I did all of your suggestions, and still have the
problem. I posted the "hijack" log on the "forums.net-
integration.net' but have not had a reply yet. Below is
the log. Any ideas? Also, can I just uninstall and
reinstall Internet Explorer?

Logfile of HijackThis v1.97.7
Scan saved at 3:15:57 PM, on 6/5/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Page =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=search&LC=0409
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://www.netscape.com/
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://desktop.presario.net/scripts/...rs/presario/de
skredir.dll?c=2c00&s=consumer&LC=0409
R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window
Title = Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-
3B75BF7554D7} - (no file)
N1 - Netscape 4: user_pref
("browser.startup.homepage", "www.rr.com"); (C:\Program
)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - c:\Program Files\Norton
AntiVirus\NavShExt.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: Popup Blocker Pro - {A44B961C-8C36-470f-8555-
EDA0EFC1E710} - C:\PROGRAM FILES\SAFEGUARD POP-UP BLOCKER
PRO FREE EDITION\POPUPBLOCKER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\Program Files\Spybot - Search &
Destroy\SDHelper.dll
O2 - BHO: Core Library - {D4D505DF-D582-400c-91B6-
84921012AFE3} - C:\WINDOWS\SYSTEM\PDF7E67.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
7859DF00B1D6} - c:\Program Files\Norton
AntiVirus\NavShExt.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P
NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Popup Defence Updater] regsvr32 /s
C:\WINDOWS\SYSTEM\PDFUPD.DLL
O4 - HKLM\..\Run: [CriticalUpdate]
c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program
files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common
Files\Symantec Shared\CfgWiz.exe /GUID
NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program
Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common
Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ScanRegistry]
c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program
Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy
Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [Service Connection]
c:\cpqs\bwtools\sccenter.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program
Files\Compaq\Digital Dashboard\DevGulp.exe
O4 - HKLM\..\Run: [SafeGuard Popup Updater (required)]
regsvr32 /s C:\WINDOWS\SYSTEM\PDF7E67.DLL
O4 - HKLM\..\Run: [NPROTECT] c:\Program Files\Norton
SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\Run: [AcctMgr] c:\Program Files\Norton
SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [CreateCD] C:\PROGRA~1\ADAPTEC\EASYCD~1
\CREATECD\CREATECD.EXE -r
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program
Files\Common Files\Symantec Shared\Script
Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program
Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program
Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks]
c:\Program Files\Common Files\Symantec
Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [NPROTECT] c:\Program
Files\Norton SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\RunServices: [CSINJECT.EXE] c:\Program
Files\Norton SystemWorks\Norton CleanSweep\csinject.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft
Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MSMSGS] C:\Program
Files\Messenger\msmsgs.exe /background
O4 - HKCU\..\Run: [AIM] C:\PROGRAM
FILES\NETSCAPE\COMMUNICATOR\PROGRAM\AIM\aim.exe -
cnetwait.odl
O4 - Startup: WinZip Quick Pick.lnk = C:\Program
Files\WinZip\WZQKPICK.EXE
O4 - Startup: Microsoft Find Fast.lnk = C:\Program
Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program
Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk =
C:\Program Files\Norton SystemWorks\Norton
CleanSweep\csinsm32.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this
URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this
&Host (HKLM)
O9 - Extra 'Tools' menuitem: AV Home (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.co.../ansi/iuctl.CA
B?38098.6186689815
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P
Installer) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/s...cabs/flash/swf
lash.cab

-----Original Message-----
3. Try downloading updates from a different server

(there is a dropdown box to
choose one). The European server often has trouble.

4. Winpup32: Adware/spyware
Follow the manual removal instructions he
http://www.kephyr.com/spywarescanner.../winpup.winpup

32/index.phtml

5. The answer is on this page:
http://www.javacoolsoftware.com/downloadfaq.html
Download and install the Visual Basic 6 Run-time

libraries from the link there.

Please run Hijack This per the instructions I gave....do

not "fix" anything with it
yet; post the log file.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
I followed your instructions and have the following to
report:

1. The problem does not occur in "Safe Mode."

2. I ran Spybot, Adware, and Norton Ant-Virus, removing
any files found (I did each of these twice, once in Safe
mode).

3. When I ran Spybot, I got an error message "Bad
Checksum" when trying to download updates.

4. After I ran Spybot, I got a message "Error during
check" (Winpup32).

5. I could not download "CoolWebShredder" or run "Hijack
This." In both cases I got the error
message "required .DLL file not found MSVBVM60.DLL was
not found."

Does this information gives you some ideas on what I
should try next?

Thanks,

Glenn

-----Original Message-----
IE and its support files are integrated into the

Windows
shell (explorer.exe) to
such a point that problems with the Windows shell are

most often fixed by repairing
or reinstalling IE. Likewise many of the current shell

errors are being traced back
to spyware that installs through Internet Explorer.

You may have better luck running Ad-Aware and SpyBot

from Safe Mode, where other
processes are not loaded. I would run Ad-aware, remove

what it finds, reboot, and
run it again at least once or twice more; then run

SpyBot the same way.

Be sure that you download the latest updates for them

first.

After that, run Hijack This per the instruction sand

tutorial, and post the logs in
an appropriate forum, with a copy here, please.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.),

but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed

the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having

problems
with Internet Explorer. Do the symptoms I describe

match
your advice, or did I imply the problem was with

Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:

http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-

system
virus scan.

Use CWShredder, the CoolWeb removal tool, available

he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start

it,
click its 'Check for
Updates' link in the app to install updates, then

use
it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy,

scan
your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?

page=download

Download, unzip, and run Hijack This from one of

these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html


http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the

Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even

required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at

one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote

in
message
...
When trying to open up folders on my desktop, I

get
a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I

clicked
on
the "details" button the error says "Explorer

caused an
invalid page fault in module unknown 0000:
07c07fc6e."
This is followed by a series of numbers & letters

under
the headings "register" and "stack dump." Please

advise
on how to correct; I tried using Windows

configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.

.


.


.

  #8  
Old June 8th 04, 04:56 AM
glee
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

Well, you have a few pieces of malware aboard.

Go to Control Panel Add\Remove Programs, and uninstall these if they appear the
- SAFEGUARD POP-UP BLOCKER PRO FREE EDITION
- MyWay, MySearch, MyBar, or MyWay Speed Bar

Scan again with Hijack This, and put a check in the boxes next to these items if
they are still in the list:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Page =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=search&LC=0409

R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://desktop.presario.net/scripts/...rs/presario/de
skredir.dll?c=2c00&s=consumer&LC=0409

R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409

R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-
3B75BF7554D7} - (no file)

O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL

O2 - BHO: Popup Blocker Pro - {A44B961C-8C36-470f-8555-
EDA0EFC1E710} - C:\PROGRAM FILES\SAFEGUARD POP-UP BLOCKER
PRO FREE EDITION\POPUPBLOCKER.DLL

O2 - BHO: Core Library - {D4D505DF-D582-400c-91B6-
84921012AFE3} - C:\WINDOWS\SYSTEM\PDF7E67.DLL

O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL

O4 - HKLM\..\Run: [Popup Defence Updater] regsvr32 /s
C:\WINDOWS\SYSTEM\PDFUPD.DLL

O4 - HKLM\..\Run: [SafeGuard Popup Updater (required)]
regsvr32 /s C:\WINDOWS\SYSTEM\PDF7E67.DLL

O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft
Money\System\Money Express.exe"

Make sure they are all check-marked, close all browsers and windows except Hijack
This, and click the Fix button.

Reboot, open Windows Explorer, and delete these:
the folder: C:\Program Files\MyWay
the folder: C:\Program Files\SafeGuard Pop-Up Blocker Pro Free Edition
the files PDF7E67.DLL and PDFUPD.DLL, in the C:\Windows\System folder

Then click Start Settings Control Panel Internet Options Programs tab 'Reset
web settings button', and click OK.


I would also "fix" these after first trying to uninstall through Add\Remove
Programs, if found the

O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P
NETWORKING\P2P NETWORKING.EXE /AUTOSTART

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P
Installer) -

but you should read this first and decide for yourself:
http://www.kephyr.com/spywarescanner...ng/index.phtml

Or, you may wait for a reply from net-integration forums and see if they have
anything to add.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in message
...
Thanks. I did all of your suggestions, and still have the
problem. I posted the "hijack" log on the "forums.net-
integration.net' but have not had a reply yet. Below is
the log. Any ideas? Also, can I just uninstall and
reinstall Internet Explorer?

Logfile of HijackThis v1.97.7
Scan saved at 3:15:57 PM, on 6/5/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search
Page =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=search&LC=0409
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start
Page = http://www.netscape.com/
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://desktop.presario.net/scripts/...rs/presario/de
skredir.dll?c=2c00&s=consumer&LC=0409
R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://search.presario.net/scripts/r...s/presario/src
hredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window
Title = Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-
3B75BF7554D7} - (no file)
N1 - Netscape 4: user_pref
("browser.startup.homepage", "www.rr.com"); (C:\Program
)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - c:\Program Files\Norton
AntiVirus\NavShExt.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: Popup Blocker Pro - {A44B961C-8C36-470f-8555-
EDA0EFC1E710} - C:\PROGRAM FILES\SAFEGUARD POP-UP BLOCKER
PRO FREE EDITION\POPUPBLOCKER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\Program Files\Spybot - Search &
Destroy\SDHelper.dll
O2 - BHO: Core Library - {D4D505DF-D582-400c-91B6-
84921012AFE3} - C:\WINDOWS\SYSTEM\PDF7E67.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
7859DF00B1D6} - c:\Program Files\Norton
AntiVirus\NavShExt.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-
14154ECE70AC} - C:\PROGRAM
FILES\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P
NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Popup Defence Updater] regsvr32 /s
C:\WINDOWS\SYSTEM\PDFUPD.DLL
O4 - HKLM\..\Run: [CriticalUpdate]
c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program
files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common
Files\Symantec Shared\CfgWiz.exe /GUID
NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program
Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common
Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ScanRegistry]
c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program
Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy
Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [Service Connection]
c:\cpqs\bwtools\sccenter.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program
Files\Compaq\Digital Dashboard\DevGulp.exe
O4 - HKLM\..\Run: [SafeGuard Popup Updater (required)]
regsvr32 /s C:\WINDOWS\SYSTEM\PDF7E67.DLL
O4 - HKLM\..\Run: [NPROTECT] c:\Program Files\Norton
SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\Run: [AcctMgr] c:\Program Files\Norton
SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [CreateCD] C:\PROGRA~1\ADAPTEC\EASYCD~1
\CREATECD\CREATECD.EXE -r
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program
Files\Common Files\Symantec Shared\Script
Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program
Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program
Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks]
c:\Program Files\Common Files\Symantec
Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [NPROTECT] c:\Program
Files\Norton SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\RunServices: [CSINJECT.EXE] c:\Program
Files\Norton SystemWorks\Norton CleanSweep\csinject.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft
Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MSMSGS] C:\Program
Files\Messenger\msmsgs.exe /background
O4 - HKCU\..\Run: [AIM] C:\PROGRAM
FILES\NETSCAPE\COMMUNICATOR\PROGRAM\AIM\aim.exe -
cnetwait.odl
O4 - Startup: WinZip Quick Pick.lnk = C:\Program
Files\WinZip\WZQKPICK.EXE
O4 - Startup: Microsoft Find Fast.lnk = C:\Program
Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Office Startup.lnk = C:\Program
Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk =
C:\Program Files\Norton SystemWorks\Norton
CleanSweep\csinsm32.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this
URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this
&Host (HKLM)
O9 - Extra 'Tools' menuitem: AV Home (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.co.../ansi/iuctl.CA
B?38098.6186689815
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P
Installer) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/s...cabs/flash/swf
lash.cab

-----Original Message-----
3. Try downloading updates from a different server

(there is a dropdown box to
choose one). The European server often has trouble.

4. Winpup32: Adware/spyware
Follow the manual removal instructions he
http://www.kephyr.com/spywarescanner.../winpup.winpup

32/index.phtml

5. The answer is on this page:
http://www.javacoolsoftware.com/downloadfaq.html
Download and install the Visual Basic 6 Run-time

libraries from the link there.

Please run Hijack This per the instructions I gave....do

not "fix" anything with it
yet; post the log file.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in

message
...
I followed your instructions and have the following to
report:

1. The problem does not occur in "Safe Mode."

2. I ran Spybot, Adware, and Norton Ant-Virus, removing
any files found (I did each of these twice, once in Safe
mode).

3. When I ran Spybot, I got an error message "Bad
Checksum" when trying to download updates.

4. After I ran Spybot, I got a message "Error during
check" (Winpup32).

5. I could not download "CoolWebShredder" or run "Hijack
This." In both cases I got the error
message "required .DLL file not found MSVBVM60.DLL was
not found."

Does this information gives you some ideas on what I
should try next?

Thanks,

Glenn

-----Original Message-----
IE and its support files are integrated into the

Windows
shell (explorer.exe) to
such a point that problems with the Windows shell are
most often fixed by repairing
or reinstalling IE. Likewise many of the current shell
errors are being traced back
to spyware that installs through Internet Explorer.

You may have better luck running Ad-Aware and SpyBot
from Safe Mode, where other
processes are not loaded. I would run Ad-aware, remove
what it finds, reboot, and
run it again at least once or twice more; then run
SpyBot the same way.

Be sure that you download the latest updates for them
first.

After that, run Hijack This per the instruction sand
tutorial, and post the logs in
an appropriate forum, with a copy here, please.
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote in
message
...
Thanks for the tips. I have done some of these things
(ran a system scan for viruses, used "Spybot", etc.),
but
will take a closer look and try the others.

Please clarify something for me. I don't seem to be
having any trouble with Internet Explorer.I assumed

the
problem was with "Windows Explorer" when it happened
while trying to open a folder. My experience with
Spyware, "CoolWeb Search" etc. has been having

problems
with Internet Explorer. Do the symptoms I describe
match
your advice, or did I imply the problem was with
Internet
Explorer?

Thanks.

Glenn

-----Original Message-----
Have a look here for possibilities:

http://www.colba.net/~hlebo49/errexplo.htm#ERRUNKNOWN

Does it also happen in Safe Mode?

Have you checked for malware?

Update your anti-virus app and then run a full-

system
virus scan.

Use CWShredder, the CoolWeb removal tool, available
he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start
it,
click its 'Check for
Updates' link in the app to install updates, then

use
it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy,

scan
your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?
page=download

Download, unzip, and run Hijack This from one of

these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html


http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the

Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even
required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at
one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Glenn" wrote

in
message
...
When trying to open up folders on my desktop, I

get
a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I
clicked
on
the "details" button the error says "Explorer
caused an
invalid page fault in module unknown 0000:
07c07fc6e."
This is followed by a series of numbers & letters
under
the headings "register" and "stack dump." Please
advise
on how to correct; I tried using Windows
configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.

.


.


.


  #9  
Old June 9th 04, 12:17 AM
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

im getting the same thing as you,this only started last
week and i've tried everything with no joy.do you think
it could be a virus of some sort? it will let me into IE
but not into MY COMPUTER,MY DOCUMNTS or RECYCLE BIN - its
really becoming a problem - best of luck and let me know
if anyone has any ideas .
-----Original Message-----
When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000: 07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.
.

  #10  
Old June 9th 04, 01:20 AM
glee
external usenet poster
 
Posts: n/a
Default Explorer caused an invalid page fault

You need to run Hijack This, and post back with the log file.

If you can't open My Computer or Windows Explorer to get at the Hijack This file in
order to run it after it is unzipped, download it and then run it using a DOS window
(MS-DOS Prompt).
For example, if you have the Hijack This .exe file unzipped to the C:\Download
folder, open a DOS box, type:
C:\Download\Hijackthis.exe
and press Enter.
Alternately, you can click StartRun, and type the same command to run it.

Here is my usual reply about how to use Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forum.aumha.org/
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


" wrote in message
...
im getting the same thing as you,this only started last
week and i've tried everything with no joy.do you think
it could be a virus of some sort? it will let me into IE
but not into MY COMPUTER,MY DOCUMNTS or RECYCLE BIN - its
really becoming a problem - best of luck and let me know
if anyone has any ideas .
-----Original Message-----
When trying to open up folders on my desktop, I get a
dialogue box saying "This program has performed an
illegal operation and will shut down." When I clicked on
the "details" button the error says "Explorer caused an
invalid page fault in module unknown 0000: 07c07fc6e."
This is followed by a series of numbers & letters under
the headings "register" and "stack dump." Please advise
on how to correct; I tried using Windows configuration
utility to do a clean boot, but the problem still
occurred.

Thanks in advance for some advice.
.


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Explorer caused an invalid page fault adam General 3 July 26th 04 07:00 PM
"EXPLORER has caused an invalid page fault in module USER.EXE at 0003:00009914 Mitch General 1 July 18th 04 07:56 PM
explorer caused invalid page fault stile General 6 June 24th 04 10:17 PM
EXPLORER caused an invalid page fault MileHarHigh General 1 June 14th 04 12:53 PM
EXPLORER caused an invalid page fault Tim R Sr General 1 June 8th 04 01:57 PM


All times are GMT +1. The time now is 03:17 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 Win98banter.
The comments are property of their posters.