Internet explorer gone haywire

  1. #1
    hersnab is offline Valued Member

    Internet explorer gone haywire

    Hello all,
    This problem has started very recently and doesn't seem to be for any reason, I haven't made any changes but today while surfing an error appeared saying 'explorer.exe has generated errors and will be closed by windows' this also happens when I click on certain files in windows. This has just come out of the blue and I cant start to fathom for what reason.
    All suggestions would be greatly appreciated.
    Thanks
    Steve


  2. #2
    D-A-L is offline D-A-L Administrator
    Hi Steve,

    If you running this on an XP machine you could try repairing Internet Explorer. See: http://support.microsoft.com/default.aspx?kbid=318378

    Also

    Have you scanned for Spyware? See:
    http://www.d-a-l.com/featured-downloads.html

  3. #3
    hersnab is offline Valued Member
    Hello again,
    Thanks for the reply, I'm using Win2000 but will the technique work on 2000? I'll back up and try, I think I will have to reinstall explorer, but have a remaining question: is ie the same as windows explorer? (am I right that windows explorer is the way you view your own files by clicking on my documents etc.) will reinstalling internet explorer replace windows explorer? Because when I click on certain songs in my music my desktop goes haywire.
    I'm very confused to say the least but need to resolve this problem as this computer is used by many people (namely friends and family) who wouldn't know what to do in this situation and the last thing I want is to scare them off when I've only just managed to get them on the thing!
    Anyway look forward to your reply and many thanks for your time
    Steve.

  4. #4
    D-A-L is offline D-A-L Administrator
    is ie the same as windows explorer?
    No they are different, Windows Explorer is part of the Windows Operating System, Internet Explorer (IE) although also installed by default with Windows, is a separate Internet Browser. Although Internet Explorer is the norm you there are loads of other internet browsers out there you could install and use to surf the net like Opera and Mozilla. So.. in answer to your question, no, reinstalling IE will not have any impact on Windows Explorer.

    What Virus scanning software and Spyware/Adware detection software do you have currently?
    Last edited by D-A-L; 18-05-2004 at 02:44 PM. Reason: Add detail

  5. #5
    hersnab is offline Valued Member
    Hi,
    I use AVG, SPYBOT and ADAWARE and they all scan clean, I just don't get it, things were running fine until yesterday when the explorer.exe error window started jumping up when I tried to do certain things on some sites (fortunatly not this one!) Well it was the autotrader site I can be on there for a few seconds and the message pops up, after that when I click on some files, videos or songs the screen goes blue and slowly my destop comes back as if booting up again. Heres a copy of my hijack this log:
    Logfile of HijackThis v1.97.7
    Scan saved at 11:42:28, on 18/05/2004
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\WINNT\system32\DRIVERS\CDANTSRV.EXE
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\system32\ZoneLabs\vsmon.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\Explorer.EXE
    C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    C:\WINNT\vsnpt513.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
    C:\WINNT\system32\stisvc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Hijack This\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPKbho.dll
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\Run: [SNPT513] C:\WINNT\vsnpt513.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html
    O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html
    O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html
    O9 - Extra button: Research (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab27571.cab
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab
    O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeup...ntent/opuc.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7...ll/xscan53.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab27571.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...056.7115972222
    O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/def...ploader_v5.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
    O16 - DPF: {FA13A9FA-CA9B-11D2-9780-00104B242EA3} - http://www.wildtangent.com/install/w...oft/wtinst.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7D12E916-E7E7-4506-89BB-394417C7C72D}: NameServer = 194.72.9.34 194.74.65.68

    Could it be something to do with auto updates? It didn't start untill I had install the last update

    So even if I reinstall IE this may not resolve the problem with certain file types?
    The two problems started together
    Thanks again
    Steve.

  6. #6
    hersnab is offline Valued Member
    Update: Earlier while I was on this site my whole browser went down and no matter what I did I couldn't connect to the internet. Well I was connected but it kept coming up saying 'server not found'I knew I was connected because I could still connect to xbox live. I didn't know what to do so thought it was to best to reinstall IE, luckily I had downloaded a copy ready just in case I needed to but was waiting to see what you had to say first. I had read somewhere that to be able to un-install IE you first need to remove service packs and so on, so I un-installed service pack 4 for win 2000 and then IE started to work fine. I thought it must of been just one of those things so I re-installed service pack 4 and lo and behold I couldn't access the internet again. So I removed it again, well since then I've had no end of trouble with hijacks and porn sites just appearing even if I didn't have a browser window open. I'm in a real mess now and don't know what to do. I suspect a full harddrive format and OS reinstallation but anyone heard of anything like this before, it's driving me batty. I still cant access some of my files, when I click on them just once the screen resets as if booting up. Help me please!
    Steve

  7. #7
    Nirvana is offline Elite Member
    Steve, can you post an up to date HijackThis log for us to look over?

    EDIT: I've just seen your post in the Firewall and Networks forum and those Superwebsearch entries are CoolWebSearch infections, please download, update and run
    CWShredder
    Click Fix, don't just scan. Let it fix everything it asks about.

    Reboot, then post a fresh HijackThis log and let us know if things have improved.
    Last edited by Nirvana; 20-05-2004 at 12:56 PM.

  8. #8
    hersnab is offline Valued Member
    Hello again,
    Well things have calmed down since and I'm back on the internet, I've un-installed service pack 4 and was wondering if it's safe to go online without it, Adaware scans always finds something but I haven't had any 'dodgy' sites just letting themselves onto my computer, heres my log file:

    Logfile of HijackThis v1.97.7
    Scan saved at 22:24:32, on 20/05/2004
    Platform: Windows 2000 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\WINNT\system32\DRIVERS\CDANTSRV.EXE
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\system32\ZoneLabs\vsmon.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\Explorer.exe
    C:\WINNT\vsnpt513.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    C:\WINNT\system32\stisvc.exe
    C:\Program Files\BitTorrent\btdownloadgui.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Hijack This\HijackThis.exe

    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPKbho.dll
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SNPT513] C:\WINNT\vsnpt513.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab27571.cab
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab
    O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeup...ntent/opuc.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7...ll/xscan53.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab27571.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...056.7115972222
    O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/def...ploader_v5.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
    O16 - DPF: {FA13A9FA-CA9B-11D2-9780-00104B242EA3} - http://www.wildtangent.com/install/w...oft/wtinst.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7D12E916-E7E7-4506-89BB-394417C7C72D}: NameServer = 194.72.9.34 194.74.65.68

    Thanks Steve.

  9. #9
    Nirvana is offline Elite Member
    Steve, did you run CWShredder from my link, if so did it find anything? If it did you should be able to get your updates now.

  10. #10
    hersnab is offline Valued Member
    Save 20% on AVG Internet Security 2012 Suite!
    Hello Nirvana,
    Sorry about how long it's taken to post.
    Yes, I've run CWShredder and it's seem to have sorted it. I've re-installed sp4 and everything seems to be running smoothly.




    For now.


    .....Anyway, thanks for your time and advice!


    Steve

+ Reply to Thread
Page 1 of 2 1 2 LastLast