Internet Explorer has encountered an error

I am currently using internet explorer 6.0 with sp2

When I launch internet explorer everything is fine until I close then I receive the following error:

Internet Explorer has encountered a problem and needs to close....the error has to do with shdocvw.dll

How do I fix this???

 

First thing would be to scan for Spyware, Adware, and Viruses.

http://www.lavasoft.de/support/download/ Adaware
http://www.spybot.info/ Spybot
http://www3.ca.com/virusinfo/virusscan.aspx Etrust online virus scan

Run through all three of these tools. If you still have the problem after that, we will need some details on your configuration (OS, service packs etc) and a hijackthis log.

Read this thread for details
http://www.windowsbbs.com/showthread.php?t=31535

 

I have run all Trend Micro Virus Scan, Norton Virus Scan, E Trust Virus Scan,Adaware, Spybot Search & Detroy and nothing detected.

What is the next step?

 

star4kw--Ben McDonald's ideas are good if you have spyware or a virus. Don't forget using HiJackThis.
But, please post as much of the error message as possible.
And you could try typing regsvr32 Shdocvw.dll at a command prompt, then click Enter.

 

Here is a copy of my HijackThis log:

Logfile of HijackThis v1.98.2
Scan saved at 9:05:25 PM, on 12/26/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\Program Files\Trend Micro\Internet Security\tmproxy.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Trend Micro\Internet Security\PccPfw.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\PROGRA~1\CA\ETRUST~2\ETRUST~1\VetTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\CA\ETRUST~2\ETRUST~2\ca.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
C:\Program Files\America Online 8.0\waol.exe
C:\Program Files\America Online 8.0\shellmon.exe
C:\Program Files\America Online 8.0\aolwbspd.exe
C:\unzipped\hijackthis[1]\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.toshiba.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~2\ETRUST~1\VetTray.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\CA\ETRUST~2\ETRUST~2\ca.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1101588600125
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binaries/IA/netslv32_EN_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2357423E-6445-4042-B6EF-34E779C6C942}: NameServer = 198.81.17.134
O17 - HKLM\System\CS1\Services\Tcpip\..\{2357423E-6445-4042-B6EF-34E779C6C942}: NameServer = 198.81.17.134

 

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

So it's a Real.com browser add-on and from the symptoms, I'd say it is either bad or not registered correctly.

I'll leave details for a 'fix' to others since I gave up on messing with AOL systems years ago.

BTW - if you want Hijackthis to perform properly, you need to unzip it to a folder of it's own. Maybe c:\hjt or something similar.

 

Ok....sooooo now if this is the problem, how do I go about fixing it?

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

So it's a Real.com browser add-on and from the symptoms, I'd say it is either bad or not registered correctly.

I'll leave details for a 'fix' to others since I gave up on messing with AOL systems years ago.

 

Hello star4kw,

Here's a tool that will list and disable BHO's called BHODemon. This version runs as a residient process, but can be used as a "scanner" only which is how I use it: http://www.majorgeeks.com/download.php?det=3550

It will disable, not delete. It does give you the choice to see how the system runs w/o the BHO running, and the BHO can be re-enabled.

Like Newt, the permenant fix - not a aol person - I will leave to others.

Regards - Charles

 

The BHODemon will disable what????? Can anybody help me with a permanant fix to my origianl Internet Explorer error which I still have???

 

Hello star4kw,

You have SpyBot running. Bring up SpyBot > Tools (lower left panel - if you don't see it, click on Mode next to File in upper left hand corner and click on "advanced "). In Tools > BHO's. This will show you all the Browser Helper Objects running. Use BHODemon to disable them one at a time and see the effect, then re-enable that one if it's not the problem.

Regards - Charles

 

Disabling the BHO's one at a time did not solve my original problem. Again, my problem is that when I launch Internet Explorer - I am able to open it, search, etc. The error occurs when I close out of Explorer. At that point I receive the error INTERNET EXPLORER HAS ENCOUNTERED A PROBLEM I am then given a choice to SEND or DONT SEND an error report. When I click on details the error has to do with "Shdocvw.dll "

1) I have run every possible virus scan & spyware

a) Trend Micro's Free Online Virus Scan
b) Symantec Security Check
c) E Trust Virus Scan

d) Ad-Aware SE - Installed, Checked for Updates and run.
e) Ad-Aware VX2 Cleaner Plug-In
f) CCleaner
g) Spybot - Installed, checked for updates, installed Spybot - Search and Destroy DSO Exploit Fix and run
h) SpywareBlaster - Installed, checked for updates, Enable All Protection
i) McAfee AVERT Stinger - run
j) CWShredder - run
k) Kill2me - run
l) about:Buster - run
m) HSRemove - run

all run while in Safe Mode

2) After all this my system runs clean with no viruses detected, etc. yet I still have the Internet Explorer error mentioned above.


One last note - I am running XP Pro and have two users. One user does not experience the Internet Explorer error while the 2nd user experiences the error every time.

I am extremely frustrated and would appreciate any and all help.

THANKS A MILLION

 

This will be hard, but if you follow these directions, i will be able to fix your problem.



Look in your application event log for the event related to a crash. There should be a note saying that it stored the data in some CAB file somewhere. (if i recall correctly, when you get a crash, it will also tell you this in the details button of the crash).
You need to open this CAB file and extract the DMP file in there.

Then, follow these directions http://www.windowsbbs.com/showthread.php?t=33471 and post the debuglog here for analysis.

If you cannot figure out how to find the dmp file, post back and we can do it the hard way.

 

I have located the applications event log and the error:

Faulting application iexplore.exe, version 6.0.2900.2180, faulting module shdocvw.dll, version 6.0.2900.2518, fault address 0x0001408d.


However, I don't know how to find the CAB file and extract the DMP file

 

http://www.windowsbbs.com/showpost.php?p=200866&postcount=6

Follow the directions in this post. I note there is a bug in the debug wizard that does not like the very long names of the DMP files adplus generates. In step 6, You need to rename the dump to small.dmp so the tool works properly.

 

I'm really lost

I downloaded the debugger but have several executable files, I don't know which one to run to acheive

To collect data from a USER.DMP or a MEMORY.DMP file:

1) Download and install the debugging tools from Microsoft
2) Download and run the tool attached to this post
3) Select a dump using the tool and 'generate log'
3) Open the file c:\debuglog.txt in notepad
4) Cut and paste the data to your thread, if you are starting a new thread, please include DUMP DATA in your title.

Your program crash dump is probably located in C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp

 

OK, i am confused about which of the below steps you are on. Have you completed #5 or are you stuck on #4?

1) get current on windows update. download and install everything you havent yet.
2) download and install the debugging tools from here
3) open a browser window
4) open a DOS prompt and type the bold commands
5) using the browser window you opened in step 3, do whatever it is you do to make it crash
6) use the dump data collection tool from my signature to analyze the dump that ADplus will generate when it crashes.
(substeps for #6 are what you posted below)