Error when using IE [HJT Log]

Error when using IE

Hello all. Every time I open up IE, I get greeted by this message:



... This happens every single time. I don't even have chance to get to my favorites without it coming up. I can still use the Internet, and send this by moving the dialog box out of the way but it's frustrating. Clicking 'Don't Send' and 'Send Error Report' just close the pages down and it happens again. Clicking 'Debug' closes down and the same. I have no other programs running. I have cleared TEMP files to no effect, have all available updates. I'm using Windows XP Home Edition SP2.

Thanks in advance.

 

Whenever Internet Explorer starts having problems, the first thing to suspect is spyware.

Good, free spyware removal tools are Windows AntiSpyware (2000 and XP only), Spybot, Ad-Aware and Ewido.

First go to this page and download WinSock XP Fix. You may not need it but if you do, you won't be able to get online to get it. Remember where you saved it.

Download at least two of them since each tends to find things the others miss. Install, immediately update and run the scans one at a time. Let them remove all they find.

If you find you can't get online after removing the spyware, run the Winsock fix you downloaded earlier to repair the damage left behind by the spyware.

 

Why not just diasable error reporting by doing the following:

1. Right-click on My Computer, and choose Properties.

2. Click the Advanced tab on your System Properties dialog box.

3. Click the Error Reporting button on the Advanced tab.

4. On the Error Reporting dialog box, place a checkmark next to the

text labeled, "Disable error reporting. "

5. Leave the other radio button unchecked next to the text labeled,

"But notify me when critical errors occur. "

6. Click OK.

 

I suggest that you do not disable error reporting. It is there for a very good reason. It is telling you that something is wrong. And that is what it is there for.

I myself can not help in this case but I am sure that someone can.

But I am quite sure that the error is telling you that it can't find the file on the Internet. So I think it would be better find the request is coming from and illiminate it.

I just tried it and it brings up and image mentioning Merriam-Webster Online.

BillyBob

 

enrique86

You say this happens EVERY time you open IE.

Could it be possible that you have accidently set it as you home page ?

BillyBob

 

Merriam Webster's is my homepage that I have set. It's been like that for way over a year. It's still doing it now. This time it brought up this when I first opened IE and then it goes back to the other error:

Error

... I'm going to run a SpyWare program now and I'll see what that says. Also, I've noted that I don't get the error if I click on a link and it brings it up in a new window. Just if I open it.

 

I've just ran three different anti-Spyware programs and all of them found different things. I've cleaned it all up but I'm still getting the same problem. I now get it if I open up Windows Media Player, or go to My Computer. If I have a program running like a Spyware program, it will sometimes bring it up that the programs needs to end. I haven't installed anything recently so I don't have a clue what it could be.

 

Here is the results for HJT:

Logfile of HijackThis v1.99.1
Scan saved at 10:26:45, on 18/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\system32\spupdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Browser Mouse\2D Browser Mouse\1.0\lwbwheel.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\PANICW~1\POP-UP~4\PSFree.exe
C:\WINDOWS\system32\spnpinst.exe
C:\WINDOWS\system32\Sysocmgr.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\unzipped\IEFix\IEFix.exe
C:\WINDOWS\system32\msiexec.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.m-w.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {702EA91C-1ACF-4772-8078-18F2B2EE1031} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Browser Mouse\2D Browser Mouse\1.0\lwbwheel.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\GENIUS~1\mouseElf.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe "
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42 "
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~4\PSFree.exe "
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\nbj.exe "
O9 - Extra button: Voiced Keyboard Homepage - {1ff190e7-38ab-423e-b59c-4d166c2ea5f1} - http://www.yayahoohoo.com (file missing)
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {29B2C103-AB53-4971-B765-FC1CE5D8B2D1} - http://www.silvercrk.com/php/hwspades_scecab_82.1.64.52.32259113132467045_9206001.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {AD08A333-609E-11D3-950C-008098601567} - http://wordreference.com/Install/English to Spanish.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O17 - HKLM\Software\..\Telephony: DomainName = W20326.sbnt.com
O20 - Winlogon Notify: Disk Cleaner - Disk Cleaner.dll (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Quick Heal Online Protection - PCTEL, INC. - (no file)
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

It is happening with more and more things now, not just Ie and WMP, but other exe's.

 

When I bought the CD, I never got a CD for the PC, but it asks me for it?

There is absolutely loads with red crosses, here's a pic:

http://img299.imageshack.us/img299/9277/eventviewererrors1ju.jpg

Do I not need the CD for this? Just downloaded from Microsoft so I'll see what the results are and post. Going to restart the PC so that I can do the chkdsk /r. Will post results.

 

Sorry, I meant when I bought the PC, I never got a CD. But yeah, you're right, I don't have the install disc. Here's one of the errors (the latest one):

'Faulting application helphost.exe, version 5.1.2600.0, faulting module wininet.dll, version 6.0.2900.2753, fault address 0x0001b810.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.'

And here's the little bit below that (just in-case):

'0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 68 65 6c ure hel
0018: 70 68 6f 73 74 2e 65 78 phost.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 77 69 6e 69 6e 65 74 2e wininet.
0038: 64 6c 6c 20 36 2e 30 2e dll 6.0.
0040: 32 39 30 30 2e 32 37 35 2900.275
0048: 33 20 61 74 20 6f 66 66 3 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 62 38 31 30 0d 0a b810.. '

After running the chkdsk (which was longest one ever!), it restarted my PC and then said the it was clean, but it's still doing it.

I hope it ain't serious...

 

The Application errors are all the same like that, and here's a few for System:

'AMLI: ACPI BIOS is attempting to read from an illegal IO port address (0x71), which lies in the 0x70 - 0x71 protected address range. This could lead to system instability. Please contact your system vendor for technical assistance.'

'AMLI: ACPI BIOS is attempting to write to an illegal IO port address (0x70), which lies in the 0x70 - 0x71 protected address range. This could lead to system instability. Please contact your system vendor for technical assistance.'

'The QHONLINE service failed to start due to the following error:
The system cannot find the file specified.'

'The LexBce Server service failed to start due to the following error:
The system cannot find the path specified. '

Etc.

I remember going through the whole i386 folder thing sometime ago with you becasue of my printer spool I think it was. I'll try it again now though and see what results I get. If that doesn't work, could I use a friends XP disc? The memory checked out OK, error free.

 

Just as I thought, the SFC didn't work. Maybe I am doing something wrong, here's a pic of what the registry looks like:

http://img219.imageshack.us/img219/5168/registry7ny.jpg

Think I may have to try and use a friends CD. I think I had QuickHeal a very long time ago, not recently though. I don't use LexMark anymore. I'm with Epson. It was something to do a registry entry that stoped the Epson working, something to do with dependancy but I solved it.

 

Here's more error reports from the System:

'Timeout (30000 milliseconds) waiting for a transaction response from the NVSvc service.'

And this one is a warning:

'TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.'

 

Yeah, I do have an Nvidia card. That's all the errors for System. They just keep repeating over and over again. I found the i386 file, it was 443MB, and I copied to C:\, changed the entry to point it to there, re-booted, ran SFC and it still asks for the CD.