1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

mmc71cht.exe runtime error

Discussion in 'Windows XP' started by sallythewhale, 2006/03/24.

  1. 2006/03/24
    sallythewhale

    sallythewhale Inactive Thread Starter

    Joined:
    2006/02/25
    Messages:
    10
    Likes Received:
    0
    I have had this error for some time now and have tried to get some help with it and have been assured that it is not a malware problem that it is a software issue i have a dell computer that is running on windows XP sp2

    This error appears as soon at start up:
    Microsoft Visual C++ Runtime Library
    Runtime Error!
    Program: C:Windows\System32\MMC71CHT.EXE

    This application has requested the runtime to terminate it in an unusual way.
    Please contact the applications support team for more information.

    I cannot Locate the c:\Windows\system32\mmc71cht.exe file with Windows Explorer even with viewing of hidden & system files enabled.

    This error has also appeared when i log off as a user which i dont normally do.
    MMC71CHT.EXE.DLL application failed to initialise.

    This MMC71CHT.EXE file is also trying to connect to the internet and is being blocked by my firewall. The report about htis says..

    Application:

    Full Path: C:\WINDOWS\system32\mmc71cht.exe
    Application Name: mmc71cht.exe
    Product Name:
    Product Description: mmc71cht.exe
    Version:
    Company:
    Publisher:
    IsSigned: False
    Type: Catalog
    List: Blocked
    Origin: Prompt
    Hash: E95AB364AC7472EE086ACFECF6D8F7BD25BC3779
    'UPDATED' in policy:

    No idea what any of this means please assist me if you can!
     
    sallythewhale,
    #1
  2. 2006/03/24
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Interestingly the only hits on Google for MMC71CHT.EXE are those in the various posts you have made here. This implies that the file name may be randomised - if it is malware (maybe a trojan especially as it is trying to send out from your computer) and as there are no other hits outside of your posts that it is not a recognised file.

    All I can suggest is that you download the free trial of Ewido - when installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu ". Update it, run it and post the log here.
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2006/03/24
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #3
  5. 2006/03/24
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    Definitely malware. Normal files don't have filenames as MMC71CHT.EXE.DLL (notice the double extension). Search your hard disk for 'mmc*.*', perhaps that may show up the file.
     
    rsinfo,
    #4
  6. 2006/03/24
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    Read the post again. Since the error occurs on startup, run msconfig & try to isolate the file.
     
    rsinfo,
    #5
  7. 2006/03/25
    sallythewhale

    sallythewhale Inactive Thread Starter

    Joined:
    2006/02/25
    Messages:
    10
    Likes Received:
    0
    I have run the ewido scan here is the report
    ---------------------------------------------------------
    ewido anti-malware - Scan report
    ---------------------------------------------------------

    + Created on: 14:18:32, 25/03/2006
    + Report-Checksum: 39603ACC

    + Scan result:

    C:\Documents and Settings\sally\Cookies\sally@112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@adviva[2].txt -> TrackingCookie.Adviva : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@com[1].txt -> TrackingCookie.Com : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@counter.hitslink[2].txt -> TrackingCookie.Hitslink : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@data2.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@e-2dj6wfkougczcdo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@e-2dj6wjlikmajigo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@e-2dj6wjlokmazwfp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@e-2dj6wjmiumcjkbp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@e-2dj6wjmyaoczodp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@ehg-littlewoods.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@hypertracker[1].txt -> TrackingCookie.Hypertracker : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@marketworksinc.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@msnservices.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@overture[2].txt -> TrackingCookie.Overture : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@qksrv[1].txt -> TrackingCookie.Qksrv : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@thomascook.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
    C:\Documents and Settings\sally\Cookies\sally@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@qksrv[1].txt -> TrackingCookie.Qksrv : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@sel.as-eu.falkag[2].txt -> TrackingCookie.Falkag : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
    C:\Documents and Settings\sally\Local Settings\Temp\Cookies\sally@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup


    ::Report End
     
    sallythewhale,
    #6
  8. 2006/03/25
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Ewido did not detect a trojan, just a bunch of tracking cookies - which you could well do without for your own security. Tracking cookies 'phone home' with details of your web surfing.

    I suggest you download and install Microsoft's Windows Defender for real time protection against spyware, autoscanning and auto updating.

    As a back up to this download SpywareBlaster, update and 'Enable all protection'. Spywareblaster gives you a high degree of permanent protection against spyware.

    And set up your cookie handling in Internet Explorer > Internet Options > Privacy to Medium or Medium High (preferred).

    Comments on your HJT log here http://www.windowsbbs.com/showthread.php?t=52956
     
    PeteC,
    #7

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...