[JSntgRvr]

Seems that something is blocking all these processes. Faulty Memory Chips?

Run Msconfig. Select the Startup tab. Deselect all programs from the list except for Systemtray and ScanRegistry. Click Ok and restart the computer.

Repeat these installation processes.

[holstein1577]

Deselected programs under Msconfig, restarted and then reinstalled IE. Still the same error msg's as before at restart, rundll32 and mstime.

[JSntgRvr]

Originally Posted by JSntgRvr

It could be. You must resolve the IE issue first. Delete all temporary files from your computer and attempt again to download and reinstall IE 6.0 SP1. To do this go to Start->Find->Files and folders. Search for the following strings and delete all files and folders found:

*.tmp
C:\Temp\*.*
C:\Windows\Temp\*.*

All files and folders deleted will be sent to the Recycle Bin. Empty your Recycle Bin and attempt to download and reinstall IE 6.0 SP1 after a restart. If unable to install, let us know the error message if any, or gives us some feedback.

You can also install Windows Installer prior to the IE 6.0 SP1:

http://www.microsoft.com/downloads/d...2-DE3BB768148F

Did you install Windows Installer as previously suggested?

Also try to extract Rundll32.exe from the CABS in Safe Mode. This file is the Win98_46.cab File. It belongs in the C:\Windows folder.

[holstein1577]

Extracted Rundll32.exe in safe mode. Then attempted to install Windows Installer after restart, got error msg-"The specified service already exists." Tried reinstalling IE got the usual error msg's- rundll32 and mstime.dll. I had to extract the entire Win98_46.cab file, couldn't just extract rundll32.exe, the rundll32.exe file couldn't be found. When I try to go into program now I no longer get Rundll32 error, but can't run program because D: drive is inaccessible.

[JSntgRvr]

What exactly is the D: drive? The CD_ROM?

[holstein1577]

D:drive is the CD ROM. I noticed that when I ctrl-alt-del to get out of frozen IE, there is an unknown program also running.

[JSntgRvr]

Can you run another Hikjackthis scan and post the latest log? I also notice you do not have an antivirus program. See is you can run an Anti-Virus Scan on line:

http://housecall.trendmicro.com/hous...start_corp.asp
http://us.mcafee.com/root/catalog.as...free&cid=10006
http://security.symantec.com/sscv6/h...nt=true&bhcp=1

[holstein1577]

No viruses.

Logfile of HijackThis v1.99.0
Scan saved at 8:44:38 AM, on 1/7/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] systray.exe
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR2.DLL/cmtrans.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0411.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0411.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .bat: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O12 - Plugin for .pif: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab

[JSntgRvr]

See nothing in the log. Download the StartupLlist program from this location and post the log produced:

http://www.lurkhere.com/~nicefiles

[holstein1577]

StartupList report, 1/8/05, 9:21:02 AM
StartupList version: 1.52
Started from : C:\MY DOCUMENTS\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\DW15.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\ALADDIN SYSTEMS\STUFFIT STANDARD\STUFFIT.EXE
C:\MY DOCUMENTS\STARTUPLIST.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = c:\windows\scanregw.exe /autorun
SystemTray = systray.exe

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=
SCRNSAVE.EXE=
drivers=

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 5/1/2005, 20:20:56)

[Rename]
C:\WINDOWS\SYSTEM\IEPEERS.DLL=C:\WINDOWS\SYSTEM\IEPEERS.RCX
C:\WINDOWS\SYSTEM\RSASIG.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\RSASIG.DLL
C:\WINDOWS\SYSTEM\XENROLL.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\XENROLL.DLL
C:\WINDOWS\SYSTEM\MSCAT32.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSCAT32.DLL
C:\WINDOWS\SYSTEM\MSSIGN32.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSSIGN32.DLL
C:\WINDOWS\SYSTEM\CRYPTUI.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\CRYPTUI.DLL
C:\WINDOWS\SYSTEM\CRYPTEXT.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\CRYPTEXT.DLL
C:\WINDOWS\SYSTEM\MSXMLA.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXMLA.DLL
C:\WINDOWS\SYSTEM\MSXMLR.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXMLR.DLL
C:\WINDOWS\SYSTEM\MSXML.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXML.DLL
C:\WINDOWS\SYSTEM\MSXML3R.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXML3R.DLL
C:\WINDOWS\SYSTEM\MSXML3A.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXML3A.DLL
C:\WINDOWS\SYSTEM\MSXML3.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSXML3.DLL
C:\WINDOWS\SYSTEM\DXTMSFT.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\DXTMSFT.DLL
C:\WINDOWS\SYSTEM\DXTRANS.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\DXTRANS.DLL
C:\WINDOWS\SYSTEM\MSTIME.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSTIME.DLL
C:\WINDOWS\SYSTEM\MMUTILSE.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MMUTILSE.DLL
C:\WINDOWS\SYSTEM\JSCRIPT.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\JSCRIPT.DLL
C:\WINDOWS\SYSTEM\PLUGIN.OCX=C:\WINDOWS\SYSTEM\IE4SETUP\PLUGIN.OCX
C:\WINDOWS\SYSTEM\MSRATELC.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSRATELC.DLL
C:\WINDOWS\SYSTEM\MSRATING.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSRATING.DLL
C:\WINDOWS\SYSTEM\MSHTMLED.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSHTMLED.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\MSHTML.DLL
C:\WINDOWS\SYSTEM\HLINK.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\HLINK.DLL
C:\WINDOWS\SYSTEM\PROCTEXE.OCX=C:\WINDOWS\SYSTEM\IE4SETUP\PROCTEXE.OCX
C:\WINDOWS\SYSTEM\URL.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\URL.DLL
C:\WINDOWS\SYSTEM\SHDOCLC.DLL=C:\WINDOWS\SYSTEM\IE4SETUP\SHDOCLC.DLL
C:\PROGRA~1\INTERN~1\IEXPLORE.EXE=C:\WINDOWS\SYSTEM\IE4SETUP\IEXPLORE.EXE
NUL=C:\WINDOWS\SHELLI~1
NUL=C:\WINDOWS\SYSTEM\WEBCHECK.DLL
C:\WINDOWS\SYSTEM\WEBCHECK.DLL=C:\WINDOWS\SYSTEM\SET4390.TMP

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - c:\windows\downloaded program files\googletoolbar2.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE = http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab

[Symantec RuFSI Utility Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\RUFSI.DLL
CODEBASE = http://security.symantec.com/sscv6/S.../bin/cabsa.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL

--------------------------------------------------
End of report, 5,091 bytes
Report generated in 1.460 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[JSntgRvr]

Ok. There are two things that I feel you should check in the computer. One is your System.ini file.

Go to Start->Run, type Sysedit and click Ok.

Select the System.ini file. Scroll down to the line Shell= under [Boot]. This line should read as follows:

Shell=Explorer.exe

According the Startuplist report this line seems missing, or appears as Shell=, without the Explorer.exe argument.

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=
SCRNSAVE.EXE=
drivers=

In addition, Dr. Watson is being engaged. When an error occurs in Windows, it attempts to report the error to Microsoft. There is no option to disable this error reporting.

To prevent Windows from sending an error report to Microsoft, and to create an error log instead:

1. Use Windows Explorer to navigate to and expand the C:\PROGRAM FILES\INTERNET EXPLORER.

2. Rename the dw15.exe file to dw15.old.

Let me know if there is an improvement.

[holstein1577]

The shell=explorer.exe line was completely missing.

And, Dr Watson was being engaged. I had to restart and make the change before making an internet connection, as windows was using the file.

IE seems to working better now, except for an illegal operation/shut down msg about Iexplore. No freeze ups so far.

[JSntgRvr]

IE seems to working better now, except for an illegal operation/shut down msg about Iexplore. No freeze ups so far.

Post the exact error message.

[holstein1577]

IExplore in upper left corner- This program has performed an illegal operation and will be shut down. Here are the details:

IEXPLORE caused an invalid page fault in
module KERNEL32.DLL at 0167:bff9dfff.
Registers:
EAX=0064da14 CS=0167 EIP=bff9dfff EFLGS=00000246
EBX=815c311c SS=016f ESP=0064d864 EBP=0064da14
ECX=0000016f DS=016f ESI=00000000 FS=3927
EDX=0064da04 ES=016f EDI=00004816 GS=0000
Bytes at CS:EIP:
cc a1 e0 9c fc bf 8b 00 66 64 f7 05 1c 00 00 00
Stack dump:
baaa0000 815c3160 815f7050 815f701c 815f7030 c1584b90 00000061 00000000 0064da24 00000001 0064d8b8 00000000 815c22f8 00000000 0064da3c ffecbad7

[holstein1577]

I tried running Microsoft Internet Explorer 6 Repair (thru add/remove programs) Here are the error messages:

Internet Explorer 6 could not be repaired. Please run setup again to reinstall all components.
Internet Explorer 6 cannot be repaired due to the following errors.
An error occurred loading "c:\windows\SYSTEM\mstime.dll" The file may not have been installed or it has been corrupted.

I tried downloading mstime.dll but got the same error msg when running the scan again. So I tried reinstalling all components of IE 6 again and still got the same error msg.