1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

ActiveX/Com ERROR from WinDoc scan

Discussion in 'Virus & Other Malware Removal' started by ronto, Nov 2, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    Basically, my system is

    W98se on a P4-2.4gHz w/512 megs RAM. I'm on a wireless cable internet [NOT using AOL of any kind ... never installed, never will!!!] :)

    When I run Norton Utilities' WinDOC program, I see an ERROR during the scanning process in the:

    ActiveX/Com section.

    The scan continues through top the end.

    Sometimes there are errors displayed to be fixed. Mostly they are of the 'Shortcut' variety. No problem to fix.

    However ... NOTHING ever shows up regarding the ActiveX/Com error that was seen during the scan. :confused:

    I at least curious about these errors, and would like to resolve them.


    Any insight would be much appreciated.

    I've been through the Symantec site, but have not been able to find any pertinent info on this problem.

    Again ... THANKS for any insight. If there is any additional info needed, I'll do all I can to provide it.

    Thanks

    ronto
     
  2. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    Hello again!,

    I've been into the Symantec Knowledgebase and, just like you, didn't find anything specific about your particular error.

    Some of the articles do tend to suggest that WinDoc can 'find' problems that aren't really problems at all ie: a particular program makes harmless Registry entries that are flagged as problems by WinDoc.

    If you aren't aware of any specific difficulties in your computers' functioning, you might want to think about telling WinDoc to ignore it;http://service1.symantec.com/SUPPOR...85256c370048ad9d?OpenDocument&src=bar_sch_nam

    Otherwise, you might want to look at the possibility that you have an intrusive ActiveX control that WinDoc 'notices' during scans. Do you have Spybot?. One of its tools compiles a list of ActiveX controls and can identify 'bad' ones. If you don't have Spybot, go to the pinned thread at the top of this forum 'Security Help Tools'.
     
  3. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    Hello TOGG !

    Glad you were able to find me here :)

    I went to the links mentioned ... also, I do have Spybot.

    Yeah, it is strange ... it seems that during the scan phase, Nortons goes through the ActiveX/Com main section ... after a bit, the STATUS goes to ERROR. The next catagory is the ActiveX subsection. No status error there or anywhere else.

    It's crazy ...

    I've run another diagnostic program [PC BugDoctor], and although it found a few problems, it never complained about ActiveX.

    I'm cautious when it comes to these repair programs ... I've seen the suggusted repair that Norton's would make ... that's why I ALWAYS manually select the solution.

    Anyways ... just wanted to be sure that I was clear on when/where this error was showing up.

    Mostly because I've been trying to track down a freeze-up problem with IE-v5.5.

    Again, thanks for tracking me down ... :)

    All suggestions/insights are welcomed.

    Sincerely,
    ronto
     
  4. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    Although I can't remember how to get to it, I know that you can view the ActiveX controls on your computer in IE, so there might well be a link between your two problems.

    What do you see if you use the Spybot 'Tools' function to check ActiveX? Any of them got the dreaded red mark or don't have the green tick?

    Is there any particular reason why you haven't upgraded to IE6 yet?. I put it off for a long time and then installed it from a magazine coverdisk after reading that it was supposed to be more 'secure' (a purely relative concept in the case of IE).

    Shortly after upgrading, I disabled ActiveX and scripting and started using Opera and Firefox, which don't use ActiveX anyway. I haven't had any problems but I suppose that depends on the type of sites you visit.
     
  5. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    Hi TOGG,

    I've run SpyBot ... no errors show up :)

    I had installed IE6, thinking that it would have 'fixed' the problem ... but nothing changed. The problem remained. So I ended up going back to 5.5.

    I've run IE repair ... the log file seems to indicate that all repairs were successful ...
    still the problem.

    I've tried entering in the RUN comands that I've seen in other post from those having a similar problem. i.e., RUN: regsvr32 urlmon.dll etc .... but the wierd thing is that I NEVER have seen a confirmation box after running ANY of the commands. Maybe this is something NOT available in Windows98se ?!?

    This is a very perplexing problem to me ... the only way out has been to [Cntrl-Alt-Del] ... I'll see the link that [IE Stop Responding], then I END the task. Unfortunately, ALL the browser windows end up closing down back to the desktop.

    A real pain :|

    I'll be following the thread ... THANKS !!!!

    ronto
     
  6. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    We may be at cross purposes here regarding Spybot if, by running it, you mean a normal spyware scan.

    If you have it in Advanced mode, you should have a menu for 'Tools' on the left hand side of the main page. Click on that, and there should be an 'ActiveX' item which, when opened, displays a list of the ActiveX controls installed on your computer, with an indication as to whether they are known to be 'safe' or not.

    I know what you mean about those Regsvr items and have seen other threads here where they have fixed problems for some people. Hopefully, someone who knows more about them will offer more information soon.
     
  7. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    Thanks TOGG ... I'm going to run SpyBot again. I was not aware [or don't remember] those options.

    Will report back my findings.

    THNAKS for the lead !

    ronto
     
  8. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    OK ...back again.

    Boy does SpyBot take some time to run!!!

    Anyways ... I DID find the ActiveX section [needed to go to the advanced section]. When I looked through the result list, nothing in red.

    I exported the report. This is what it found:

    Microsoft XML Parser for Java (Microsoft XML Parser for Java)
    DPF name: Microsoft XML Parser for Java
    CLSID name:
    description:
    classification: Legitimate
    known filename: %WINDIR%\Java\classes\xmldso.cab
    info link:
    info source: Patrick M. Kolla

    DirectAnimation Java Classes (DirectAnimation Java Classes)
    DPF name: DirectAnimation Java Classes
    CLSID name:
    description:
    classification: Legitimate
    known filename: %WINDIR%\Java\classes\dajava.cab
    info link:
    info source: Patrick M. Kolla

    Internet Explorer Classes for Java (Internet Explorer Classes for Java)
    DPF name: Internet Explorer Classes for Java
    CLSID name:
    description:
    classification: Legitimate
    known filename: %WINDIR%\Java\classes\iejava.cab
    info link:
    info source: Patrick M. Kolla

    {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control)
    DPF name:
    CLSID name: AcPreview Control
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: AcPreview.ocx
    Short name: ACPREV~1.OCX
    Date (created): 4/23/01 2:59:14 AM
    Date (last access): 11/2/04
    Date (last write): 4/23/01 2:59:14 AM
    Filesize: 120440
    Attributes: archive
    MD5: E24D3B63BC9AA3FC9C0ED1871B7B4FE7
    CRC32: E96AB8EA
    Version: 0.15.0.0

    {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control)
    DPF name:
    CLSID name: AcDcToday Control
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: AcDcToday.ocx
    Short name: ACDCTO~1.OCX
    Date (created): 4/23/01 2:59:22 AM
    Date (last access): 11/1/04
    Date (last write): 4/23/01 2:59:22 AM
    Filesize: 54896
    Attributes: archive
    MD5: 3D950983CBFAC3A1AA35696810C2E9BF
    CRC32: 7558B815
    Version: 0.15.0.0

    {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR)
    DPF name:
    CLSID name: NOXLATE-BANR
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: InstBanr.Ocx
    Short name: INSTBANR.OCX
    Date (created): 10/12/03 11:30:12 PM
    Date (last access): 11/2/04
    Date (last write): 10/12/03 11:30:14 PM
    Filesize: 97688
    Attributes: archive
    MD5: 990A3530D59E2D07EE515AB32D49723A
    CRC32: 08499CE7
    Version: 0.1.0.0

    {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred)
    DPF name:
    CLSID name: InstaFred
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: InstFred.Ocx
    Short name: INSTFRED.OCX
    Date (created): 10/12/03 11:30:02 PM
    Date (last access): 11/2/04
    Date (last write): 10/12/03 11:30:04 PM
    Filesize: 280120
    Attributes: archive
    MD5: BF3A93AC37D71C55D22CEF094FD2DCA8
    CRC32: AEDE587D
    Version: 0.1.0.0

    {737D14F8-4090-11D4-AE0E-0010830243BD} (SysVerChk Control)
    DPF name:
    CLSID name: SysVerChk Control
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: SysVerChk.ocx
    Short name: SYSVER~1.OCX
    Date (created): 10/12/03 11:29:42 PM
    Date (last access): 11/1/04
    Date (last write): 10/12/03 11:29:44 PM
    Filesize: 46000
    Attributes: archive
    MD5: 1B6FBBEA3E3337E33717921EA9EA4FEB
    CRC32: CA66534A
    Version: 0.1.0.0

    {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class)
    DPF name:
    CLSID name: Update Class
    description: Windows Update
    classification: Legitimate
    known filename: %WINDIR%\System32\iuctl.dll,iuengine.dll
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\SYSTEM\
    Long name: iuctl.dll
    Short name: IUCTL.DLL
    Date (created): 8/21/03 4:47:54 PM
    Date (last access): 11/2/04
    Date (last write): 8/21/03 4:47:54 PM
    Filesize: 162400
    Attributes:
    MD5: DB2F1F57D3057FEBC19C61AB9AA77198
    CRC32: 5A03D776
    Version: 0.5.0.3

    {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
    DPF name:
    CLSID name: Shockwave Flash Object
    description: Macromedia Shockwave Flash Player
    classification: Legitimate
    known filename:
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\SYSTEM\MACROMED\FLASH\
    Long name: FLASH.OCX
    Short name:
    Date (created): 2/14/04 7:50:18 PM
    Date (last access): 11/2/04
    Date (last write): 12/8/03 2:01:58 PM
    Filesize: 933888
    Attributes: archive
    MD5: F7E435D02F7A48120B746E33254A70BC
    CRC32: 02AF493D
    Version: 0.7.0.0

    {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control)
    DPF name:
    CLSID name: ParallelGraphics Cortona Control
    description: ParallelGraphics Cortona Control
    classification: Unknown
    known filename: CORTONA_CONTROL.DLL
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\DOWNLOADED PROGRAM FILES\
    Long name: cortona_control.dll
    Short name: CORTON~7.DLL
    Date (created): 7/31/03 2:53:46 PM
    Date (last access): 11/2/04
    Date (last write): 7/31/03 2:53:46 PM
    Filesize: 224768
    Attributes:
    MD5: B40E1D2EDC8F37940AE9B319015C8D8B
    CRC32: 79E033CB
    Version: 0.4.0.1

    {B3E0F81F-73F8-470B-A56B-D895EFF19260} (ATLF3D Class)
    DPF name:
    CLSID name: ATLF3D Class
    Path: C:\WINDOWS\SYSTEM\
    Long name: axf3d.dll
    Short name: AXF3D.DLL
    Date (created): 2/18/03 3:00:32 PM
    Date (last access): 11/2/04
    Date (last write): 2/18/03 3:00:32 PM
    Filesize: 345288
    Attributes:
    MD5: 448B9C42DA85424093947A07C765C2AF
    CRC32: 447EFDD2
    Version: 0.2.0.1

    {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control)
    DPF name:
    CLSID name: Shockwave ActiveX Control
    description: Macromedia ShockWave Flash Player 7
    classification: Unknown
    known filename: SWDIR.DLL
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\
    Long name: SWDIR.DLL
    Short name:
    Date (created): 10/22/03 9:22:18 PM
    Date (last access): 11/1/04
    Date (last write): 2/11/03 6:02:58 AM
    Filesize: 32768
    Attributes: archive
    MD5: 92FA0AE21D3A08B65D291724AA7D0E43
    CRC32: 7B63A9DB
    Version: 0.8.0.5

    {B69F2A9C-E470-11D3-AFA3-525400DB7692} (Actimage Room Control)
    DPF name:
    CLSID name: Actimage Room Control
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: bTile.ocx
    Short name: BTILE.OCX
    Date (created): 7/17/03 6:07:18 PM
    Date (last access): 11/1/04
    Date (last write): 7/17/03 6:07:18 PM
    Filesize: 856064
    Attributes:
    MD5: A6FCB558C94EB462727EC72B35D7863D
    CRC32: FF807743
    Version: 0.1.0.0

    {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)
    DPF name:
    CLSID name: HouseCall Control
    description: Trend Micro Antivirus online scanner
    classification: Legitimate
    known filename: XSCAN53.OCX
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: xscan53.ocx
    Short name: XSCAN53.OCX
    Date (created): 3/24/04 6:22:12 PM
    Date (last access): 11/1/04
    Date (last write): 3/24/04 6:22:12 PM
    Filesize: 435712
    Attributes:
    MD5: 99A67AEE9A6E3EFD2126AFA0840ECBED
    CRC32: 9198FA39
    Version: 0.5.0.70

    {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine)
    DPF name:
    CLSID name: Office Update Installation Engine
    Path: C:\WINDOWS\
    Long name: opuc.dll
    Short name: OPUC.DLL
    Date (created): 8/27/03 4:10:30 AM
    Date (last access): 11/2/04
    Date (last write): 8/27/03 4:10:30 AM
    Filesize: 314368
    Attributes:
    MD5: 1E32EC4A8A17B19926B49EA5F6B79A76
    CRC32: E98FC293
    Version: 0.11.0.0

    {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control)
    DPF name:
    CLSID name: Macromedia Authorware Web Player Control
    Path: C:\WINDOWS\SYSTEM\MACROMED\AUTHORWA\
    Long name: awswax.ocx
    Short name: AWSWAX.OCX
    Date (created): 4/9/03 1:05:32 PM
    Date (last access): 11/1/04
    Date (last write): 4/9/03 1:05:32 PM
    Filesize: 190976
    Attributes:
    MD5: 7E1E126F54C650060574953EB5E02520
    CRC32: A849B86B
    Version: 0.7.0.0

    {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class)
    DPF name:
    CLSID name: QDiagHUpdateObj Class
    Path: C:\WINDOWS\SYSTEM\
    Long name: qdiagh.ocx
    Short name: QDIAGH.OCX
    Date (created): 9/5/04 4:35:16 PM
    Date (last access): 11/2/04
    Date (last write): 9/5/04 4:35:16 PM
    Filesize: 824432
    Attributes:
    MD5: 3B331F5FE018F369B1B93B6D9D753C6F
    CRC32: 15A67BD3
    Version: 0.1.0.0

    {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility)
    DPF name:
    CLSID name: PCPitstop Utility
    description: Gateway tools
    classification: Unknown
    known filename: PCPITSTOP.DLL
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: PCPitstop.dll
    Short name: PCPITS~1.DLL
    Date (created): 9/2/03 10:52:30 AM
    Date (last access): 11/2/04
    Date (last write): 9/2/03 10:52:30 AM
    Filesize: 249856
    Attributes:
    MD5: BCA44EAEFCEA0133B35551664570351F
    CRC32: D451C1A7
    Version: 0.1.0.0

    {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control)
    DPF name:
    CLSID name: AvxScanOnline Control
    description: BitDefender online virus scanner
    classification: Legitimate
    known filename: bitdefender.ocx
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: bitdefender.ocx
    Short name: BITDEF~1.OCX
    Date (created): 8/14/03 3:16:52 PM
    Date (last access): 11/1/04
    Date (last write): 8/14/03 3:16:52 PM
    Filesize: 348160
    Attributes:
    MD5: ED7B8D329B4047C1CC7954851BDEBEB9
    CRC32: BC786F92
    Version: 0.3.0.0

    {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery)
    DPF name:
    CLSID name: Secure Delivery

    {F5131C24-E56D-11CF-B78A-444553540000} (Ikonic Menu Control)
    DPF name:
    CLSID name: Ikonic Menu Control
    Path: C:\WINDOWS\DOWNLO~1\
    Long name: ikmenu.ocx
    Short name: IKMENU.OCX
    Date (created): 3/27/97 8:37:24 AM
    Date (last access): 11/1/04
    Date (last write): 3/27/97 8:37:24 AM
    Filesize: 26112
    Attributes:
    MD5: 22D906C1C3830923E6F54CE601EAABE3
    CRC32: E77E7A64
    Version: 0.1.0.0

    {00000075-0000-0010-8000-00AA00389B71} ()
    DPF name:
    CLSID name:
    description: Microsoft Audio Codec
    classification: Legitimate
    known filename: VOXMSDEC.CAB
    info link:
    info source: JavaCool

    {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class)
    DPF name:
    CLSID name: MainControl Class
    Path: C:\WINDOWS\SYSTEM\
    Long name: SkanerOnline.dll
    Short name: SKANER~1.DLL
    Date (created): 8/4/04 10:29:36 AM
    Date (last access): 11/2/04
    Date (last write): 8/4/04 10:29:36 AM
    Filesize: 237056
    Attributes:
    MD5: 2AEC80FC30BD6EE7228B1D0F818722FC
    CRC32: 3BBED300
    Version: 7.212.0.7

    {32564D57-0000-0010-8000-00AA00389B71} ()
    DPF name:
    CLSID name:

    {556DDE35-E955-11D0-A707-000000521957} ()
    DPF name:
    CLSID name:

    {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class)
    DPF name:
    CLSID name: ActiveScan Installer Class
    Path: C:\WINDOWS\DOWNLOADED PROGRAM FILES\
    Long name: asinst.dll
    Short name: ASINST.DLL
    Date (created): 8/7/03 9:02:50 AM
    Date (last access): 11/1/04
    Date (last write): 8/7/03 9:02:50 AM
    Filesize: 110592
    Attributes:
    MD5: BF100C75EBD536E45B2BE67A685DD39C
    CRC32: 99F54DBA
    Version: 0.55.0.2


    *********************************************

    Also, when I ran the scan, after getting the latest update, 1 adaware file was found & fixed [deleted].


    If anything looks suspecious, or if I can supply any other info ... don't hesitate to ask ... I'll do my best.


    Thanks for lookin' this over ... hope to get this IE running smooth ... AND I'd like to THEN install version 6. :rolleyes:


    THANKS

    ronto
     
  9. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    Wow! You do have a lot of these things, there are about five on my list!

    As I understand it, the ones with the green tick are OK and the ones that are just plain back, but without a red mark, are unknown, which doesn't necessarily mean they are OK.

    I notice some in your list are described as archives and haven't been written to for some time. Do you recognise all the names of the programs/software that these controls refer to?. I suppose it's possible that WinDoc doesn't 'like' one or more of these, or is just registering a false positive.

    I think there is somewhere you can check the controls against a database and if I can find it, I'll post back.
     
  10. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    This is the thing I had in my mind, but it may not be what's needed;http://computercops.biz/CLSID.html

    To use it seems to require typing the CLSID for each control you don't know into the search engine, and seeing what comes up.
     
  11. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    Silly me! If you do decide to try the BHO database for details about any items you are unsure of, you would obviously copy and paste the CLSID into the search engine, because typing will take for ever.
     
  12. ronto

    ronto Thread Starter

    Joined:
    Oct 13, 2004
    Messages:
    54
    Thanks for the link TOGG,

    I went and search all the non-identified ones ... and, they remain UN-identified. Many of them look familiar ... but, that's probably neither good nor bad :|

    I'm truely at a lost as to what to do next.

    ronto
     
  13. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,844
    Sorry I can't be of much more help. Perhaps running a HijackThis scan and posting the log here might throw some more light on the problem, (if one of the experts can spot anything odd).

    Have a look at this tutorial and try posting a log;http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 The latest version is 1.98.2, and you need to be sure to follow the advice about putting HJT in a permanent folder and not fixing anything until you get some guidance.
     
  14. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/291505

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice