Help with crashes

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

MJT27

Thread Starter
Joined
Feb 1, 2004
Messages
159
WinXP SP3 IE6 crashes while navigating the internet...not any
particular site that I could detect

I've run Malwarebytes and Panda scans and both were clean
After disabling IE addons I couldn't pinpoint the culprit
Any help would be greatly appreciated.



The following was added to eventlog for the past 3 days


Saturday, April 10, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001cb3a.
Sunday, April 11, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x00019873.
Sunday, April 11, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001475e.
Monday, April 12, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001cb3a.
Monday, April 12, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001b2f5.





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:09:09 AM, on 4/12/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Program Files\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\PAS\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: Download All By FlashGet3 - C:\Documents and Settings\PAS\Application Data\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download By FlashGet3 - C:\Documents and Settings\PAS\Application Data\FlashGetBHO\GetUrl.htm
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Royal Vegas Online Casino - AA7576EA-5103-4E14-AD16-4DBBDF29F809 - C:\Microgaming\Casino\RoyalVegas\Casinogame.exe (HKCU)
O15 - Trusted Zone: http://software.kuaiche.com
O15 - Trusted Zone: http://windowsupdate.microsoft*.com
O15 - Trusted Zone: http://v5.windowsupdate.micros*oft.com
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe

--
End of file - 6102 bytes



Thanks in advance
 

MJT27

Thread Starter
Joined
Feb 1, 2004
Messages
159
I didnt like it so I went back...this just started
3 days ago....any other advice ?
 
Joined
Nov 19, 2006
Messages
1,938
Use FireFox :D
You really should upgrade IE. IE6 has too many security risks these days. Up to you but your leaving your system open to attack by using IE6
 
Joined
Feb 22, 2010
Messages
242
IE6 it's very risky.Firefox,Google Chrome,IE8,Opera,Netscape,etc report for every risky executations like opening a nonsecure url,etc.Every non upgraded netbrowser could let adwars,viruses,Spywares,etc.Well,do you have a Antivirus because you said:
I've run Malwarebytes and Panda scans
???
 

MJT27

Thread Starter
Joined
Feb 1, 2004
Messages
159
Yes I will go back to IE7 ....but in the meantime I just ran an SAS scan and came back with this



SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/12/2010 at 01:23 PM

Application Version : 4.35.1002

Core Rules Database Version : 4795
Trace Rules Database Version: 2607

Scan type : Complete Scan
Total Scan Time : 02:36:17

Memory items scanned : 449
Memory threats detected : 0
Registry items scanned : 6719
Registry threats detected : 0
File items scanned : 42472
File threats detected : 12



Rogue.Agent/Gen-Nullo[DLL]
C:\WINDOWS\RASCNTRL.DLL
C:\WINDOWS\SYSTEM32\MSDRVE.DLL
C:\WINDOWS\SYSTEM32\SVCPRMPT.DLL
C:\WINDOWS\VMOPTVER.DLL


never had this before...not really sure if they should be deleted or not.....thank you
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
83,148
You need to upgrade to IE7 or IE8, whether you like it or not, because websites are dropping support for IE6 and you're going to find yourself unable to access more and more websites. You also want the additional enhancements and security features of IE7 and IE8.

---------------------------------------------------------------

You didn't submit the entire SUPERAntiSpyware log, and you should've selected and removed everything it found.

You also should install and do a scan with Malwarebytes Anti-Malware and then select and remove everything it finds.

---------------------------------------------------------------
 

MJT27

Thread Starter
Joined
Feb 1, 2004
Messages
159
I fixed the other errors on the SAS scan....these are the ones I didnt fix because I wasnt
sure if they were are false positives....I googled and found some people some posts saying
that they might be...but didnt know what to do next....I also ran malwarebytes scan...came up
clean





Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3982

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

4/12/2010 1:20:29 PM
mbam-log-2010-04-12 (13-20-29).txt

Scan type: Full scan (C:\|)
Objects scanned: 210283
Time elapsed: 2 hour(s), 50 minute(s), 21 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top