1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Help with crashes

Discussion in 'Windows XP' started by MJT27, Apr 12, 2010.

Thread Status:
Not open for further replies.
Advertisement
  1. MJT27

    MJT27 Thread Starter

    Joined:
    Feb 1, 2004
    Messages:
    159
    WinXP SP3 IE6 crashes while navigating the internet...not any
    particular site that I could detect

    I've run Malwarebytes and Panda scans and both were clean
    After disabling IE addons I couldn't pinpoint the culprit
    Any help would be greatly appreciated.



    The following was added to eventlog for the past 3 days


    Saturday, April 10, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001cb3a.
    Sunday, April 11, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x00019873.
    Sunday, April 11, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001475e.
    Monday, April 12, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001cb3a.
    Monday, April 12, 2010 Applicatio n Error Faulting application iexplore.exe, version 6.0.2900.5512, faulting module urlmon.dll, version 6.0.2900.5945, fault address 0x0001b2f5.





    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:09:09 AM, on 4/12/2010
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\AVG\AVG9\avgchsvx.exe
    C:\Program Files\AVG\AVG9\avgrsx.exe
    C:\Program Files\AVG\AVG9\avgcsrvx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AVG\AVG9\avgwdsvc.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Motive\McciCMService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\AVG\AVG9\avgemc.exe
    C:\Program Files\AVG\AVG9\avgcsrvx.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\AVG\AVG9\avgtray.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Windows Live\Messenger\wlcsdk.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Program Files\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\PAS\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-18\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
    O8 - Extra context menu item: Download All By FlashGet3 - C:\Documents and Settings\PAS\Application Data\FlashGetBHO\GetAllUrl.htm
    O8 - Extra context menu item: Download By FlashGet3 - C:\Documents and Settings\PAS\Application Data\FlashGetBHO\GetUrl.htm
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Royal Vegas Online Casino - AA7576EA-5103-4E14-AD16-4DBBDF29F809 - C:\Microgaming\Casino\RoyalVegas\Casinogame.exe (HKCU)
    O15 - Trusted Zone: http://software.kuaiche.com
    O15 - Trusted Zone: http://windowsupdate.microsoft*.com
    O15 - Trusted Zone: http://v5.windowsupdate.micros*oft.com
    O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
    O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
    O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe

    --
    End of file - 6102 bytes



    Thanks in advance
     
  2. Miggs

    Miggs

    Joined:
    Aug 14, 2006
    Messages:
    150
    Upgrade to IE 8.0
     
  3. MJT27

    MJT27 Thread Starter

    Joined:
    Feb 1, 2004
    Messages:
    159
    I didnt like it so I went back...this just started
    3 days ago....any other advice ?
     
  4. Jack Hackett

    Jack Hackett

    Joined:
    Nov 19, 2006
    Messages:
    1,938
    Use FireFox :D
    You really should upgrade IE. IE6 has too many security risks these days. Up to you but your leaving your system open to attack by using IE6
     
  5. Juli007

    Juli007

    Joined:
    Feb 22, 2010
    Messages:
    242
    IE6 it's very risky.Firefox,Google Chrome,IE8,Opera,Netscape,etc report for every risky executations like opening a nonsecure url,etc.Every non upgraded netbrowser could let adwars,viruses,Spywares,etc.Well,do you have a Antivirus because you said:
    ???
     
  6. Phantom010

    Phantom010 Trusted Advisor

    Joined:
    Mar 9, 2009
    Messages:
    34,796
  7. MJT27

    MJT27 Thread Starter

    Joined:
    Feb 1, 2004
    Messages:
    159
    Yes I will go back to IE7 ....but in the meantime I just ran an SAS scan and came back with this



    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 04/12/2010 at 01:23 PM

    Application Version : 4.35.1002

    Core Rules Database Version : 4795
    Trace Rules Database Version: 2607

    Scan type : Complete Scan
    Total Scan Time : 02:36:17

    Memory items scanned : 449
    Memory threats detected : 0
    Registry items scanned : 6719
    Registry threats detected : 0
    File items scanned : 42472
    File threats detected : 12



    Rogue.Agent/Gen-Nullo[DLL]
    C:\WINDOWS\RASCNTRL.DLL
    C:\WINDOWS\SYSTEM32\MSDRVE.DLL
    C:\WINDOWS\SYSTEM32\SVCPRMPT.DLL
    C:\WINDOWS\VMOPTVER.DLL


    never had this before...not really sure if they should be deleted or not.....thank you
     
  8. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    80,887
    First Name:
    Frank
    You need to upgrade to IE7 or IE8, whether you like it or not, because websites are dropping support for IE6 and you're going to find yourself unable to access more and more websites. You also want the additional enhancements and security features of IE7 and IE8.

    ---------------------------------------------------------------

    You didn't submit the entire SUPERAntiSpyware log, and you should've selected and removed everything it found.

    You also should install and do a scan with Malwarebytes Anti-Malware and then select and remove everything it finds.

    ---------------------------------------------------------------
     
  9. MJT27

    MJT27 Thread Starter

    Joined:
    Feb 1, 2004
    Messages:
    159
    I fixed the other errors on the SAS scan....these are the ones I didnt fix because I wasnt
    sure if they were are false positives....I googled and found some people some posts saying
    that they might be...but didnt know what to do next....I also ran malwarebytes scan...came up
    clean





    Malwarebytes' Anti-Malware 1.45
    www.malwarebytes.org

    Database version: 3982

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 6.0.2900.5512

    4/12/2010 1:20:29 PM
    mbam-log-2010-04-12 (13-20-29).txt

    Scan type: Full scan (C:\|)
    Objects scanned: 210283
    Time elapsed: 2 hour(s), 50 minute(s), 21 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/916399

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice