1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

illegal errors

Discussion in 'Earlier Versions of Windows' started by coker-cola, Jan 19, 2002.

Thread Status:
Not open for further replies.
Advertisement
  1. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    novice at best having major problems.....multiple errors such as Explore kernel [email protected]:bff724cl,..... @0167:bff79db61,
    .....0167:bff7b9f6 or realplay [email protected]:bff769f6, scanregw, rpcrt4.gll @ 0167:7f691876. The list of errors continues.....ran adware 71 items found as follows Scan initialized on 1/19/02 4:12:28 PM.
    (AAW release 5.62, referencefile 087-22.09.2001)
    =================================================


    Started memory scan
    ====================
    Running processes:

    #:1 Name: C:\WINDOWS\SYSTEM\KERNEL32.DLL
    ----------------------------
    Threads:5
    ProcID:4279199061
    ParentProcID:2123335433
    BasePriority:High

    #:2 Name: C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    ----------------------------
    Threads:1
    ProcID:4294875693
    ParentProcID:4279199061
    BasePriority:Normal

    #:3 Name: C:\WINDOWS\SYSTEM\SPOOL32.EXE
    ----------------------------
    Threads:2
    ProcID:4294877749
    ParentProcID:4294875693
    BasePriority:Normal

    #:4 Name: C:\WINDOWS\SYSTEM\MPREXE.EXE
    ----------------------------
    Threads:4
    ProcID:4294881409
    ParentProcID:4294875693
    BasePriority:Normal

    #:5 Name: C:\WINDOWS\SYSTEM\MSTASK.EXE
    ----------------------------
    Threads:2
    ProcID:4294897141
    ParentProcID:4294881409
    BasePriority:Normal

    #:6 Name: C:\ANTI VIRUS\TREND PC-CILLIN 98\IOMON98.EXE
    ----------------------------
    Threads:5
    ProcID:4294847137
    ParentProcID:4294881409
    BasePriority:Normal

    #:7 Name: C:\ANTI VIRUS\TREND PC-CILLIN 98\WEBTRAP.EXE
    ----------------------------
    Threads:5
    ProcID:4294855673
    ParentProcID:4294847137
    BasePriority:Normal

    #:8 Name: C:\WINDOWS\SYSTEM\mmtask.tsk
    ----------------------------
    Threads:1
    ProcID:4294813557
    ParentProcID:4294875693
    BasePriority:Normal

    #:9 Name: C:\WINDOWS\EXPLORER.EXE
    ----------------------------
    Threads:26
    ProcID:4294774609
    ParentProcID:4294875693
    BasePriority:Normal

    #:10 Name: C:\WINDOWS\TASKMON.EXE
    ----------------------------
    Threads:4
    ProcID:4294746809
    ParentProcID:4294774609
    BasePriority:Normal

    #:11 Name: C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    ----------------------------
    Threads:5
    ProcID:4294752109
    ParentProcID:4294774609
    BasePriority:Normal

    #:12 Name: C:\WINDOWS\SYSTEM\ATITASK.EXE
    ----------------------------
    Threads:4
    ProcID:4294708637
    ParentProcID:4294774609
    BasePriority:Normal

    #:13 Name: C:\WINDOWS\SYSTEM\ATICWD32.EXE
    ----------------------------
    Threads:4
    ProcID:4294717933
    ParentProcID:4294774609
    BasePriority:Normal

    #:14 Name: C:\MAC TO PC\MACOPENER\MACNAME.EXE
    ----------------------------
    Threads:4
    ProcID:4294726229
    ParentProcID:4294774609
    BasePriority:Normal

    #:15 Name: C:\WINDOWS\SYSTEM\STIMON.EXE
    ----------------------------
    Threads:6
    ProcID:4294724525
    ParentProcID:4294774609
    BasePriority:Normal

    #:16 Name: C:\WINDOWS\SYSTEM\PRINTRAY.EXE
    ----------------------------
    Threads:4
    ProcID:4294736409
    ParentProcID:4294774609
    BasePriority:Normal

    #:17 Name: C:\PROGRAM FILES\SAVENOW\SAVENOW.EXE
    ----------------------------
    Threads:10
    ProcID:4294675861
    ParentProcID:4294774609
    BasePriority:Normal
    Warning! SAVENOW : savenow.exe (savenow.exe)

    "savenow.exe" unload successfull!


    #:18 Name: C:\WINDOWS\LOADQM.EXE
    ----------------------------
    Threads:7
    ProcID:4294696137
    ParentProcID:4294774609
    BasePriority:Normal

    #:19 Name: C:\PROGRAM FILES\WEBHANCER\PROGRAMS\WHAGENT.EXE
    ----------------------------
    Threads:15
    ProcID:4294697265
    ParentProcID:4294774609
    BasePriority:Normal
    Warning! WEBHANCER : whagent.exe (whagent.exe)

    "whagent.exe" unload successfull!


    #:20 Name: C:\PROGRAM FILES\EXCITE\PLATFORM\EXAUTOUP.EXE
    ----------------------------
    Threads:7
    ProcID:4294703653
    ParentProcID:4294681901
    BasePriority:Normal

    #:21 Name: C:\PROGRAM FILES\EXCITE\PLATFORM\EXSHELL.EXE
    ----------------------------
    Threads:8
    ProcID:4294658977
    ParentProcID:4294681901
    BasePriority:Normal

    #:22 Name: C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
    ----------------------------
    Threads:9
    ProcID:4294664733
    ParentProcID:4294774609
    BasePriority:Normal

    #:23 Name: C:\HARDWARE\ATI\ATIDESK\ATISCHED.EXE
    ----------------------------
    Threads:4
    ProcID:4294623505
    ParentProcID:4294774609
    BasePriority:Normal

    #:24 Name: C:\ACCOUNTING\QUICKENW\QWDLLS.EXE
    ----------------------------
    Threads:4
    ProcID:4294591909
    ParentProcID:4294774609
    BasePriority:Normal

    #:25 Name: C:\PROGRAM FILES\INTEL\CREATESHARE\PROGRAM\PC CAMERA GAMES\PROGRAM\RFTRAY.EXE
    ----------------------------
    Threads:5
    ProcID:4294519313
    ParentProcID:4294774609
    BasePriority:Normal

    #:26 Name: C:\WINDOWS\SYSTEM\WMIEXE.EXE
    ----------------------------
    Threads:3
    ProcID:4294528557
    ParentProcID:4294752109
    BasePriority:Normal

    #:27 Name: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    ----------------------------
    Threads:11
    ProcID:4294560753
    ParentProcID:4294774609
    BasePriority:Normal

    #:28 Name: C:\WINDOWS\SYSTEM\PSTORES.EXE
    ----------------------------
    Threads:3
    ProcID:4294231345
    ParentProcID:4294307425
    BasePriority:Normal

    #:29 Name: C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
    ----------------------------
    Threads:4
    ProcID:4294187753
    ParentProcID:4294307425
    BasePriority:Normal

    #:30 Name: C:\WINDOWS\SYSTEM\DDHELP.EXE
    ----------------------------
    Threads:6
    ProcID:4294174581
    ParentProcID:4294307425
    BasePriority:Realtime

    #:31 Name: C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
    ----------------------------
    Threads:12
    ProcID:4294172449
    ParentProcID:4294774609
    BasePriority:Normal

    #:32 Name: C:\PROGRAM FILES\LAVASOFT AD-AWARE\AD-AWARE.EXE
    ----------------------------
    Threads:4
    ProcID:4294038661
    ParentProcID:4294774609
    BasePriority:Normal

    Memory scan result:
    Total modules found:32
    Suspicious modules found:2


    Started registry scan
    ======================
    Cydoor key:HKEY_USERS\.default\software\cydoor\
    Cydoor key:HKEY_USERS\.default\software\cydoor services\
    WebHancer key:HKEY_CLASSES_ROOT\clsid\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
    WebHancer key:HKEY_CLASSES_ROOT\interface\{c89435b0-cdfe-11d3-976a-00e02913a9e0}\
    OnFlow key:HKEY_LOCAL_MACHINE\software\classes\clsid\{0cef79d8-d373-11d3-a7d3-00062962bf17}\
    OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1\
    OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1.7\
    OnFlow key:HKEY_LOCAL_MACHINE\software\classes\typelib\{0cef79cb-d373-11d3-a7d3-00062962bf17}\
    Cydoor key:HKEY_CURRENT_USER\software\cydoor\
    Cydoor key:HKEY_LOCAL_MACHINE\software\cydoor\
    Cydoor key:HKEY_CURRENT_USER\software\cydoor services\
    WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
    OnFlow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\onflow\
    SaveNow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\savenow\
    WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\webhancer agent\
    OnFlow key:HKEY_LOCAL_MACHINE\software\onflow\
    WebHancer key:HKEY_LOCAL_MACHINE\software\webhancer\
    SaveNow key:HKEY_LOCAL_MACHINE\software\whenu\
    SaveNow key:HKEY_LOCAL_MACHINE\software\whenu\savenow\
    WebHancer key:HKEY_CLASSES_ROOT\typelib\{c8cb3870-cdfe-11d3-976a-00e02913a9e0}\
    WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj\
    WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1\
    SaveNow key:HKEY_CLASSES_ROOT\wusn.1\
    SaveNow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\savenow
    WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\webhancer agent
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
    WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll


    Started extended registry scan
    ===============================
    OnFlow key:CLSID\{0CEF79D8-D373-11D3-A7D3-00062962BF17}
    WebHancer key:CLSID\{c900b400-cdfe-11d3-976a-00e02913a9e0}


    Registry scan result:
    Suspicious keys found :33


    Started folder scan
    ====================
    Warning, no disk in drive (A)

    Now processing drive (C), 3 remaining.
    WebHancer file:C:\WINDOWS\WEBHDLL.DLL
    WebHancer file:C:\WINDOWS\WHAGENT.INF
    WebHancer file:C:\WINDOWS\whInstaller.exe
    WebHancer file:C:\WINDOWS\whInstaller.ini
    Aureate folder:C:\WINDOWS\SYSTEM\AdCache
    OnFlow folder:C:\WINDOWS\TEMP\onflow
    WebHancer folder:C:\WINDOWS\TEMP\webhancer
    OnFlow folder:C:\Program Files\Internet Explorer\PLUGINS\Onflow
    OnFlow folder:C:\Program Files\onflow
    SaveNow folder:C:\Program Files\SaveNow
    WebHancer folder:C:\Program Files\webHancer
    Finished processing Drive(C), 1635 folders total.

    Now processing drive (D), 2 remaining.
    Finished processing Drive(D), 1637 folders total.

    Now processing drive (E), 1 remaining.
    Finished processing Drive(E), 1647 folders total.

    Now processing drive (F), 0 remaining.
    Finished processing Drive(F), 1648 folders total.

    Folder scan result:
    Folders processed:6567
    Suspicious folders found:7


    Started file scan
    ==================
    Cydoor file:C:\WINDOWS\SYSTEM\cd_clint.dll
    Doubleclick file:C:\WINDOWS\Cookies\[email protected][1].txt
    Doubleclick file:C:\WINDOWS\Cookies\[email protected][1].txt
    OnFlow file:C:\WINDOWS\TEMP\of_stub_ins_w_2045.exe
    SaveNow file:C:\WINDOWS\TEMP\SaveNowInst.exe
    WebHancer file:C:\WINDOWS\WEBHDLL.DLL
    WebHancer file:C:\WINDOWS\WHAGENT.INF
    WebHancer file:C:\WINDOWS\whInstaller.exe
    WebHancer file:C:\WINDOWS\whInstaller.ini
    OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
    OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\ieonflow.dll
    OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\NPONFLOW.DLL
    OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowplayer0.dll
    OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
    OnFlow file:C:\Program Files\Netscape\Communicator\Program\Plugins\nponflow.dll
    OnFlow file:C:\Program Files\Netscape\Communicator\Program\Plugins\onflowplayer0.dll
    OnFlow file:C:\Program Files\onflow\uninstall onflow.exe
    SaveNow file:C:\Program Files\SaveNow\savenow.db
    SaveNow file:C:\Program Files\SaveNow\SaveNow.exe
    SaveNow file:C:\Program Files\SaveNow\savenow.htm
    WebHancer file:C:\Program Files\webHancer\Programs\WBHSHARE.DLL
    WebHancer file:C:\Program Files\webHancer\Programs\WHAGENT.EXE
    WebHancer file:C:\Program Files\webHancer\Programs\whAgent.ini
    WebHancer file:C:\Program Files\webHancer\Programs\WHIEHLPR.DLL
    WebHancer file:C:\Program Files\webHancer\Programs\WHIESHM.DLL

    File scan result:
    Suspicious files found:29



    Scanning finished
    ==================
    Suspicious modules found:2
    Suspicious keys found :33
    Suspicious folders found:7
    Suspicious files found:29
    ==========================
    Spyware components ignored:0
    Total spyware components found:71


    is it advised to delete all of these? how do I know which one to delete and which to save? Also here is start up msinfo32

    ATI Scheduler Startup Group C:\hardware\ati\atidesk\atisched.exe
    Microsoft Office Startup Group "C:\Office\Microsoft Office\Office\OSA9.EXE" -b -l
    Adobe Gamma Loader.exe Startup Group "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe"
    Quicken Startup Startup Group C:\Accounting\QUICKENW\QWDLLS.EXE
    Billminder Startup Group C:\Accounting\QUICKENW\BILLMIND.EXE
    Reality Fusion GameCam SE Startup Group "C:\Program Files\Intel\Createshare\program\PC Camera Games\Program\RFTray.exe"
    ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
    TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
    SystemTray Registry (Machine Run) SysTray.Exe
    LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    Atikey Registry (Machine Run) Atitask.exe
    AtiCwd32 Registry (Machine Run) Aticwd32.exe
    IOMON98.EXE Registry (Machine Run) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"
    MacName Registry (Machine Run) "C:\Mac to Pc\MacOpener\MACNAME.EXE"
    StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
    LexmarkPrinTray Registry (Machine Run) PrinTray.exe
    SaveNow Registry (Machine Run) C:\PROGRA~1\SAVENOW\SaveNow.exe
    Excite Platform Registry (Machine Run) C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
    ICSMGR Registry (Machine Run) ICSMGR.EXE
    LoadQM Registry (Machine Run) loadqm.exe
    webHancer Agent Registry (Machine Run) "C:\Program Files\webHancer\Programs\whAgent.exe"
    RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    SchedulingAgent Registry (Machine Service) mstask.exe
    IOMON98.EXE Registry (Machine Service) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"

    thanks for any help.....please be patient I am newbie and don't know many commands
    thank you for helping
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    I would remove both Webhancer and SaveNow through Add/Remove programs (be sure to close your internet connection ). Do it one at a time, rebooting after each removal. Then run Ad-ware again and select for removal all it finds, click "make backup" and Finish. Reboot again afterwards and do another scan to ensure complete removal.

    Before proceeding, as an extra measure of safety regarding webhancer, download the zip file below. If you have connectivity problems after removing Webhancer and running Ad-aware, open and run it. It restores a winsock2 registry key that Webhancer modifies. Ad-ware usually notifies you and restores it if necessary.

    http://www.lavasoft.de/aaw/binary/whndnfix.zip
     
  3. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    Rollin Rog thank you for your reply. Not sure if my reply was received....Illegal operation Kernel 32.DLL at 016:bff9db61 happened when I tried to send. So I am attempting to send again. Please pardon if this has been received. Anyway, I followed your instructions and removed all found on ad-aware. Guess I have more problems since illegal ops are still happening. What can be done to resolve this situation...short of tossing computer out.
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You still have an awful lot of unnecessary stuff loading at startup. I would recommend running msconfig, click the startup tab and remove checks for the following items. Test you system for stability over a reasonable period of time. If there is improvement, you can gradually enable any items you find useful.

    You can review my selections and decide for yourself, by checking them against the list at this site:

    http://www.pacs-portal.co.uk/startup_content.htm

    Adobe gamma loader
    Quicken startup
    Billmind.exe
    Rftray.exe
    Taskmonitor (a windows file which optimizes defrag)
    excite platform
    ICSMGR (keep it if you are using Internet Connection Sharing)
    LoadQm
    Iomon98.exe (optional)
    Macname.exe

    And of course I'm assuming all the entries for Webhancer and SaveNow have been removed.

    ============

    If you've had Ad-Aware remove all it found, you should be pretty "clean"

    The explorer>kernel32 error can also be caused by corrupt password files. These can be deleted:

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;q154092
     
  5. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    Thanks again, went back and cleaned up start_up as you suggested than went to link for currupt passwords and "BAM" Iexplore kernel32.DDLat 016bff9db61. Everytime I try and accest
    the link the message occurs. Is there another way to gain access?
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Here's a copy of the link:
    ======================================

    SYMPTOMS
    When you attempt to connect to MSN, The Microsoft Network, using the Internet And MSN service type, you may receive one of the following error messages:



    Explorer caused an invalid page fault in module Kernel32.dll.


    Commgr32 caused an invalid page fault in module Kernel32.dll.


    Mprexe caused an invalid page fault in module Kernel32.dll.


    Msgsrv32 caused an invalid page fault in module Kernel32.dll.


    A TCP/IP problem has occurred. Please check if you have TCP/IP installed and selected for your modem.


    Msnviewr caused an invalid page fault in module Kernel32.dll.


    Guide.exe caused an invalid page fault in Kernel32.dll


    Guide.exe caused an invalid page fault in Mpr.dll


    Connection could not be established Error 745


    After you receive the error message, your computer may stop responding.



    CAUSE
    This behavior may occur if your password list file is damaged.



    RESOLUTION
    To resolve this issue, re-create your password list file. To do so, use the following steps:



    Click Start , point to Find , and then click Files Or Folders .


    In the Named box, type *.pwl and then click Find Now .


    In the list of found files, right-click each file, and then click Delete . Continue until the list of found files is empty.


    Close the Find window.


    Restart the computer. The password list files are re-created automatically when you log on to Windows 95.


    NOTE : If you use Microsoft Windows 95 and have installed Windows 95 Service Pack 1, password list files may remain damaged even after you delete them and they are re-created automatically.

    To resolve this issue, download and install the Windows 95 Password List Update file: mspwlupd.exe .

    You can obtain this file from the following Microsoft Internet site:
    ftp://ftp.microsoft.com/softlib/mslfiles/



    MORE INFORMATION
    Note that the error message stated above can occur when you connect to any site (not just MSN) with Dial-Up Networking if the .pwl file is damaged.

    You may also receive this error message when you are using Microsoft Exchange, Microsoft Schedule+, or Microsoft Outlook 97. The resolution in this article also works for these programs.


    --------------------------------------------------------------------------------

    If deleting pwl files doesn't resolve the error, let's also do this. Go to start>shutdown>restart in MS-DOS mode

    At the c:\windows\> prompt enter each line:

    smartdrv
    deltree history
    deltree temp
    deltree tempor~1
    deltree cookies

    exit
    (or ctrl-alt-del to restart Windows)

    For each deltree you will receive a confirmation prompt, if the target directory is correct (eg. "history"), press 'y'. Smartdrv is required to speed up the process which otherwise could take a very long time.

    After deltreeing the cookies folder you will need to reset all passwords on web sites that require them -- such as this one. So be sure you remember what they are.
     
  7. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    Rollin Rog.....thanks for the detailed instructions... I removed the files except the following: Mspwl32.DLL (can not delete)
    could this file be my problem?
    Also when starting computer message comes up about missing application registry-system.INI c:\windows\umaxis 11.386
    any ideas as to replacing this?
    I have to thank you again for doing this step-by-step.....
    I only have one other problem.....cd burner/writter is not working although device manager says it is working properly. I put rewritable cd in and nothing....nothing at all, no sound no nothing
    Any advice shall be well taken......thanks
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You don't want to delete any dll files just the ones with a .pwl extension.

    Best to do a separate thread for the cd-rw problem in the hardware forum

    the umaxis error has to do with a scanner driver -- probably Umax or Genius.

    See this link if you want to reinstall their drivers:

    http://www.umax.com/support/knowledge/solutionsSC.cfm?docs=SC00049

    if you run system.ini from start>run it will open in notepad. You can comment out or delete the offending line under the [386Enh] header

    You can also run msconfig, click on the system.ini tab and just remove the check for it. That will eliminate the error message.

    Are you still getting those page faults when trying to access an MS site like the previous link?
     
  9. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    not getting as many error messages.....however still getting some, IEXPLORE kernel32DLL at 0167:bff7b9f6 and a rundll 32. Followed your instructions for the msconfig, system.in. unchecked 386nh and lost use of mouse. Finally got mouse up and running....another good lesson, only to receive error message upon rebooting.
    Thinks are much better and
    I thank you for all your help
     
  10. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    I don't know what could have caused the mouse problem. Unchecking the Umax entry in system.ini shouldn't cause it unless you unchecked the wrong line or it contained a mouse related entry as well.

    When something like that happens though you have two good methods for a quick recovery. Either boot to a command prompt (press and hold ctrl key starting up until the start up menu appears and select "command prompt") Then at the c:\> prompt enter:

    scanreg /restore

    use the arrow keys to select a prior started registry.

    Or, select "safe mode" from the startup menu and once in Windows, reverse the action.

    Have you recently updated and run a full antivirus scan with Trend's PC-Cillin?

    If you get continuing rundll32 errors, give the full error message.
    Also for any error message, after you close it out, do a ctrl-alt-del and note what is listed in the Close Programs window besides Explorer and Systray.

    Has TaskMonitor been unchecked in Msconfig?

    You might want to give us a fresh look at your startup programs in msinfo32, since it isn't clear what remains active.
     
  11. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    task monitor is unchecked and here is list of start up programsATI Scheduler Startup Group C:\hardware\ati\atidesk\atisched.exe
    Microsoft Office Startup Group "C:\Office\Microsoft Office\Office\OSA9.EXE" -b -l
    Quicken Startup Startup Group C:\Accounting\QUICKENW\QWDLLS.EXE
    Reality Fusion GameCam SE Startup Group "C:\Program Files\Intel\Createshare\program\PC Camera Games\Program\RFTray.exe"
    ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
    SystemTray Registry (Machine Run) SysTray.Exe
    LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    Atikey Registry (Machine Run) Atitask.exe
    AtiCwd32 Registry (Machine Run) Aticwd32.exe
    StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
    LexmarkPrinTray Registry (Machine Run) PrinTray.exe
    ICSMGR Registry (Machine Run) ICSMGR.EXE
    RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    SchedulingAgent Registry (Machine Service) mstask.exe
    IOMON98.EXE Registry (Machine Service) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"
     
  12. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    I would further uncheck the following:

    Atisched.exe
    osa9.exe
    Rftray.exe
    Qwdlls.exe

    For Stimon, I would make a shortcut to it and uncheck it in msconfig.

    For Real Player, you must disable the "start agent" in its options preferences dialog.



    LexmarkPrinTray printray.exe

    Lexmark Printer icon in the System Tray for quick access. Not required - remove via Printer configuration rather than MSCONFIG

    For each of these recommendations, it would be helpful for you to review the relevant information at this site:

    http://www.pacs-portal.co.uk/startup_pages/startup_full.htm
     
  13. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    did as suggested...we will see what happens.
    thanks so much for all your assistance. I will keep you informed
     
  14. coker-cola

    coker-cola Thread Starter

    Joined:
    Nov 30, 2001
    Messages:
    13
    still getting kernel 32 errors
    kernel 32 [email protected]:bff9db61
    any other thoughts?
     
  15. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/65543

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice