1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

(Resolved) Invalid page faults and errors galore

Discussion in 'Web & Email' started by Drex, Jan 22, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    Tried doing this...

    Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands,

    cd "%WinDir%\System" regsvr32 /u ..\MSView.dll

    But got "Too many parameters - regsvr32 " message....I'm not too familiar with DOS either.

    Did the msconfig. Tried to download the virus scan but got cut off at 50%. Don't know if it was the site, the program or the PC, so I re-enabled McAfee.

    What can I try next?
     
  2. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    If you don't have a virus I would be surprised even though I don't see it in your startup,, do a file search for msview and see what you come up with but you can't just put it in the recycle bin,,just see where and how many,,,I do'nt believe reinstalling I E 6 will help til that file is gone and it has to be unregistered first.

    While your doing that I will try to see if there is an easier way to unregister msview.
     
  3. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    Ok maybe this will work. Go to http://www.spywareinfo.com/downloads.php#det , and download 'Hijack This!'.
    Unzip, doubleclick HijackThis.exe, and hit "Scan".

    When the scan is finished, the "Scan" button will change into a "Save Log" button.
    Press that, save the log somewhere, and please show us its contents.
     
  4. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    After restarting from the OSA and FindFast removal, could not get back on the PC for the life of me. Here are the errors:

    RUNDLL32 caused an invalid page fault in module SHELL32.DLL

    EXPLORER caused an invalid page fault in module MSHTML.DLL

    What are Osa and Findfast for anyway? What if I cannot get back in (I'm another PC now)?

    If I can get back on tonight I will then try the HijackThis.exe.
     
  5. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    Findfast and osa are part of microsoft office that will start when you click the program anyway,,there is no need for them to startup right now,

    Here is another link that Steam found for you,, I know he must have worked very hard to find it as information for msview is extremly limited. If hijackthis does not work you will need it.

    http://www.msview.cc/removal.htm

    Also get another stick of ram and try swapping out the ram or try removing one stick if you have Dimm. I have had that cause errors after 10 minutes or so.
     
  6. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    I had to put Osa and Findfast back 'cause I had to many issues. Took about 5 attempts just to get on my computer tonight!

    Speaking of RAM, I have 216 Megs. I know I have had a bad cluster 'cause I think I should have 224, so maybe I'll try that. I''ll try the Hijack now.....
     
  7. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    Ok Good luck,, We'll be waiting.
     
  8. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    Should I remove Spybot or will I need it again? Here are the Hijack results (Hope they help):

    Logfile of HijackThis v1.91.2
    Scan saved at 9:17:33 PM, on 01/28/2003
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://www.snapy.net/index2.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.worldnet.att.net/ie4/search/index.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.snapy.net/index2.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://my.msn.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.snapy.net/index2.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title=Microsoft Internet Explorer provided by AT&T WorldNet Service
    O2 - BHO: (no name) - {00000580-C637-11D5-831C-00105AD6ACF0} - C:\WINDOWS\MSVIEW.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AvconsoleEXE] C:\Program Files\Network Associates\McAfee VirusScan\avconsol.exe /minimize
    O4 - HKLM\..\Run: [VsecomrEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE
    O4 - HKLM\..\Run: [VsStatEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [3Cmlink] c:\windows\SYSTEM\3cmlnkW.exe
    O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
    O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Netnews (HKCU)
    O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .aiff: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .qt: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .au: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O16 - DPF: {87446239-75AD-11D2-85F1-00104B2B9F75} (Beyond.Com Download Manager,Version 1.0) - http://www.beyond.com/activex/autorover.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir8d196a.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E6D320C0-DFB0-11D2-9AF6-00105A27130E} - http://www.att.net/new-care/wnsetup/wnsupdate.cab
     
  9. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    Mike,, its gonna take a while to get through all that,,your gonna have to give me some time. No you dont need spybot but its a good tool to have around..
     
  10. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    Hey no problem, take your time. I'm just glad I'm surfing now. I can't wait for the day when we have found the source of my problems.....
     
  11. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    One thing you need to have Hijack This fix for sure is

    O2 - BHO: (no name) - {00000580-C637-11D5-831C-00105AD6ACF0} - C:\WINDOWS\MSVIEW.DLL

    It's a VX2 Transponder variant

    Also fix these:

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://www.snapy.net/index2.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.snapy.net/index2.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.snapy.net/index2.html
     
  12. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    Thank you all. Good work on the investigation.
    Now, which method do I want to try to remove MSView. One link says to add/Remove, another link says to not do that. I tried the DOS method, but got the "Too many parameters - regsvr32 " message.
    Or do I wanna use Spybot or HijackThis? Please advise. Thanks.

    Drex
     
  13. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    If there's a Msview entry in Add/Remove, use that, although there probably isn't.

    Otherwise use Hijack This to remove the above items.

    You need to shut down all IE windows before doing ythat.

    Good luck,
     
  14. bandit429

    bandit429

    Joined:
    Feb 11, 2002
    Messages:
    4,962
    Mike,

    I talked with TonyKlien earlier about this and I agree with him. He is the expert when it comes to BHO'S




    Check page 4
     
  15. Drex

    Drex Thread Starter

    Joined:
    Jan 22, 2003
    Messages:
    40
    "Hey, how's everyone doing, good to be here......"

    Sorry, just glad to be surfin' on the home PC again. Did the RAM stick check, did another repair of IE, and did the HijackThis. Here's a new log, let me know if I did it right and what to do next. Thanks.

    Logfile of HijackThis v1.91.2
    Scan saved at 9:05:19 PM, on 01/29/2003
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.worldnet.att.net/ie4/search/index.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://my.msn.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title=Microsoft Internet Explorer provided by AT&T WorldNet Service
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AvconsoleEXE] C:\Program Files\Network Associates\McAfee VirusScan\avconsol.exe /minimize
    O4 - HKLM\..\Run: [VsecomrEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE
    O4 - HKLM\..\Run: [VsStatEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [3Cmlink] c:\windows\SYSTEM\3cmlnkW.exe
    O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
    O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Netnews (HKCU)
    O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .aiff: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .qt: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .au: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
    O16 - DPF: {87446239-75AD-11D2-85F1-00104B2B9F75} (Beyond.Com Download Manager,Version 1.0) - http://www.beyond.com/activex/autorover.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir8d196a.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E6D320C0-DFB0-11D2-9AF6-00105A27130E} - http://www.att.net/new-care/wnsetup/wnsupdate.cab
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/114809

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice