1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Ad-Aware SE Problems

Discussion in 'Virus & Other Malware Removal' started by wireguy, Jan 27, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. wireguy

    wireguy Thread Starter

    Joined:
    Sep 22, 2004
    Messages:
    332
    Every time I run Ad-Aware SE I get an explorer error message: Explorer caused an invalid page fault in module <unknown> at 0000:10043ca4.

    Registers:
    EAX=0154ff58 CS=015f EIP=10043ca4 EFLGS=00010246
    EBX=0154ff58 SS=0167 ESP=01510018 EBP=01510038
    ECX=015100bc DS=0167 ESI=81a21198 FS=21ef
    EDX=bff76859 ES=0167 EDI=015100e4 GS=0000
    Bytes at CS:EIP:

    Stack dump:
    bff7684d 015100e4 0154ff58 01510100 015100bc 015101f0 bff76859 0154ff58 015100cc bff87fc0 015100e4 0154ff58 01510100 015100bc 10043ca4 015102a8
    Any help is appreciated Thanks.
     
  2. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    Download AA again and update

    Run in safe mode
     
  3. wireguy

    wireguy Thread Starter

    Joined:
    Sep 22, 2004
    Messages:
    332
    I'll give it a try MFDnSC.
     
  4. wireguy

    wireguy Thread Starter

    Joined:
    Sep 22, 2004
    Messages:
    332
    I downloaded AA again,updated,and ran it in safe mode and got the same error message. Here is a log of hijackthis if this helps:

    Logfile of HijackThis v1.98.2
    Scan saved at 8:00:20 PM, on 01/28/2005
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
     
  5. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    I've seen 98 Gold but have no idea what it is and it could be the cause of the error. HJT isn't showing anthing and maybe that release is not suported -sorry
     
  6. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    I have 98 Gold and don't experience any problems with AA.

    Was that log made in Safe Mode? It's so bare.
     
  7. aarhus2004

    aarhus2004 Gone but always remembered

    Joined:
    Jan 9, 2004
    Messages:
    1,049
    That's what he said, Cheeseball81.
     
  8. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    Actually aarhus2004, he said he ran Ad-Aware in Safe Mode.
     
  9. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
  10. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    What value did this add???? Cheese is trying to help, your post did nothing!!!
     
  11. aarhus2004

    aarhus2004 Gone but always remembered

    Joined:
    Jan 9, 2004
    Messages:
    1,049
    My error, apologies.
     
  12. wireguy

    wireguy Thread Starter

    Joined:
    Sep 22, 2004
    Messages:
    332
    Here is another Hijackthis log with the 1.99 version:

    Logfile of HijackThis v1.99.0
    Scan saved at 5:51:52 PM, on 01/29/2005
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\WVUQKY.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\N20050308.EXE
    C:\PROGRAM FILES\STOP-THE-POP-UP\STOPTHEPOP.EXE
    C:\PROGRAM FILES\HIJACK\HIJACKTHIS.EXE

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O1 - Hosts: 69.20.16.183 auto.search.msn.com
    O1 - Hosts: 69.20.16.183 search.netscape.com
    O1 - Hosts: 69.20.16.183 ieautosearch
    O1 - Hosts: 69.20.16.183 ieautosearch
    O1 - Hosts: 69.20.16.183 ieautosearch
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [ntechin] C:\WINDOWS\N20050308.EXE
    O4 - HKLM\..\Run: [Narrator] C:\WINDOWS\wvuqky.exe
    O4 - Startup: hkgfny.exe
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
     
  13. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    Looks like a VX2 infection.

    We will need a Mod for this one.

    Hang tight (y)
     
  14. wireguy

    wireguy Thread Starter

    Joined:
    Sep 22, 2004
    Messages:
    332
    that is some quick response time!
     
  15. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    LOL :D

    I sent them a PM. One will assist you a.s.a.p!
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/324116

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice