(Solved) illegal operation

Everytime I leave my computer idle for about 4 minutes I get a window on it that says this program has performed an illegall operation and will be shut down. If I click details on that window it says " explorer caused an exception 6d007fh in module webcheck.dLL at 015F:78632599. It also shows a lot of numbers after that. If I just X out the window my screen saver goes away if I have it set for that short of time and my desk top reboots but when it does all my icons on the bottom right of my screen go away. I have to shut down and restart to get them back. This happens every time the computer is idle for about 4 minutes wether I have my screen saver on or not. Can any body help me on this? Thanks, buslou

 

Hi there - welcome to TSG.

Are you using Internet Explorer? What version? Try updating it and see if that solves the problem.

Take a look <a href="http://techkb.atxforms.com/atxkb.nsf/b6fcf5696c914a85852569b4007408fb/b6d33aae7cf5d4eb85256869006a6ae3?OpenDocument">here. </a>

Hope that helps.

 

HI buslou

check this :-

http://216.239.37.100/search?q=cach...6ae3?OpenDocument+webcheck.dLL&hl=en&ie=UTF-8

oops Jody beat me - looks like the same link

steam

 

Great minds think alike, steamwiz!

 

Thanks Jody & Steamwiz for trying to help, I have a Windows 98 system. How do I install internet explorer 5? I tried to download it from the internet but I couldn't find it. I did find internet explorer 6.0 and downloaded it but it did not help my problem at all. Any advice will be appreciated. Thanks, buslou:

 

Hi buslou

What version of internet explorer were you using ?

You are using version 6 now - right ?

If you post your startup list we may be able to spot something

Please post your startup list by doing the following :-

Please go here and download startuplist 1.51 :-

http://www.lurkhere.com/~nicefiles/startuplist151.zip

Download to any folder or your desktop
Unzip the zipfile
Double click the exe file
go to Edit - select all - copy - and paste the results in a new post here


steam

 

Hi Steamwiz,
I really don't know a lot about computers but I guess I must be operating on Microsoft Internet Explorer 6.0 because that is what I downloaded the other day. I would do what you asked if I could but I can't get the site you mentioned to open. I tried 4 times and it would not open. I tried 5 to 10 minutes each time. Any ideas why the page won't open?
Thanks,
buslou

 

Hi buslou

I've just checked the link above and it works ok - so the problem is with your computer - don't worry, every time you say you can't do a certain thing - it gives us a better idea of what the problem is.

If you can't double click the link - try right click "save target as" see if you can download it that way

steam

 

Steamwiz,
I right clicked the site like you said and the startuplist downloaded to my "C"drive. I see it showing but when I left click to open, it won't open. When I right click it, it just asks where I want to send it. You mentioned if I can open it to unzip the zip file and to double click the exe file. That I don't know about. Maybe I am not computer literate enough to fix this, but I will keep trying as long as you are willing to help. Everything I do I am learning.
Thanks, buslou

 

Do you have an unzipping program like winzip or winrar ?

you need one of these to unzip a file

If you do - right click and click "extract here" then follow the instructions in the above post

If not download winzip first

download the evaluation version it never runs out

from here :-

http://www.winzip.com/

I have to go off-line for a while now - I'll try to look back in later

good luck

steam

 

StartupList report, 1/26/03, 8:45:11 AM
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE
Detected: Windows 98 Gold (Win9x 4.10.1998)
Detected: Internet Explorer v5.00 (5.00.2314.1000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\TEXTBRIDGE PRO 8.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\HPZTSB05.EXE
C:\SIERRA\CARDSTUDIO\PLNRNOTE.EXE
C:\WINDOWS\TWAIN_32\1200UB\WATCH.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\PCI AUDIO APPLICATIONS\BIN\VXD\NOSPDIF\MIXER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Event Planner Reminders Tray Icon.lnk = C:\SIERRA\CardStudio\PLNRnote.exe
Watch.lnk = C:\WINDOWS\TWAIN_32\1200UB\WATCH.EXE
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
SystemTray = SysTray.Exe
AtiPTA = Atiptaxx.exe
CountrySelection = pctptt.exe
PTSNOOP = ptsnoop.exe
InstantAccess = C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
RegisterDropHandler = C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
HPDJ Taskbar Utility = C:\WINDOWS\SYSTEM\hpztsb05.exe
C-Media Mixer = C:\Program Files\PCI Audio Applications\Bin\AudioRack.exe /MixerStartup
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

ATIPOLAB = ati2evxx.exe
RegisterDropHandler = C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = C:\WINDOWS\SYSTEM\mstask.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ATI Launchpad =

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 18/1/2003, 10:52:46)

[rename]
DIRNUL=C:\WINDOWS\system\precopy
[NUL]
C:\WINDOWS\SYSTEM\DCOMREG.EXE=1

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

C:\VIAUDIO\VIAUDIO.COM
SET BLASTER=A220 I5 D1 P330

--------------------------------------------------


Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNPUPLD.DLL
CODEBASE = http://sc.communities.msn.com/controls/PhotoUC/MsnPUpld.cab

--------------------------------------------------
End of report, 4,436 bytes
Report generated in 0.741 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

Steamwiz,
Did I post that info right? Remember I am Learning here. I have done everthing you have said that I can figure out. Now what? Thanks for all your time so far. buslou

 

Hi buslou

Yes that's the startup i wanted to see - unfortunately it shows nothing that could be causing your problem.

According to your startup you are running ie 5.0 not ie 6.0
Detected: Internet Explorer v5.00 (5.00.2314.1000) - not a problem as such.

By this I presume you mean all the running processes in the systray (next to the clock )

When this happens can you please press Ctri-Alt-Del and make a list of what is there and post it here

Not that i see anything to suggest a virus - please go here and do an on-line scan anyway :-

http://housecall.trendmicro.com/

steam

 

Hello Steamwiz,
Yes it is the icons next to the clock except now the one for winzip quick pick stays there . When I pushed ctrl-alt-delete like you said a close program box came up. When I went to the site you had for me it came up ok but when I click on the U.S. and clicked go the page would not come up. Now what? Thanks for the time you are spending on my problem but it looks like I might have to live with it. The computer works ok as long as I don't walk away from it for more than 4 minutes. I will keep trying as long as you are willing to help. This problem is mostly just frustrating. buslou

 

and also do a scan here:http://scan.sygatetech.com/pretrojanscan.html
just in case.
ptsnoop is a program installed by some modems but can also be a backdoor.