(Solved) illegal operation

[buslou]

Everytime I leave my computer idle for about 4 minutes I get a window on it that says this program has performed an illegall operation and will be shut down. If I click details on that window it says " explorer caused an exception 6d007fh in module webcheck.dLL at 015F:78632599. It also shows a lot of numbers after that. If I just X out the window my screen saver goes away if I have it set for that short of time and my desk top reboots but when it does all my icons on the bottom right of my screen go away. I have to shut down and restart to get them back. This happens every time the computer is idle for about 4 minutes wether I have my screen saver on or not. Can any body help me on this? Thanks, buslou

 

[Yankee Rose]

Hi there - welcome to TSG.

Are you using Internet Explorer? What version? Try updating it and see if that solves the problem.

Take a look <a href="http://techkb.atxforms.com/atxkb.nsf/b6fcf5696c914a85852569b4007408fb/b6d33aae7cf5d4eb85256869006a6ae3?OpenDocument">here. </a>

Hope that helps.

 

[steamwiz]

HI buslou

check this :-

http://216.239.37.100/search?q=cach...6ae3?OpenDocument+webcheck.dLL&hl=en&ie=UTF-8

oops Jody beat me - looks like the same link

steam

 

[Yankee Rose]

Great minds think alike, steamwiz!

 

[buslou]

Thanks Jody & Steamwiz for trying to help, I have a Windows 98 system. How do I install internet explorer 5? I tried to download it from the internet but I couldn't find it. I did find internet explorer 6.0 and downloaded it but it did not help my problem at all. Any advice will be appreciated. Thanks, buslou:

 

[steamwiz]

Hi buslou

What version of internet explorer were you using ?

You are using version 6 now - right ?

If you post your startup list we may be able to spot something

Please post your startup list by doing the following :-

Please go here and download startuplist 1.51 :-

http://www.lurkhere.com/~nicefiles/startuplist151.zip

Download to any folder or your desktop
Unzip the zipfile
Double click the exe file
go to Edit - select all - copy - and paste the results in a new post here


steam

 

[buslou]

Hi Steamwiz,
I really don't know a lot about computers but I guess I must be operating on Microsoft Internet Explorer 6.0 because that is what I downloaded the other day. I would do what you asked if I could but I can't get the site you mentioned to open. I tried 4 times and it would not open. I tried 5 to 10 minutes each time. Any ideas why the page won't open?
Thanks,
buslou

 

[steamwiz]

Hi buslou

I've just checked the link above and it works ok - so the problem is with your computer - don't worry, every time you say you can't do a certain thing - it gives us a better idea of what the problem is.

If you can't double click the link - try right click "save target as" see if you can download it that way

steam

 

[buslou]

Steamwiz,
I right clicked the site like you said and the startuplist downloaded to my "C"drive. I see it showing but when I left click to open, it won't open. When I right click it, it just asks where I want to send it. You mentioned if I can open it to unzip the zip file and to double click the exe file. That I don't know about. Maybe I am not computer literate enough to fix this, but I will keep trying as long as you are willing to help. Everything I do I am learning.
Thanks, buslou

 

[steamwiz]

Do you have an unzipping program like winzip or winrar ?

you need one of these to unzip a file

If you do - right click and click "extract here" then follow the instructions in the above post

If not download winzip first

download the evaluation version it never runs out

from here :-

http://www.winzip.com/

I have to go off-line for a while now - I'll try to look back in later

good luck

steam

 

[buslou]

StartupList report, 1/26/03, 8:45:11 AM
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE
Detected: Windows 98 Gold (Win9x 4.10.1998)
Detected: Internet Explorer v5.00 (5.00.2314.1000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\TEXTBRIDGE PRO 8.0\BIN\INSTANTACCESS.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\HPZTSB05.EXE
C:\SIERRA\CARDSTUDIO\PLNRNOTE.EXE
C:\WINDOWS\TWAIN_32\1200UB\WATCH.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\PCI AUDIO APPLICATIONS\BIN\VXD\NOSPDIF\MIXER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Event Planner Reminders Tray Icon.lnk = C:\SIERRA\CardStudio\PLNRnote.exe
Watch.lnk = C:\WINDOWS\TWAIN_32\1200UB\WATCH.EXE
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
SystemTray = SysTray.Exe
AtiPTA = Atiptaxx.exe
CountrySelection = pctptt.exe
PTSNOOP = ptsnoop.exe
InstantAccess = C:\PROGRA~1\TEXTBR~1.0\BIN\INSTAN~1.EXE /h
RegisterDropHandler = C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
HPDJ Taskbar Utility = C:\WINDOWS\SYSTEM\hpztsb05.exe
C-Media Mixer = C:\Program Files\PCI Audio Applications\Bin\AudioRack.exe /MixerStartup
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

ATIPOLAB = ati2evxx.exe
RegisterDropHandler = C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = C:\WINDOWS\SYSTEM\mstask.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ATI Launchpad =

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 18/1/2003, 10:52:46)

[rename]
DIRNUL=C:\WINDOWS\system\precopy
[NUL]
C:\WINDOWS\SYSTEM\DCOMREG.EXE=1

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

C:\VIAUDIO\VIAUDIO.COM
SET BLASTER=A220 I5 D1 P330

--------------------------------------------------


Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNPUPLD.DLL
CODEBASE = http://sc.communities.msn.com/controls/PhotoUC/MsnPUpld.cab

--------------------------------------------------
End of report, 4,436 bytes
Report generated in 0.741 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[buslou]

Steamwiz,
Did I post that info right? Remember I am Learning here. I have done everthing you have said that I can figure out. Now what? Thanks for all your time so far. buslou

 

[steamwiz]

Hi buslou

Yes that's the startup i wanted to see - unfortunately it shows nothing that could be causing your problem.

According to your startup you are running ie 5.0 not ie 6.0
Detected: Internet Explorer v5.00 (5.00.2314.1000) - not a problem as such.

If I just X out the window my screen saver goes away if I have it set for that short of time and my desk top reboots but when it does all my icons on the bottom right of my screen go away.

By this I presume you mean all the running processes in the systray (next to the clock )

When this happens can you please press Ctri-Alt-Del and make a list of what is there and post it here

Not that i see anything to suggest a virus - please go here and do an on-line scan anyway :-

http://housecall.trendmicro.com/

steam

 

[buslou]

Hello Steamwiz,
Yes it is the icons next to the clock except now the one for winzip quick pick stays there . When I pushed ctrl-alt-delete like you said a close program box came up. When I went to the site you had for me it came up ok but when I click on the U.S. and clicked go the page would not come up. Now what? Thanks for the time you are spending on my problem but it looks like I might have to live with it. The computer works ok as long as I don't walk away from it for more than 4 minutes. I will keep trying as long as you are willing to help. This problem is mostly just frustrating. buslou

 

[$teve]

and also do a scan here:http://scan.sygatetech.com/pretrojanscan.html
just in case.
ptsnoop is a program installed by some modems but can also be a backdoor.