keep getting error and report error to ms after

Discussion in 'other software & services' started by Jerry666, Jan 3, 2003.

Thread Status:
Not open for further replies.
  1. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    shutting down ie 5.5 , running win 2000 . what can be causing this . it is agravating as hell . it all started after i visited a page that brought up 1000's of popup windows . i just shut down
    now i get error after shutting ie ??
    any ideas .
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi Jerry666,

    Best thing to do first is to clear your temporary internet files and the normal temp file.
    Then the next time you get that error click on details and post the info that gives you.
    If you keep having problems with popups, please download Hijackthis (Direct download link) and post the log it generates.
    If you are uncomfortable with posting it, feel free to IM or mail it to me.

    Regards,

    Pieter
     
  3. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    here are a few of the errors

    just 3 from hundreds !


    Event Type:   Error
    Event Source:   Microsoft Internet Explorer
    Event Category:   None
    Event ID:   1000
    Date:      1/4/2003
    Time:      1:07:34 AM
    User:      N/A
    Computer:   RALF
    Description:
    The description for Event ID ( 1000 ) in Source ( Microsoft Internet Explorer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: iexplore.exe, 5.51.4807.2300, unknown, 0.0.0.0, 0107c200.
    Data:
    0000: 41 70 70 6c 69 63 61 74 Applicat
    0008: 69 6f 6e 20 46 61 69 6c ion Fail
    0010: 75 72 65 20 20 69 65 78 ure iex
    0018: 70 6c 6f 72 65 2e 65 78 plore.ex
    0020: 65 20 35 2e 35 31 2e 34 e 5.51.4
    0028: 38 30 37 2e 32 33 30 30 807.2300
    0030: 20 69 6e 20 75 6e 6b 6e in unkn
    0038: 6f 77 6e 20 30 2e 30 2e own 0.0.
    0040: 30 2e 30 20 61 74 20 6f 0.0 at o
    0048: 66 66 73 65 74 20 30 31 ffset 01
    0050: 30 37 63 32 30 30 0d 0a 07c200..

    vent Type:   Error
    Event Source:   Microsoft Internet Explorer
    Event Category:   None
    Event ID:   1000
    Date:      9/25/2002
    Time:      12:23:03 AM
    User:      N/A
    Computer:   RALF
    Description:
    The description for Event ID ( 1000 ) in Source ( Microsoft Internet Explorer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: iexplore.exe, 5.51.4807.2300, wininet.dll, 5.50.4918.600, 000066cb.
    Data:
    0000: 41 70 70 6c 69 63 61 74 Applicat
    0008: 69 6f 6e 20 46 61 69 6c ion Fail
    0010: 75 72 65 20 20 69 65 78 ure iex
    0018: 70 6c 6f 72 65 2e 65 78 plore.ex
    0020: 65 20 35 2e 35 31 2e 34 e 5.51.4
    0028: 38 30 37 2e 32 33 30 30 807.2300
    0030: 20 69 6e 20 77 69 6e 69 in wini
    0038: 6e 65 74 2e 64 6c 6c 20 net.dll
    0040: 35 2e 35 30 2e 34 39 31 5.50.491
    0048: 38 2e 36 30 30 20 61 74 8.600 at
    0050: 20 6f 66 66 73 65 74 20 offset
    0058: 30 30 30 30 36 36 63 62 000066cb
    0060: 0d 0a ..


    Event Type:   Error
    Event Source:   Microsoft Internet Explorer
    Event Category:   None
    Event ID:   1000
    Date:      10/1/2002
    Time:      9:05:30 PM
    User:      N/A
    Computer:   RALF
    Description:
    The description for Event ID ( 1000 ) in Source ( Microsoft Internet Explorer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: iexplore.exe, 5.51.4807.2300, vsapi32.dll, 6.150.0.1001, 0004d99a.
    Data:
    0000: 41 70 70 6c 69 63 61 74 Applicat
    0008: 69 6f 6e 20 46 61 69 6c ion Fail
    0010: 75 72 65 20 20 69 65 78 ure iex
    0018: 70 6c 6f 72 65 2e 65 78 plore.ex
    0020: 65 20 35 2e 35 31 2e 34 e 5.51.4
    0028: 38 30 37 2e 32 33 30 30 807.2300
    0030: 20 69 6e 20 76 73 61 70 in vsap
    0038: 69 33 32 2e 64 6c 6c 20 i32.dll
    0040: 36 2e 31 35 30 2e 30 2e 6.150.0.
    0048: 31 30 30 31 20 61 74 20 1001 at
    0050: 6f 66 66 73 65 74 20 30 offset 0
    0058: 30 30 34 64 39 39 61 0d 004d99a.
    0060: 0a .
     
  4. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,877
    Location:
    New England
    Jerry,

    I'm wondering if you've tried to do a Repair on Internet Explorer? In Control Panel > Add/Remove Programs > select "Microsoft Internet Explorer 5.5 and Internet Tools" and do "Add/Remove" (might be "Change/Remove" on W2K). There's is an option on the next screen that comes up to "Repair" IE, rather than actually removing it.

    It's possible if you just shutdown your system to stop all those pop-ups that it was damaged somehow.

    Just a thought,
    LowWaterMark
     
  5. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    can't , no ie5 shows up in add remove . tried going through explorer and reinstalling , did no good . still happens .
     
  6. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    Hi Jerry666,

    This is a quote from: AT&T Help

    Alternate fix to repair Microsoft Internet Explorer 5.x for Windows 2000:

    From the Start menu, choose Run.
    In the Run window, type rundll32 setupwbv.dll,IE5Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g "C:\WINNT\IE Uninstall Log.Txt" Note: The command is case-sensitive.
    Choose the OK button.
    Select the Repair Internet Explorer option and choose the OK button.
    Choose the Yes button to continue with the repair.
    Restart the computer when you are prompted and allow the computer to configure Microsoft Internet Explorer.

    Instead of typing the command, I would recommend copy & paste ;)

    Please try and see if that helps.

    Regards,

    Pieter
     
  7. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    Iexplore/Unknown page faults are often due to conflicts with internet related applications, and this routinely means spyware.

    Would you please follow up on Pieter's advice and post a Hijack This log?

    That will help us to either rule out that possibility, or hopefully to pinpoint the cause of the problem.
     
  8. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    here is thelog from highjack this . noithing looks out of place . i keep a clean comp , no scripting active-x or java running , jusy ay win updates . maybe you can find the culprit .
     
  9. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    and i tried the above att+t alternate fix , no luck , but thanks good trick !
     
  10. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    You're right. That looks pretty clean to me.

    You could try unchecking "enable third party browser extensions" in Internet Options > Advanced, to see whether one of your BHOs could possibly be causing this.

    As for repairing IE, do I understand correctly that you did re-install Internet Explorer?

    Also, please go to IE > Help > About IE, and tell us the Version info you see there.
     
  11. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    yes i went through explorer and clicked instal to reinstall

    version 5.50/4807.2300
     
  12. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    I'm sorrty, but I fail to understand what you mean by that.

    If you want to re-install Internet Explorer, either go to the Windows Update site, find the version of IE you need, and install it,'or, in case you have the Internet Explorer cabs on your hard drive, find your "Windows Update Setup Files" folder, locate Ie5setup.exe, and doubleclick that in order to redo the install.

    Did you do one of those things, and if so, which one exactly?

    And We still don't know the exact version info either.
     
  13. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    went to explorer>programs > ie > w2k >double clicked on
    expinst that or ie uninstall double clicked w2kexcp , not sure which i did , but it did reinstall ie with an older version of 5.5 , had to run update to get service packs

    version is 5.50.4807.2300 , are there other #'s you would need ?

    thanks again .
     
  14. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    I´m wondering about one more thing:

    Event ID 1000 seems related to roaming user profiles and behind user it reads N/A
    Did the error report state that originally or did you change that for privacy reasons?

    Regards,

    Pieter
     
  15. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    no i changed nothing . i'm not that paranoid . what you see is what i got .

    thanks guys , this is driving me insane !
     
  16. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    In that case I´ve got a lead but not the foggiest what to do with that yet.

    This is what I mean: The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. That is from your error reports.
    Do you have a passworded Administrator account that is not used by default. If so: try rebooting and log in under that account. I´d like to know if IE works for you then.

    Regards,

    Pieter
     
  17. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    good idea ! tried alkl accounts , no luck ! maybe if i keep sending error reports to MS they will fix it , that or send a hit team to my house .
     
  18. sk

    sk Registered Member

    Joined:
    Nov 19, 2002
    Posts:
    241
    Hi, Jerry. I could be way off on this one, but since it sounds like you've tried everything else, I figured it wouldn't hurt to ask: Did you by any chance happen to install the MS Update #329170? I have read on other threads where installing this update wreaks havoc with shutdowns, and uninstalling it provides the fix. There are several threads on other forums that discuss it in more detail. I'll post some here just in case:

    http://www.broadbandreports.com/forum/remark,5312830~root=winme~mode=flat

    http://www.broadbandreports.com/forum/remark,5394543~root=winme~mode=flat

    Hope it helps.

    (NOTE: I've found sometimes with these links that in order to actually get to the site you might need to highlight the entire link, then copy/cut/paste into your address bar.)

    sk

    Hi SK. Try using URL tags likes these before and afetr the link. Some links are broken because of ; and ~ signs in them. There may be more, but these two ruin links to MS Knowledgebase and DSLR. Pieter
     
  19. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    yes i got rid of that , did not like the 60sec shutdown delay . oh well looks like reinstall os time !!
     
  20. controler

    controler Guest

    You might have an application that is causing this and could try shutting them down one by one.

    I for one have tried using the repair feature for IE and found if you have a fast internet connection, downloading IE completly new id the only way to sometimes fix it.
    I don't mean download the small IE file you usualy get and then after clicking on that file it starts the main download. I mean download the entire 12 meg file. If this don't work you may have damaged a Windows System file. Those dang porn sites AND Warez are good for
    smashing you with popups :mad:
     
  21. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    well i shut down ie 2 times , no error report o_Oo_O?? go figure i threaten to install os it fixes itself ??
     
  22. controler

    controler Guest

    Maybe you shut off the feature to show the report screen in the mean time ? o_O
     
  23. sk

    sk Registered Member

    Joined:
    Nov 19, 2002
    Posts:
    241
    Well, like you say: Yabbba Dabba Doo!! Hope it keeps up!

    sk
     
  24. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    74
    but look at what was just found !!!!! whats this !!!! could it be a false positive ?

    Registry scan
    No suspicious entries found
    Inifile scan
    No suspicious entries found
    Port scan
    Port 1784/TCP is open (matches Snid.120)
    Port 1784/TCP is open (matches Snid.212)
    Memory scan
    No trojans found in memory
    File scan (autostarted files, running executables)
    While scanning C:\WINNT\system32\NeroCheck.exe: File C:\Program Files\Winamp\Winampa.exe not found
    No trojan files found
     
  25. sk

    sk Registered Member

    Joined:
    Nov 19, 2002
    Posts:
    241
    Woah, there, Freddy - looks like your 1784 is wide open. I don't know about that one. Wouldn't want Dino to be running out any open port. I remember when something like that that happened to Wilma's pet stegasoris. Sure wouldn't want that to happen to good ol Dino!

    sik

    ;)

    (And what's up with that Snid, anyway?) ISS shows it as High Risk
    http://www.iss.net/security_center/static/5356.php
     
Loading...
Thread Status:
Not open for further replies.