Author Topic: Anyone have any idea what this means and how to fix it... (Read 733 times)

leonjr1964 · « **on:** November 15, 2006, 02:38:25 AM »

For the past couple of weeks I've been getting the following "Range Check Error" message, while in Windows Explorer. Then, windows explorer shuts down and prompts me to send the message to microcrap. Thier online crash analysis is less than helpful (I can copy/paste the text of that page the next time it happens if I need to). I am able to restart windows explorer, and continue what I was doing for a little while before the error message comes up as soon as I am in Win Exp. I have also been receiving a couple different errors while using IE ("Out of system resources >>1713 >>1711 >>152 >>120" and "The handle is invalid. >>1713 >>1711 >>152 >>120"). I can post them as well if they will help. Here is the complete text of the Range Check Error:

EurekaLog 4.6.4

Application:
-------------------------------------------------------
1.1 Start Date : Tue, 14 Nov 2006 00:12:59 -0600
1.2 Name/Description: Windows Explorer
1.3 Version Number : 6.0.2800.1221
1.4 Parameters :

Exception:
----------------------------------------------
2.1 Date : Tue, 14 Nov 2006 00:13:06 -0600
2.2 Address: 039D30F4
2.3 Module : FORMFI~1.DLL
2.4 Type : ERangeError
2.5 Message: Range check error.

Active Controls:
----------------------------------
3.1 Form Class : CabinetWClass
3.2 Form Text : My Documents
3.3 Control Class:
3.4 Control Text :

Computer:
-------------------------------------
4.1 Name : DESKTOP
4.2 User : Leon S Allgood Jr
4.3 Total Memory: 1023 Mb
4.4 Free Memory : 286 Mb
4.5 Total Disk : 56.03 Gb
4.6 Free Disk : 14.88 Gb

Operating System:
---------------------------------------
5.1 Type : Microsoft Windows XP
5.2 Build # : 2600
5.3 Update : Service Pack 1
5.4 Language: English (United States)

Call Stack Information:
------------------------------------------------------------------------------------------
|Address |Module |Unit |Class |Procedure/Method |Line|
------------------------------------------------------------------------------------------
|039D30F4|FORMFI~1.DLL|FFAuthAgent.pas|TAuthAgentList|NotifyCreate |215 |
|03853D28|FORMFI~1.DLL|system.pas | |_BoundErr |8266|
|039D30F4|FORMFI~1.DLL|FFAuthAgent.pas|TAuthAgentList|NotifyCreate |215 |
|03852C82|FORMFI~1.DLL|system.pas | |ErrorAt |3016|
|03853D28|FORMFI~1.DLL|system.pas | |_BoundErr |8266|
|039D30F4|FORMFI~1.DLL|FFAuthAgent.pas|TAuthAgentList|NotifyCreate |215 |
|039D3098|FORMFI~1.DLL|FFAuthAgent.pas|TAuthAgentList|NotifyCreate |208 |
|039D2DBA|FORMFI~1.DLL|FFAuthAgent.pas| |MyCallWndRetProc |106 |
|77D48579|USER32.dll | | |IsCharAlphaNumericA | |
|77F5B2A0|ntdll.dll | | |RtlEnterCriticalSection | |
|77F5B380|ntdll.dll | | |RtlLeaveCriticalSection | |
|77F5ABE4|ntdll.dll | | |RtlUnicodeToMultiByteN | |
|77F5ABB0|ntdll.dll | | |RtlUnicodeStringToAnsiString | |
|77FB15BC|ntdll.dll | | |RtlExtendedIntegerMultiply | |
|77D4EED0|USER32.dll | | |CallNextHookEx | |
|77D5053B|USER32.dll | | |AdjustWindowRectEx | |
|77F7E424|ntdll.dll | | |RtlImageDirectoryEntryToData | |
|77D4DA45|USER32.dll | | |CreateWindowExW | |
|7CD2F319|SHELL32.dll | | |SHGetSetSettings | |
|77D48579|USER32.dll | | |IsCharAlphaNumericA | |
|77D4A53C|USER32.dll | | |DefWindowProcW | |
|77D4BE37|USER32.dll | | |GetClassLongW | |
|77D48579|USER32.dll | | |IsCharAlphaNumericA | |
|77D4BE40|USER32.dll | | |GetClassLongW | |
|77D4C875|USER32.dll | | |SetPropW | |
|77F6F7DD|ntdll.dll | | |RtlActivateActivationContextEx| |
|77F6F792|ntdll.dll | | |RtlActivateActivationContextEx| |
|77F6FD7E|ntdll.dll | | |RtlActivateActivationContext | |
|77E7A032|kernel32.dll| | |ActivateActCtx | |
|77DD1B4E|ADVAPI32.dll| | |RegOpenKeyExW | |
|77D4DA45|USER32.dll | | |CreateWindowExW | |
|77D48C2F|USER32.dll | | |GetWindowLongA | |
|77F59BA7|ntdll.dll | | |RtlAcquirePebLock | |
|77F59BAE|ntdll.dll | | |RtlAcquirePebLock | |
|77F85924|ntdll.dll | | |RtlEqualUnicodeString | |
|77F8EBA0|ntdll.dll | | |RtlQueryEnvironmentVariable_U | |
|77F59BF6|ntdll.dll | | |RtlReleasePebLock | |
|77F8EB36|ntdll.dll | | |RtlQueryEnvironmentVariable_U | |
|77F89D81|ntdll.dll | | |RtlExpandEnvironmentStrings_U | |
|77E78FFC|kernel32.dll| | |ExpandEnvironmentStringsW | |
|77E69104|kernel32.dll| | |CompareStringW | |
|7C342184|MSVCR71.dll | | |free | |
|7C34218A|MSVCR71.dll | | |free | |
|77F93889|ntdll.dll | | |RtlNtStatusToDosErrorNoTeb | |
|77E697D2|kernel32.dll| | |lstrlenW | |
|77E697DD|kernel32.dll| | |lstrlenW | |
|7C342184|MSVCR71.dll | | |free | |
|7C34218A|MSVCR71.dll | | |free | |
|7C342184|MSVCR71.dll | | |free | |
|7C34218A|MSVCR71.dll | | |free | |
|7C342184|MSVCR71.dll | | |free | |
|7C34218A|MSVCR71.dll | | |free | |
|77DD1854|ADVAPI32.dll| | |RegCloseKey | |
|77E6AD00|kernel32.dll| | |lstrcpyW | |
|77E6AD0C|kernel32.dll| | |lstrcpyW | |
|7CD2D581|SHELL32.dll | | |SHAlloc | |
|7CD2D59E|SHELL32.dll | | |ILClone | |
|03852134|FORMFI~1.DLL|GETMEM.INC | |InsertFree |787 |
|03852829|FORMFI~1.DLL|GETMEM.INC | |SysFreeMem |1135|
|77F5B380|ntdll.dll | | |RtlLeaveCriticalSection | |
|03852851|FORMFI~1.DLL|GETMEM.INC | |SysFreeMem |1139|
|77E689C9|kernel32.dll| | |WaitForSingleObjectEx | |
|7CD2F23B|SHELL32.dll | | |SHGetFolderPathW | |
|7CD2F1C1|SHELL32.dll | | |SHGetFolderPathW | |
|77F5AD8B|ntdll.dll | | |RtlFreeAnsiString | |
|77DD236E|ADVAPI32.dll| | |RegOpenKeyExA | |
|70A75584|SHLWAPI.dll | | |wvnsprintfA | |
|7CD2C9E1|SHELL32.dll | | |SHFree | |
|7CD2C9F0|SHELL32.dll | | |ILFree | |
|77D48579|USER32.dll | | |IsCharAlphaNumericA | |
|77FA3ED0|ntdll.dll | | |memmove | |
|77F59BF6|ntdll.dll | | |RtlReleasePebLock | |
|77F59BEA|ntdll.dll | | |RtlReleasePebLock | |
|77F5BB82|ntdll.dll | | |ZwOpenFile | |
|77F5C4F2|ntdll.dll | | |NtUnmapViewOfSection | |
|77F5C4E8|ntdll.dll | | |NtUnmapViewOfSection | |
|77D4DA45|USER32.dll | | |CreateWindowExW | |
|77F6034E|ntdll.dll | | |LdrUnlockLoaderLock | |
|77F93889|ntdll.dll | | |RtlNtStatusToDosErrorNoTeb | |
|77F7E457|ntdll.dll | | |RtlImageDirectoryEntryToData | |
|77F7E424|ntdll.dll | | |RtlImageDirectoryEntryToData | |
|77F77C88|ntdll.dll | | |LdrFindResource_U | |
|77F77C6E|ntdll.dll | | |LdrAccessResource | |
|77E6A045|kernel32.dll| | |LoadResource | |
|77E6A05C|kernel32.dll| | |LoadResource | |
|77D4CE1A|USER32.dll | | |LoadStringW | |
|77D49A14|USER32.dll | | |ClientThreadSetup | |
|77F57BAE|ntdll.dll | | |RtlAllocateHeap | |
|77F6F7DD|ntdll.dll | | |RtlActivateActivationContextEx| |
|77F6F792|ntdll.dll | | |RtlActivateActivationContextEx| |
|77F6FD7E|ntdll.dll | | |RtlActivateActivationContext | |
|77E7A032|kernel32.dll| | |ActivateActCtx | |
------------------------------------------------------------------------------------------

Modules Information:
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Handle |Name |Description |Version |Size |Path |
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|00D80000|PDFShell.dll |PDF Shell Extension |7.0.0.0 |110592 |C:\Program Files\Adobe\Acrobat 7.0\ActiveX |
|01000000|Explorer.EXE |Windows Explorer |6.0.2800.1221 |996352 |C:\WINDOWS |
|013A0000|PT_FilterLinks.dll | |3.0.0.0 |45122 |C:\Plug Ins |
|018B0000|MSCTF.dll |MSCTF Server DLL |5.1.2600.1106 |266752 |C:\WINDOWS\System32 |
|02ED0000|NeroDigitalExt.dll |Nero Digital Shell Extension |1.1.1.1 |1515520|C:\Program Files\Common Files\Ahead\Lib |
|03650000|erasext.dll |Eraser Shell Extension. |5.7.0.0 |221184 |C:\UTILIT~1\Eraser |
|03850000|FORMFI~1.DLL | |2.2.4.0 |868352 |C:\PROGRA~1\INETFO~1 |
|03B10000|ERASER.dll |Eraser Library. |5.7.0.0 |458752 |C:\WINDOWS\System32 |
|0F000000|pavoepl.dll |Outlook Express Integration |6.3.1.0 |102400 |C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security |
|0FFD0000|rsaenh.dll |Microsoft Base Cryptographic Provider |5.1.2600.1029 |133632 |C:\WINDOWS\System32 |
|10000000|AcroIEHelper.dll |Adobe Acrobat IE Helper Version 7.0 for ActiveX |7.0.0.1333 |63136 |C:\Program Files\Adobe\Acrobat 7.0\ActiveX |
|11000000|PT_CancelPopups.dll| |3.0.0.0 |28735 |C:\Plug Ins |
|1A400000|urlmon.dll |OLE32 Extensions for Win32 |6.0.2800.1572 |461824 |C:\WINDOWS\system32 |
|4FEC0000|ole32.dll |Microsoft OLE for Windows |5.1.2600.1720 |1190400|C:\WINDOWS\system32 |
|50060000|TpUtil.dll |TpUtil Dynamic Link Library |7.0.0.0 |131072 |C:\WINDOWS\System32 |
|50260000|PAVSHOOK.DLL |PavSHook Dynamic Link Library |7.0.0.0 |258048 |C:\WINDOWS\SYSTEM32 |
|50460000|pavipc.dll |PavIpc Dynamic Link Library |7.0.0.0 |61440 |C:\WINDOWS\System32 |
|559E0000|themeui.dll |Windows Theme API |6.0.2800.1106 |384000 |C:\WINDOWS\System32 |
|5AD70000|UxTheme.dll |Microsoft UxTheme Library |6.0.2800.1106 |203264 |C:\WINDOWS\System32 |
|5EDD0000|OLEPRO32.DLL |Microsoft ® OLE Property Support DLL |5.0.5014.0 |106496 |C:\WINDOWS\System32 |
|605D0000|mslbui.dll |LangageBar Add In |5.1.2600.1106 |22528 |C:\WINDOWS\System32 |
|60B30000|uwinapi.dll | |8.0.0.8975 |98304 |C:\Program Files\OpenOffice.org 2.0\program |
|62410000|stlport_vc7145.dll |STLport |4.5.2003.120 |577536 |C:\Program Files\OpenOffice.org 2.0\program |
|62860000|shlxthdl.dll | |8.0.0.8976 |311296 |C:\Program Files\OpenOffice.org 2.0\program |
|63000000|WININET.dll |Internet Extensions for Win32 |6.0.2800.1559 |575488 |C:\WINDOWS\system32 |
|66000000|MSVBVM60.DLL |Visual Basic Virtual Machine |6.0.97.82 |1386496|C:\WINDOWS\System32 |
|66600000|systools.dll |SYSTOOLS |2.0.0.0 |102400 |C:\WINDOWS\System32 |
|67110000|icm32.dll |Microsoft Color Management Module (CMM) |5.1.2600.1710 |237056 |C:\WINDOWS\System32 |
|6D600000|ssv.dll |Java(tm) 2 Platform Standard Edition binary |5.0.60.5 |184423 |C:\Program Files\Java\jre1.5.0_06\bin |
|70A70000|SHLWAPI.dll |Shell Light-weight Utility Library |6.0.2800.1740 |409088 |C:\WINDOWS\system32 |
|70D00000|gdiplus.dll |Microsoft GDI+ |5.1.3102.1360 |1638400|C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47 |
|71500000|BROWSEUI.dll |Shell Browser UI Library |6.0.2800.1692 |1017856|C:\WINDOWS\System32 |
|71700000|SHDOCVW.dll |Shell Doc Object and Control Library |6.0.2800.1849 |1339904|C:\WINDOWS\System32 |
|71950000|comctl32.dll |User Experience Controls Library |6.0.2800.1873 |925184 |C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1873_x-ww_7d39bb85|
|71AA0000|WS2HELP.dll |Windows Socket 2.0 Helper for Windows NT |5.1.2600.0 |18944 |C:\WINDOWS\system32 |
|71AB0000|WS2_32.dll |Windows Socket 2.0 32-Bit DLL |5.1.2600.1847 |70656 |C:\WINDOWS\system32 |
|71AD0000|wsock32.dll |Windows Socket 32-Bit DLL |5.1.2600.0 |21504 |C:\WINDOWS\System32 |
|71B20000|MPR.dll |Multiple Provider Router DLL |5.1.2600.0 |55808 |C:\WINDOWS\system32 |
|71BF0000|SAMLIB.dll |SAM Library DLL |5.1.2600.1106 |54784 |C:\WINDOWS\System32 |
|71C10000|ntlanman.dll |MicrosoftÂ® Lan Manager |5.1.2600.1106 |38400 |C:\WINDOWS\System32 |
|71C20000|netapi32.dll |Net Win32 API DLL |5.1.2600.1874 |307200 |C:\WINDOWS\System32 |
|71C80000|NETRAP.dll |Net Remote Admin Protocol DLL |5.1.2600.0 |10752 |C:\WINDOWS\System32 |
|71C90000|NETUI1.dll |NT LM UI Common Code - Networking classes |5.1.2600.0 |230400 |C:\WINDOWS\System32 |
|71CD0000|NETUI0.dll |NT LM UI Common Code - GUI Classes |5.1.2600.0 |74752 |C:\WINDOWS\System32 |
|72430000|browselc.dll |Shell Browser UI Library |6.0.2800.1106 |62976 |C:\WINDOWS\System32 |
|72D10000|msacm32.drv |Microsoft Sound Mapper |5.1.2600.0 |20480 |C:\WINDOWS\System32 |
|72D20000|wdmaud.drv |WDM Audio driver mapper |5.1.2600.0 |22016 |C:\WINDOWS\System32 |
|73000000|WINSPOOL.DRV |Windows Spooler Driver |5.1.2600.1106 |132096 |C:\WINDOWS\System32 |
|73B30000|mscms.dll |Microsoft Color Matching System DLL |5.1.2600.1710 |68608 |C:\WINDOWS\System32 |
|745E0000|msi.dll |Windows Installer |3.1.4000.2435 |2890240|C:\WINDOWS\System32 |
|74AD0000|POWRPROF.dll |Power Profile Helper DLL |6.0.2600.0 |14848 |C:\WINDOWS\System32 |
|74AE0000|CFGMGR32.dll |Configuration Manager Forwarder DLL |5.1.2600.0 |16896 |C:\WINDOWS\System32 |
|74AF0000|BatMeter.dll |Battery Meter Helper DLL |6.0.2600.0 |27136 |C:\WINDOWS\System32 |
|74B00000|stobject.dll |Systray shell service object |5.1.2600.1106 |117760 |C:\WINDOWS\System32 |
|74B30000|webcheck.dll |Web Site Monitor |6.0.2800.1106 |258048 |C:\WINDOWS\System32 |
|74B80000|printui.dll |Print UI DLL |5.1.2600.1106 |522240 |C:\WINDOWS\System32 |
|75A70000|USERENV.dll |Userenv |5.1.2600.1106 |667136 |C:\WINDOWS\system32 |
|75CF0000|NETSHELL.dll |Network Connections Shell |5.1.2600.1254 |1630208|C:\WINDOWS\system32 |
|75E90000|SXS.DLL |Fusion 2.5 |5.1.2600.1579 |700928 |C:\WINDOWS\System32 |
|75F40000|appHelp.dll |Application Compatibility Client Library |5.1.2600.1106 |115712 |C:\WINDOWS\system32 |
|75F60000|drprov.dll |Microsoft Terminal Server Network Provider |5.1.2600.0 |11776 |C:\WINDOWS\System32 |
|75F70000|davclnt.dll |Web DAV Client DLL |5.1.2600.0 |22016 |C:\WINDOWS\System32 |
|76170000|shdoclc.dll |Shell Doc Object and Control Library |6.0.2600.0 |548864 |C:\WINDOWS\System32 |
|762A0000|MSASN1.dll |ASN.1 Runtime APIs |5.1.2600.1362 |51712 |C:\WINDOWS\system32 |
|762C0000|CRYPT32.dll |Crypto API32 |5.131.2600.1123|544256 |C:\WINDOWS\system32 |
|76360000|WINSTA.dll |Winstation Library |5.1.2600.1106 |48128 |C:\WINDOWS\System32 |
|76380000|MSIMG32.dll |GDIEXT Client DLL |5.1.2600.1106 |4608 |C:\WINDOWS\System32 |
|763B0000|comdlg32.dll |Common Dialogs DLL |6.0.2800.1106 |258048 |C:\WINDOWS\system32 |
|76600000|CSCDLL.dll |Offline Network Agent |5.1.2600.1599 |92160 |C:\WINDOWS\System32 |
|76620000|cscui.dll |Client Side Caching UI |5.1.2600.1106 |307712 |C:\WINDOWS\System32 |
|76670000|SETUPAPI.dll |Windows Setup API |5.1.2600.1106 |932864 |C:\WINDOWS\System32 |
|76980000|LINKINFO.dll |Windows Volume Tracking |5.1.2600.1740 |16384 |C:\WINDOWS\System32 |
|76990000|ntshrui.dll |Shell extensions for sharing |5.1.2600.1106 |137216 |C:\WINDOWS\System32 |
|76B20000|ATL.DLL |ATL Module for Windows NT (Unicode) |3.0.9435.0 |74810 |C:\WINDOWS\System32 |
|76B40000|WINMM.dll |MCI API DLL |5.1.2600.1106 |171520 |C:\WINDOWS\System32 |
|76BF0000|PSAPI.DLL |Process Status Helper |5.1.2600.1106 |17408 |C:\WINDOWS\System32 |
|76C00000|credui.dll |Credential Manager User Interface |5.1.2600.1106 |158720 |C:\WINDOWS\system32 |
|76C30000|WINTRUST.dll |Microsoft Trust Verification APIs |5.131.2600.0 |166912 |C:\WINDOWS\System32 |
|76C90000|IMAGEHLP.dll |Windows NT Image Helper |5.1.2600.1106 |126976 |C:\WINDOWS\system32 |
|76CE0000|NTMARTA.DLL |Windows NT MARTA provider |5.1.2600.1106 |112128 |C:\WINDOWS\System32 |
|76D60000|iphlpapi.dll |IP Helper API |5.1.2600.1847 |83456 |C:\WINDOWS\system32 |
|76E10000|adsldpc.dll |ADs LDAP Provider C DLL |5.1.2600.1106 |139776 |C:\WINDOWS\System32 |
|76E40000|ACTIVEDS.dll |ADs Router Layer DLL |5.1.2600.0 |181760 |C:\WINDOWS\System32 |
|76F50000|WTSAPI32.dll |Windows Terminal Server SDK APIs |5.1.2600.1106 |17408 |C:\WINDOWS\System32 |
|76F60000|WLDAP32.dll |Win32 LDAP API DLL |5.1.2600.1106 |168448 |C:\WINDOWS\system32 |
|76F90000|Secur32.dll |Security Support Provider Interface |5.1.2600.1106 |52224 |C:\WINDOWS\System32 |
|77050000|COMRes.dll | |2001.12.4414.42|792064 |C:\WINDOWS\System32 |
|77120000|OLEAUT32.dll |Microsoft OLE 3.50 for Windows NT(tm) and Windows 95(tm) Operating Systems|3.50.5016.0 |569344 |C:\WINDOWS\system32 |
|77340000|comctl32.dll |Common Controls Library |5.82.2800.1106 |557056 |C:\WINDOWS\system32 |
|77BD0000|midimap.dll |Microsoft MIDI Mapper |5.1.2600.0 |17920 |C:\WINDOWS\System32 |
|77BE0000|MSACM32.dll |Microsoft ACM Audio Filter |5.1.2600.0 |67072 |C:\WINDOWS\System32 |
|77C00000|VERSION.dll |Version Checking and File Installation Libraries |5.1.2600.0 |16384 |C:\WINDOWS\system32 |
|77C10000|msvcrt.dll |Windows NT CRT DLL |7.0.2600.1106 |323072 |C:\WINDOWS\system32 |
|77D40000|USER32.dll |Windows XP USER API Client DLL |5.1.2600.1634 |561152 |C:\WINDOWS\system32 |
|77DD0000|ADVAPI32.dll |Advanced Windows 32 Base API |5.1.2600.1106 |558080 |C:\WINDOWS\system32 |
|77E60000|kernel32.dll |Windows NT BASE API Client DLL |5.1.2600.1869 |928768 |C:\WINDOWS\system32 |
|77F50000|ntdll.dll |NT Layer DLL |5.1.2600.1217 |654336 |C:\WINDOWS\System32 |
|78000000|RPCRT4.dll |Remote Procedure Call Runtime |5.1.2600.1361 |535552 |C:\WINDOWS\system32 |
|7C140000|MFC71.DLL |MFCDLL Shared Library - Retail Version |7.10.3077.0 |1060864|C:\Program Files\Common Files\Ahead\Lib |
|7C340000|MSVCR71.dll |MicrosoftÂ® C Runtime Library |7.10.3052.4 |348160 |C:\WINDOWS\System32 |
|7C3A0000|MSVCP71.dll |MicrosoftÂ® C++ Runtime Library |7.10.3077.0 |499712 |C:\WINDOWS\System32 |
|7C890000|CLBCATQ.DLL | |2001.12.4414.62|497152 |C:\WINDOWS\System32 |
|7CD00000|SHELL32.dll |Windows Shell Common Dll |6.0.2800.1873 |8353280|C:\WINDOWS\system32 |
|7F000000|GDI32.dll |GDI Client DLL |5.1.2600.1789 |260608 |C:\WINDOWS\system32 |
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Registers:
-----------------------------
EAX: 034B876C EDI: 00000000
EBX: 00000004 ESI: 039D30F9
ECX: 00000024 ESP: 0374CCF8
EDX: 039D30F9 EIP: 039D30F4

Stack: Memory Dump:
------------------ ---------------------------------------------------------------------------
0374CCF8: 03A18270 039D30F4: E8 2F 0C E8 FF 50 6A 00 68 37 04 00 00 8B 45 F4 ./...Pj.h7....E.
0374CCFC: 034B876C 039D3104: E8 6F 68 F3 FF 50 E8 75 53 E8 FF EB 08 FF 45 F0 .oh..P.uS.....E.
0374CD00: 039D30F9 039D3114: FF 4D E8 75 B5 8B E5 5D C3 8D 40 00 55 8B EC 83 .M.u...][email protected]...
0374CD04: 04000000 039D3124: C4 EC 89 55 F8 89 45 FC 8B 45 FC 8B 40 04 8B 40 ...U..E..E..@..@
0374CD08: 0374CD34 039D3134: 08 83 E8 01 71 05 E8 F1 0B E8 FF 85 C0 7C 4B 40 ....q........|K@
0374CD0C: 03852C88 039D3144: 89 45 EC C7 45 F0 00 00 00 00 8B 45 FC 8B 40 04 .E..E......E..@.
0374CD10: 000C0000 039D3154: 8B 55 F0 E8 B8 B2 E9 FF 89 45 F4 8B 45 F4 8B 80 .U.......E..E...
0374CD14: 0374CD90 039D3164: 10 02 00 00 3B 45 F8 75 19 6A 00 6A 00 68 37 04 ....;E.u.j.j.h7.
0374CD18: 039D30F9 039D3174: 00 00 8B 45 F4 E8 FA 67 F3 FF 50 E8 00 53 E8 FF ...E...g..P..S..
0374CD1C: 00000001 039D3184: EB 08 FF 45 F0 FF 4D EC 75 C0 8B E5 5D C3 8B C0 ...E..M.u...]...
0374CD20: 00000CFC 039D3194: 55 8B EC 83 C4 EC 89 55 F8 89 45 FC 8B 45 FC 8B U......U..E..E..
0374CD24: 00000001 039D31A4: 40 04 8B 40 08 83 E8 01 71 05 E8 7D 0B E8 FF 85 @[email protected]..}....
0374CD28: 034B7DA0 039D31B4: C0 7C 5A 40 89 45 EC C7 45 F0 00 00 00 00 8B 45 .|[email protected]
0374CD2C: CF400212 039D31C4: FC 8B 40 04 8B 55 F0 E8 44 B2 E9 FF 89 45 F4 8B [email protected]..
0374CD30: 034966C0 039D31D4: 45 F4 8B 80 14 02 00 00 3B 45 F8 74 1C 8B 45 F4 E.......;E.t..E.
0374CD34: 0374CD44 039D31E4: 8B 80 18 02 00 00 3B 45 F8 74 0E 8B 45 F4 8B 80 ......;E.t..E...

guestolo · « **Reply #1 on:** November 16, 2006, 12:30:17 AM »

The closest relationship I can get to that file is related to Inetform filler, do you have it installed?
Can you disable it and see if your issues are resolved
Can I see a hijackthis log

leonjr1964 · « **Reply #2 on:** November 17, 2006, 03:02:27 AM »

I found INetFormFiller installed and uninstalled it. I dont even know where it came from, but it's gone now. Here is the HiJackThis logfile. Note, I have disabled some things at startup, and am not anxious to enable them again. Suffice it to say that they are just printer software, adobe, quicktime, and some other programs I dont want running at startup because I'll just have to stop them anyway.

Logfile of HijackThis v1.99.1
Scan saved at 12:48:53 AM, on 11/17/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\panda software\panda platinum 2006 internet security\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\AntiSpam\pskmssvc.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\PsImSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\apvxdwin.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\Program Files\FarStone\RestoreIT!\RestoreIT!_XP\VBPTASK.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\SRVLOAD.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\WebProxy.exe
C:\Utilities\HiJackThis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_2/home.html"); (C:\Documents and Settings\Leon S Allgood Jr\Application Data\Mozilla\Profiles\default\r99bcssx.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Leon S Allgood Jr\Application Data\Mozilla\Profiles\default\r99bcssx.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PT Cancel Popups - {30C4957C-A15E-48E2-99ED-7623B8EF4182} - C:\Plug Ins\PT_CancelPopups.dll
O2 - BHO: PT Filter Links - {3C84954D-23A1-4D71-9185-6BE2BB312C24} - C:\Plug Ins\PT_FilterLinks.dll
O2 - BHO: Seekmo Search Assistant Helper /fleok=1D8A83A5C5EC177A90B129671DAE25AEF89B78759BE7D6785F7A442C39 - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\program files\seekmo\seekmohook.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\FarStone\RestoreIT!\RestoreIT!_XP\VBPTASK.EXE" VBStart
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: NaturalColorLoad.lnk = ?
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: WkCalRem.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: NaturalColorLoad.lnk = ?
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Plug Ins\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Plug Ins\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download Images by Super Picture Finder Grabber - C:\Documents and Settings\Leon S Allgood Jr\My Documents\Programs\Picture Finder\pf_link.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Plug Ins\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Plug Ins\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Vie&w All Pics - file:///C:\Plug Ins\ViewAllPics.htm
O8 - Extra context menu item: View A&ll Pics in New Win - file:///C:\Plug Ins\ViewAllPicsOpen.htm
O9 - Extra button: View All Pics - {011D31E2-52A7-4703-8923-585EE67C112B} - C:\Plug Ins\Ext_ViewAllPics.exe
O9 - Extra 'Tools' menuitem: View All Pics - {011D31E2-52A7-4703-8923-585EE67C112B} - C:\Plug Ins\Ext_ViewAllPics.exe
O9 - Extra button: Download Pics - {0229FA56-9A3D-4018-9017-1918F8EC2C93} - C:\Plug Ins\Ext_DownloadPics.exe
O9 - Extra 'Tools' menuitem: Download Pics - {0229FA56-9A3D-4018-9017-1918F8EC2C93} - C:\Plug Ins\Ext_DownloadPics.exe
O9 - Extra button: Instant Buzz - {066040F0-5018-4E15-8AA0-81D36136D989} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PLUGIN~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PLUGIN~1\ICQ\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {0441781A-3075-4C8F-9FDB-A6BCAE8769A1} (vmLaunch Class) - http://downloads.comcast.net/videomail/vmLauncher.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\pavsrv51.exe
O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\AntiSpam\pskmssvc.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - c:\program files\panda software\panda platinum 2006 internet security\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\Panda Platinum 2006 Internet Security\TPSrv.exe

guestolo · « **Reply #3 on:** November 18, 2006, 05:11:23 PM »

Has the error returned?
Can I see another log too please

Download this file - Combofix.exe and save it too desktop
Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Post this log

leonjr1964 · « **Reply #4 on:** November 21, 2006, 11:25:18 PM »

Sorry, I've had a few non computer issues to take care of. I'll get that for you in the next few days.

TheTechGuide Forum

News:

Author Topic: Anyone have any idea what this means and how to fix it... (Read 733 times)

leonjr1964

Anyone have any idea what this means and how to fix it...

guestolo

Anyone have any idea what this means and how to fix it...

leonjr1964

Anyone have any idea what this means and how to fix it...

guestolo

Anyone have any idea what this means and how to fix it...

leonjr1964

Anyone have any idea what this means and how to fix it...