Page 1 of 2

Runtime Error!

PostPosted: Mon Feb 27, 2006 2:48 am
by Muddy
:mad: Can you tell me why I get This Runtime Error every time I move something from one Folder to my desktop ect?Microsoft Visual C++ Runtime Library( Runtime Error) Program: C:\Windows\Explorer.EXE Can't seem to find out whats causing this.Thanks!

PostPosted: Tue Feb 28, 2006 12:32 am
by Gecko
It could be something trying to inject itself into the Explorer.exe file but we will need more information.
Got to Start > Control panel > admin tools > event viewer > look in the application section.
You are looking for a red icon with a white X in it or a yellow icon double click on the icon.
Highlight the error message copy and paste it here.
Now check the box for “Data Words” highlight that text, copy and paste it here as well.

PostPosted: Tue Feb 28, 2006 1:24 am
by Muddy
The shell stopped unexpectedly and %1 was restarted. I can't get it to copy and paste from my paint program.All it tells me is (the shell stopped unexpectedly and Explorer .EXE was restarted.)As for the event viewer it shows the bubble with a( i )in it.

PostPosted: Tue Feb 28, 2006 4:26 pm
by Gecko
Lets try a freash HijackThis log:

Please download , unzip it to it's own folder.
Start HijackThis and select 'Do a system scan and save a logfile'
Now post the contents of the logfile back into this thread

PostPosted: Wed Mar 01, 2006 12:44 am
by Gecko
The only thing I see is this:
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
Nothing to worry about though “(no file)“

By chance do you have visual studio installed?

Runtime Library errors can be hard to trace down, especially if you don’t know the name of the causing file.

Lets see if we can get some more information.

Got to Start > Control panel > admin tools > event viewer > look in the application section.
Go to your error and double click on it
Highlight (click and drag your mouse pointer) on the error message copy and paste it into notepad
(Ctrl + C pressed at the same time is copy Ctrl + V pressed at the same time is paste)

Now check the box for “Data Words” highlight that text, copy and paste it into notepad as well.

Here is a sample picture:
Image
Now copy and paste the notepad text into this thread and include the event ID number.

PostPosted: Wed Mar 01, 2006 1:25 am
by Muddy
Yes there is a Folder C: Programs\Microsoft Visual Studio.Don't see it in my Add & Remove List.Here is the note pad,The Data Words box is grayed out and will not let me change the setting to Words.It just stays on Bytes.Here is the Note Pad!Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 2/28/2006
Time: 5:10:52 PM
User: N/A
Computer: WINDOWS-XPHOME
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Hope this Helps!!!!

PostPosted: Wed Mar 01, 2006 3:24 am
by Gecko

PostPosted: Wed Mar 01, 2006 6:06 pm
by Muddy
Gecko,Can you tell me where the Microsoft Visual Studio comes from?It sounds like it comes from my Office 2000 Pro.If thats the case can I uninstall and reinstall it again and fix it that way?Or is this part of the Operating System?I'll try the toolkit, but I was wondering What and Where Microsoft Visual Studio is all about.The toolkit seems a little Hard to understand.Thanks!

PostPosted: Thu Mar 02, 2006 12:53 am
by Muddy
Still no luck!The Visual C++ Tollkit didn't help at all.Any other ideas????

PostPosted: Thu Mar 02, 2006 1:14 pm
by Gecko
The Visual Studio most likely came from your Office 2000 install.
So yes uninstalling it and reinstalling it might repair the problem.

From what I’ve been reading it sound like a shell extension that was removed and it left something behind.
Shell Extensions are in-process COM objects which extends the abilities
of Windows operating system.
If you install WinZip on your computer, you'll see a special WinZip menu when you right-click on a Zip file.
This menu is created by adding a shell extension to the system.

Try downloading
Run ShellExView and look for something that you have removed but the extension got left behind.
Now use ShellExView to disable the extension and see if that resolve the problem.

PostPosted: Thu Mar 02, 2006 5:52 pm
by Muddy
Can't see anything,but Thanks for the help.It's a real Bummer but after I save a few things I'll just Wipe The HDD Clean and use the Ghost Image I made when I first Installed the OS.Thanks again for the help!!!! Thank God For GHOST!!!!

PostPosted: Thu Mar 02, 2006 11:52 pm
by Gecko
Well before you do that how about posting a HijackThis log
you never know you might have picked up something.

Runtime Error HJT Log!

PostPosted: Fri Mar 03, 2006 12:38 am
by Muddy
:?: Here you go Gecko!Hope you can find something.One more strange thing I would like to tell you about is when I copy a folder or file to my desk top it only gives me the Runtime Error when I copy to the top part of the Desktop Screen.It doesn't give me the Error when I copy to the Bottom half of the Screen.I have all the right drivers installed for my ATI 9600 Card and for my Dell 2000FP Monitor.Whats that all about?Good Luck,this is one strange mutha!!Logfile of HijackThis v1.99.1
Scan saved at 4:28:55 PM, on 3/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\EARTHL~2\PROTEC~1\ADSSER~1.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\EarthLink TotalAccess\WENGINE\wmonitor.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/partner/more/m ... earch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.earthlink.net/partner/more/m ... earch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.earthlink.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.earthlink.net/partner/more/m ... earch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.earthlink.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ElnkScamBHO Class - {15F4D456-5BAA-4076-8486-EECB38CD3E57} - C:\Program Files\EarthLink TotalAccess\Toolbar\EScamBlk.dll
O2 - BHO: ElnkPubBHO Class - {512ACF1B-64D9-4928-B382-A80556F28DB4} - C:\Program Files\EarthLink TotalAccess\Toolbar\ElnkPuB.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ElnkProtectionBHO Class - {9579D574-D4D8-4335-9560-FE8641A013BD} - C:\Program Files\EarthLink TotalAccess\Toolbar\ProtctIE.dll
O2 - BHO: ElnkLegacyUninstBHO Class - {E713904C-DF05-4C79-BBAD-02DB923253BE} - C:\Program Files\EarthLink TotalAccess\Toolbar\uninsttb.dll
O3 - Toolbar: EarthLink Toolbar - {C7768536-96F8-4001-B1A2-90EE21279187} - C:\Program Files\EarthLink TotalAccess\Toolbar\Toolbar.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Earthlink Protection Control Center] C:\Program Files\EarthLink\Protection Control Center\elnk_pcc.exe /minimize
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 3651568750
O23 - Service: ADSService - Copyright© Aluria Software, LLC - C:\PROGRA~1\EARTHL~2\PROTEC~1\ADSSER~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: EarthLink Monitor Service (EarthLinkMonitor) - Boingo Wireless, Inc. - C:\Program Files\EarthLink TotalAccess\WENGINE\wmonitor.exe
O23 - Service: EarthLink Firewall Process Path Service (ElnkFWPPService) - Aluria Software, LLC. - C:\PROGRA~1\EARTHL~2\PROTEC~1\EFWPPS~1.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

Re: Runtime Error HJT Log!

PostPosted: Fri Mar 03, 2006 12:02 pm
by Gecko

PostPosted: Fri Mar 03, 2006 2:17 pm
by Muddy