Ntdll.dll Or Spyware

Nov 27, 2006

I have a Windows XP machine that keeps coming up with an ntdll.dll error. It happens in a couple places. Either at boot up after logon or when I'm using Internet Explorer.

Here is a HiJackThis log just in case it's needed.....

Logfile of HijackThis v1.99.1
Scan saved at 9:22:10 AM, on 11/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:WINDOWSTIREMOTETIServiceMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesAdobeAcrobat 7.0Reader
eader_sl.exe
C:WINDOWSsystem32userinit.exe
C: empHijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O4 - HKLM..Run: [ATICCC] "C:Program FilesATI TechnologiesATI.ACECLIStart.exe"
O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 - HKLM..Run: [vptray] C:PROGRA~1SYMANT~1VPTray.exe
O4 - HKLM..Run: [Track-It! Workstation Manager Service Monitor] C:WINDOWSTIREMOTETIServiceMonitor.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Reader
eader_sl.exe
O4 - Global Startup: PinkNotes Plus v4.lnk = C:Program FilesPNP4pnplus4.exe
O4 - Global Startup: QuicKeys Engine.lnk = C:Program FilesStartlyQuicKeysQkEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:Program FilesMICROS~1OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1162841528312
O20 - Winlogon Notify: NavLogon - C:WINDOWSsystem32NavLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:Program FilesSymantec AntiVirusDefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSSystem32spoolDRIVERSW32X863HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:Program FilesSymantec AntiVirusSavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
O23 - Service: spkrmon - Unknown owner - C:Program FilesAnalog DevicesSoundMAXspkrmon.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:Program FilesSymantec AntiVirusRtvscan.exe
O23 - Service: Track-It! Remote Control (TIRmtCtl) - Intuit Track-It! - C:WINDOWSTIREMOTEwuser32.exe
O23 - Service: Track-It! Workstation Manager (TIRmtSvc) - Numara Software, Inc. - C:WINDOWSTIREMOTETIRemoteService.exe

View 1 Replies


ADVERTISEMENT

Spyware Removal - Spyware Prevention, SpywareBlaster

Sep 6, 2003

There are two excellent spyware removal apps available and they are both FREE so there is no reason to not use them regularly. The two best apps there are for removing spyware are SpyBot Search & Destroy and Ad Aware. IT IS IMPERATIVE THAT YOU USE BOTH OF THESE APPS SINCE ONE FINDS WHAT THE OTHER MISSES AND VICE VERSA, YOU ARE NOT SAFE USING JUST ONE OF THEM. There is one other app that I HIGHLY recommend is for spyware prevention, SpywareBlaster. This app sets certain registry entries that prevent spyware from ever installing, it DOES NOT run in the background using any resources, you just set it and forget it. Once you have installed these three MUST HAVE apps you then need to update them and keep them up to date. I would recommend checking for updates weekly, it’s just like your antivirus app, you need to stay protected from the latest spyware out there. To update SpyBot just open the app from your start menu (use the advanced mode option) and select “search for updates” it will then show you what updates are available for download, always install all the updates. Another feature that SpyBot has is called “Immunize”, you will see an icon for it. Select the icon and under “Permanent Internet Explorer Immunity” select “Immunize” this works in the same way as SpywareBlaster in blocking new spyware. It also gives you the option of locking your hosts file against hijackers, I highly recommend using this option as well. To update Ad Aware just open it and select “Check for updates now”. For SpywareBlaster it is mostly the same, open it up and select “Check for updates” once you update this you then must select “select all” and then “Protect against checked items” so that the updates you just did take effect. Anything these apps find is spyware and should be removed, if you choose not to remove what is found then you have no one to blame if your pc crashes due to spyware or your privacy is invaded (including these companies stealing your credit card number and identity

View 9 Replies View Related

Internet Spyware / Get Warning Message About Spyware

Jan 14, 2006

I'm experienceing problems running the internet. Each time I try connecting tho the Net, despite changing the default homepage which has been changed to c:secure32.html I get a warning message about spyware I have also run Spybot Search and Destroy and the Lavasoft Ad-ware and removed all of the critical objects.

View 14 Replies View Related

Pc Infected - Anti-spyware-Spyware Doctor

Oct 2, 2006

My PC is infected with some bad stuff and I'm not sure what to do. So far I have tried to run Spybot S&D, Registry mechanic, ewido anti-spyware, Spyware Doctor and SpywareBlaster all of these programs seize when carrying out a scan and I have no option but to close the pc down with the power button. I am pretty much at a loss as what to do next and was hoping one of you kind souls could help me. I am running xp.

View 14 Replies View Related

Ntdll.dll

Apr 11, 2006

I can not register ntdll.dll. The message I get is Ntdll.dll was loaded, but dllregister server entry point was not found. This dll can not be registered. I have windows xp home sp2.

View 4 Replies View Related

Corrupt Ntdll.dll

Jun 25, 2005

I have a problem with an application starting to load and then a message coming up stating that there was a problem with the "ntdll.dll" file.

I even located a copy to download, placed that in the WindowsSystem32 folder and each time I continue to attempt to launch this application, it partially starts up, then hangs and then gives me the error message.

Is there something I am not doing correctly? Any suggestions? It had been working just fine for the past year or so and about a month ago, BOOM, this error message came up.

View 3 Replies View Related

Ntdll.dll Corrupt

Jan 11, 2006

I am Running XP home and has a corrupt ntdll.dll. The person I am helping tried reinstalling wimdows to a different directory to bring the computer up. How to replace the nt.dll file from the initial install.

View 3 Replies View Related

System32 And Ntdll.dll

Jul 29, 2009

I am trying to copy/paste a clean ntdll.dll into the Windows/System32 folder and to no surprise I cannot as the message I get is another resource is using that file. How can I determine what resource(s) and if so, am I able to disable it in order to replace that file?

I'm doing so as per Windows explorer errors that nobody can seem to resolve and I really dont want to reinstall Windows, I just did it about 7 or 8 months ago.

XP Pro SP3

View 10 Replies View Related

Ntdll.dll Error Msg

Apr 13, 2007

When I run a game called GTR2, the game freezes when it tries to access a file that draws a race track. The error message "Windows has encountered an error..." shows that the error is caused by the ntdll.dll file. Is the file corrupt?

View 7 Replies View Related

Kernel32.dll And Ntdll.dll Errors.

Jun 25, 2005

When I right click almost anything I get the explorer has encountered a problem and has to close. always the faulting module kernel32.dll. Then immediately another box appears with the drwatson postmortem debugger has encountered a problem and needs to close, I then have to ctrl alt del to close the drwtsn.exe and get my desktop back.
I have been having problems in psp7 with ntdll being the faulting module.
I run the bare minimum start up programs and have ran all virus and spyware scans. I have googled this problem until.
Im running windows xp pro sp2. AMD 2400
Have loads of disk space and plenty of free RAM.LV.

View 14 Replies View Related

Ntdll.dll Errors, Crashing

Apr 17, 2005

I've been experiencing random crashes of Explorer.exe, and when looking at the Application window of the Event Viewer it details this:

Faulting application explorer.exe, version 6.0.2800.1106, faulting module ntdll.dll, version 5.1.2600.1106, fault address 0x00001d24.

I searched around the internet and found no real answer, there's some solutions which require using the Data Execution Prevention tab with SP2, and adding explorer.exe to the list. I plan to try this, but I was wondering, would replacing ntdll.dll with another computer's possibly fix the problem? It's been an annoyance now for a month, and I've ran every virus scan, every spyware/malware/ware-ness program known to man, to no avail.

View 9 Replies View Related

Explorer Crashes With NTDLL.DLL

Feb 1, 2005

When in Windows Explorer (XP Pro) and burrowing through folders I get the following error:

Windows Explorer has encountered a problem and needs to close. We are sorry for the inconvenience.
Details:
AppName: explorer.exe AppVer: 6.0.2900.2180 ModName: ntdll.dll ModVer: 5.1.2600.2180 Offset: 000106c3

I can make it happen consistently by going to the eighth level of sub-folders.It just closes Explorer and then everything comes back up (except for Explorer or my email if I was attaching a file).

I have tried everything, including a reparative install of Windows XP Pro. I have run sfc /scannow. I try to do regsvr32 ntdll.dll and I get the following error:

ntdll.dll was loaded, but the DllRegisterServer entry point was not found. The file can not be registered.

I have run Ad Aware SE, SpySweeper and Spybot (and even a TDS-3 full system scan). Spyware/virus is not the problem. Caches/temps are cleared, she defrags fine. This is a Dell Latitude 600m 1.6GHz 768MB.

View 3 Replies View Related

Hard Error, Ntdll.dll

Dec 7, 2008

Mobo MSI K8T Neo
Graphics Saphire X1950 Pro
2 seagate baracuda RAID 0 array 120G each so 240 total, only 1 partition.

I have never formatted. It started showing problems when I tried to install drivers for the graphics card. I could never get the drivers to work properly, now my framerate drops every few seconds in every game. I decided it was time to format it after I left alone for a few months.

This is the process I followed:

1-) Enter Windows XP SP3 CD in drive.
2-) Boot from CD.
3-) Windows Set Up appears and loads it's files.

At this point, I get the message "Starting Windows" which usually comes right before the Set up screen where I could format but I get an error (blue screen) that says

unknown hard error, NTDLL.DLL

View 2 Replies View Related

Sudden Ntdll.dll Error

Jun 25, 2005

I am not sure I am in the correct forum, but I recently started having a problem with an application starting to load and then a message coming up stating that there was a problem with the "ntdll.dll" file.

I even located a copy to download, placed that in the WindowsSystem32 folder and each time I continue to attempt to launch this application, it partially starts up, then hangs and then gives me the error message.

Is there something I am not doing correctly? Any suggestions? It had been working just fine for the past year or so and about a month ago, BOOM, this error message came up.

View 5 Replies View Related

Msimn.exe Faulting Ntdll.dll

Jul 26, 2005

This is the error message that I get whenever the create new mail button is
clicked in Outlook Express 6. How do I fix it?

Event Type:Error
Event Source:Application Error
Event Category:None
Event ID:1000
Date:7/26/2005
Time:2:28:52 PM
User:N/A
Computer:004XXXXXX-JULI
Description:
Faulting application msimn.exe, version 6.0.2900.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x000012f1.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 73 69 ure msi
0018: 6d 6e 2e 65 78 65 20 36 mn.exe 6
0020: 2e 30 2e 32 39 30 30 2e .0.2900.
0028: 32 31 38 30 20 69 6e 20 2180 in
0030: 6e 74 64 6c 6c 2e 64 6c ntdll.dl
0038: 6c 20 35 2e 31 2e 32 36 l 5.1.26
0040: 30 30 2e 32 31 38 30 20 00.2180
0048: 61 74 20 6f 66 66 73 65 at offse
0050: 74 20 30 30 30 30 31 32 t 000012
0058: 66 31 0d 0a f1..

View 1 Replies View Related

Ntdll.dll Issue HJT Log Included

Aug 27, 2006

Getting a Ntdll.dll error that is crashing my IE browser.

Logfile of HijackThis v1.99.1

Scan saved at 2:26:22 AM, on 8/27/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
C:Program FilesBroadJumpClient FoundationCFD.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:WINDOWSSystem32cisvc.exe
C:Program Filesewido anti-spyware 4.0guard.exe
C:Program Filesone LabsoneAlarmzlclient.exe
C:Program FilesJavajre1.5.0_06injusched.exe
C:PROGRA~1AWSWEATHE~1Weather.exe
C:Program FilesNorton AntiVirus 2004
avapsvc.exe
C:Program FilesYourWare SolutionsFreeRAM XP ProFreeRAM XP Pro.exe
C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
C:Program FilesNorton AntiVirus 2004SAVScan.exe
C:Program FilesSpeed Disk
opdb.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32oneLabsvsmon.exe
C:Program FilesWebrootSpy SweeperSpySweeper.exe
C:WINDOWSSystem32wuauclt.exe
C:WINDOWSSystem32cidaemon.exe
C:Documents and SettingsERIC2DesktopIEXPLORE.EXE
C:PROGRA~1DAPDAP.EXE
C:WINDOWSSystem32wuauclt.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesHijackthisPuppy.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.msnbc.msn.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.msnbc.msn.com/
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {15178E23-74E4-49F9-932D-4D97C38A3B3B} - C:VundoFix Backupssstqr.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:Program FilesSpywareGuarddlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormRoboForm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.0_06inssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar5.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Program FilesNorton AntiVirus 2004NavShExt.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:Program FilesDAPDAPIEBar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormRoboForm.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:Program FilesNorton AntiVirus 2004NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar5.dll
O4 - HKLM..Run: [BJCFD] "C:Program FilesBroadJumpClient FoundationCFD.exe"
O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [NvCplDaemon] "RUNDLL32.EXE" C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] "nwiz.exe" /install
O4 - HKLM..Run: [NvMediaCenter] "RUNDLL32.EXE" C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [Zone Labs Client] "C:Program Filesone LabsoneAlarmzlclient.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.5.0_06injusched.exe"
O4 - HKCU..Run: [Weather] C:PROGRA~1AWSWEATHE~1Weather.exe 1
O4 - HKCU..Run: [FreeRAM XP] "C:Program FilesYourWare SolutionsFreeRAM XP ProFreeRAM XP Pro.exe" -win
O4 - Global Startup: KODAK Software Updater.lnk = C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
O8 - Extra context menu item: &Download with &DAP - C:PROGRA~1DAPdapextie.htm
O8 - Extra context menu item: &Google Search - res://c:program filesgoogleGoogleToolbar5.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:program filesgoogleGoogleToolbar5.dll/cmwordtrans.html
O8 - Extra context menu item: Add to AD Black List - C:Program FilesAvant BrowserAddToADBlackList.htm
O8 - Extra context menu item: Backward Links - res://c:program filesgoogleGoogleToolbar5.dll/cmbacklinks.html
O8 - Extra context menu item: Block All Images from the Same Server - C:Program FilesAvant BrowserAddAllToADBlackList.htm
O8 - Extra context menu item: Cached Snapshot of Page - res://c:program filesgoogleGoogleToolbar5.dll/cmcache.html
O8 - Extra context menu item: Customize Menu&4 - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Download &all with DAP - C:PROGRA~1DAPdapextie2.htm
O8 - Extra context menu item: Download all with Free Download Manager - file://C:Program FilesFree Download Managerdlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:Program FilesFree Download Managerdlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://C:Program FilesFree Download Managerdlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:Program FilesFree Download Managerdllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms&] - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.html
O8 - Extra context menu item: Highlight - C:Program FilesAvant BrowserHighlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:Program FilesAvant BrowserOpenAllLinks.htm
O8 - Extra context menu item: Open In New Avant Browser - C:Program FilesAvant BrowserOpenInNewBrowser.htm
O8 - Extra context menu item: RoboForm&2 - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms&[ - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.html
O8 - Extra context menu item: Search - C:Program FilesAvant BrowserSearch.htm
O8 - Extra context menu item: Similar Pages - res://c:program filesgoogleGoogleToolbar5.dll/cmsimilar.html
O8 - Extra context menu item: Sothink SWF Catcher - C:Program FilesCommon FilesSourceTecSWF CatcherInternetExplorer.htm
O8 - Extra context menu item: Translate Page into English - res://c:program filesgoogleGoogleToolbar5.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06inssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms&] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms&[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm&2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.html
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:Program FilesCommon FilesSourceTecSWF CatcherInternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:Program FilesCommon FilesSourceTecSWF CatcherInternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE
O15 - Trusted Zone: www.pcpitstop.com
O16 - DPF: {01111C00-3E00-11D2-8470-0060089874ED} (Support.com ActionRunner Class) - http://help.rr.com/Foundrysdccommon/...ad/tgctlar.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommo...ad/tgctlcm.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/tech...l/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/tech...rl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/tech...rl/tgctlsr.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-36.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1098571318045
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134435680593
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://us-housecall.trendmicro-europ...vex/hcImpl.cab
O16 - DPF: {89D75D39-5531-47BA-9E4F-B346BA9C362C} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://rtc1.webresponse.one.microso.../TLIEFlash.CAB
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {FF1CD9A3-00CD-45C1-8182-4EEC229A182D} (Plaxo Auto-Import Utility) - https://www.plaxo.com/activex/plx_upldr-2k-xp.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:Program FilesCommon FilesMicrosoft SharedHelphxds.dll
O20 - Winlogon Notify: WRNotifier - C:WINDOWSSYSTEM32WRLogonNTF.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:Program Filesewido anti-spyware 4.0guard.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:WINDOWSsystem32driversKodakCCS.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:Program FilesNorton AntiVirus 2004
avapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:Program FilesSiSoftwareSiSoftware Sandra Lite 2007Win32RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:Program FilesSiSoftwareSiSoftware Sandra Lite 2007RpcSandraSrv.exe
O23 - Service: SAVScan - Symantec Corporation - C:Program FilesNorton AntiVirus 2004SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:Program FilesSpeed Disk
opdb.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSecurity CenterSymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:WINDOWSsystem32oneLabsvsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:Program FilesWebrootSpy SweeperSpySweeper.exe

View 2 Replies View Related

Bluscreens, Nspr4.dll, Ntdll.dll Errors

Jan 20, 2008

I have reinstalled firefox but i just got another error report modname: firefox.exe

My computer has started playing up, I've been getting bluescreens like its a buffer overlow but before this happens a program usually closes with an error and when i view this error using tech info for it usually logs to temp/8262_appcompat.txt . Windows has been closing programs randomly with an error report usually due to a .dll file.

View 9 Replies View Related

NTDLL.DLL Closing My .Explorer Message

Aug 26, 2006

Lately I'm getting the "I.E. has encountered a problem and needs to close" message so of course I lose what I had open and have to start over. It's not doing it constantly or consistant on the same websites but it is at least a few to several times a day now. It seems to do it most often when leaving a site and trying to go back to whatever preceeded it especially if I click the back button more than once(unnecessary habit I know).
Here is the info shown for the problem:

APPname:iexplorer.exe Appver 6.0.2900.2180 Modname ntdll.dll
Modver:5.1.2600.2180 offset:0003426d

The offset # is the only one that is different each time it comes up.

* I've ran the Norton system scan a few times( just their regular version, not their registry cleaner)
* ran CW Schredder
* ran Ad Aware
* Keep Spyware Blaster up to date
* and tried CCcleaner
None of which made any difference.

View 14 Replies View Related

Application Error Module Ntdll.dll

Jan 8, 2008

Windows XP Media Center Edition Ver 2002 Acer Aspire e360

12/3/2007 10:26 AMApplication ErrorFaulting application iexplore.exe, version 7.0.6000.16544, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

12/28/2007 6:28 PMApplication ErrorFaulting application iexplore.exe, version 7.0.6000.16574, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

12/28/2007 7:32 PMApplication ErrorFaulting application avant.exe, version 11.5.0.0, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

12/30/2007 8:49 PMApplication ErrorFaulting application avant.exe, version 11.5.0.0, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

12/30/2007 8:55 PMApplication ErrorFaulting application firefox.exe, version 1.8.20061.20418, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

12/30/2007 8:56 PMApplication ErrorFaulting application avant.exe, version 11.5.0.0, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

1/1/2008 9:08 PMApplication ErrorFaulting application firefox.exe, version 1.8.20061.20418, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

1/3/2008 10:17 PMApplication ErrorFaulting application iexplore.exe, version 7.0.6000.16574, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.

1/3/2008 4:46 PMApplication ErrorFaulting application iexplore.exe, version 7.0.6000.16574, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x0002ae22.

View 5 Replies View Related

Accesss Violation In Ntdll.dll At 0x7c911404

Sep 16, 2007

Using Windows XP Home/SP2 on a Compaq laptop.Automatic updates have been happening regularly. I am running AVG Antivirus (free version) on it.

I was running a financial package i.e. a programme of writing account books i.e. Tally version 5.4 on it. It has been running fine for last two years. Now after two three months, when I tried to use it, it opened up and closed down on my face immediately. I kept on trying to run it and it gave me message:

"WTALLY caused an access violation in ntdll.dll at 0x7c911404.
Click on Close to terminate
Click on cancel to debug
Click on Ignore to Continue, you should save your work in a new file."

I clicked on ignore but it halted and ultimately I had to either canel it or close it. Yes out of twelve thirteen times of my attempts to run it, made it run only for once. After that the result is the same.

This programme runs in Safe Mode.

I think, the problem could be because of automatic updates. Some update has put a patch or like that on some file which has caused erratic or restrained working of some component.

I checked I have ntdll.dll file in my windows's system directory and two more places. And from one site, I downloaded the ntdll.dll file but has not replaced the one in my system. My second question is :
HOW safe it is to replace ntdll.dll with the new file I downloaded from the net.

View 3 Replies View Related

Faulting Module NTDLL.DLL When Run SalesLogix App

Sep 13, 2005

I am trying to load SalesLogix CRM software client on a Dell Inspiron 9200 laptop with Windows XP SP2. Everytime SalesLogix opens I get an error report saying SalesLogix.exe had to close and the faulting module was NTDLL.DLL.
I tried SalesLogix support but they were of no help. I tried copying in NTDLL.DLL from another computer that SalesLogix is working on but I could not get it to register. Something about DLLRegisterServer entry point not found.

View 1 Replies View Related

Ntdll.dll Error / Prog Install Probs!!

Apr 23, 2006

Dell desktop running Windows XP SP2 is reporting an application error on a regular basis. Especially when trying to install new programs. It seems event errors have the ntdll.dll in common.

Here's one event log entry:

Faulting application nswsetup.exe, version 2006.9.0.103, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00036bd1.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6e 73 77 ure nsw
0018: 73 65 74 75 70 2e 65 78 setup.ex
0020: 65 20 32 30 30 36 2e 39 e 2006.9
0028: 2e 30 2e 31 30 33 20 69 .0.103 i
0030: 6e 20 6e 74 64 6c 6c 2e n ntdll.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 33 set 0003
0058: 36 62 64 31 0d 0a 6bd1..

======

Here's another, more common error:

Faulting application msiexec.exe, version 3.1.4000.1823, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00036bd1.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 73 69 ure msi
0018: 65 78 65 63 2e 65 78 65 exec.exe
0020: 20 33 2e 31 2e 34 30 30 3.1.400
0028: 30 2e 31 38 32 33 20 69 0.1823 i
0030: 6e 20 6e 74 64 6c 6c 2e n ntdll.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 33 set 0003
0058: 36 62 64 31 6bd1
===========================


Here's the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 11:14:32 AM, on 4/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesWindows DefenderMsMpEng.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesDellEUSWSupport.exe
C:WINDOWSSystem32qttask.exe
C:WINDOWSSystem32DSentry.exe
C:Program FilesWindows DefenderMSASCui.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDellSupportAlertinNotifyAlert.exe
C:WINDOWSsystem32cisvc.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32MsPMSPSv.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSsystem32cidaemon.exe
C:Program FilesOpenOffice.org 2.0programsoffice.exe
C:Program FilesOpenOffice.org 2.0programsoffice.BIN
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsThom HochMy DocumentsSoftwareHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.dellnet.com
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:Program FilesMicrosoft MoneySystemmnyviewer.dll
O4 - HKLM..Run: [DwlClient] C:Program FilesCommon FilesDellEUSWSupport.exe
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [QuickTime Task] C:WINDOWSSystem32qttask.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [DVDSentry] C:WINDOWSSystem32DSentry.exe
O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows DefenderMSASCui.exe" -hide
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [Microsoft Works Update Detection] C:Program FilesMicrosoft WorksWkDetect.exe
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~3Office10EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:Program FilesYahoo!Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:Program FilesYahoo!Common/ycsrch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:Program FilesMicrosoft MoneySystemmnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - https://www-secure.symantec.com/tech...rl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - https://www-secure.symantec.com/tech...rl/tgctlsr.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/us/en/systemprofiler/SysPro.CAB
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://i.a.cnn.net/cnn/resources/cult3d/cult.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1127047835125
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/download...1/axofupld.cab
O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs5b.instantservice.com/jars/...rxsigned33.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - http://a248.e.akamai.net/f/248/5462/...l/SymDlBrg.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download...basetup141.cab

===================

Info on this machine:
OS NameMicrosoft Windows XP Home Edition
Version5.1.2600 Service Pack 2 Build 2600
OS ManufacturerMicrosoft Corporation
System ManufacturerDell Computer Corporation
System ModelDimension 4550
System TypeX86-based PC
Processorx86 Family 15 Model 2 Stepping 7 GenuineIntel ~1993 Mhz
BIOS Version/DateDell Computer Corporation A03, 11/12/2002
SMBIOS Version2.3
Windows DirectoryC:WINDOWS
System DirectoryC:WINDOWSsystem32
Boot DeviceDeviceHarddiskVolume2
LocaleUnited States
Hardware Abstraction LayerVersion = "5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
Time ZoneCentral Daylight Time
Total Physical Memory512.00 MB
Available Physical Memory215.89 MB
Total Virtual Memory2.00 GB
Available Virtual Memory1.96 GB
Page File Space1.22 GB
Page FileC:pagefile.sys

View 1 Replies View Related

C000021 Unknown Hard Error: Ntdll.dll

Sep 23, 2006

Getting a strange error in Dell Inspiron 9300, running some version of XP, and that's all that I know.

When you turn on his computer, you see the Dell startup-screen for a second, and then it automatically brings you to the prompt that says "We apologize for the inconvenience, but Windows did not start successfully." window. There are obviously 5 options: Safe Mode, SM with Networking, SM with Command Prompt, Last Known Good Configuration, and Start Windows Normally. Each one of those brings me to the blue screen that says:

STOP: c000021 Unknown Hard Error
SystemRootSystem32
tdll.dll

I searched on other forums, and it seems that this is what people have done to fix this: either try to Repair Windows, reinstall Windows, manually replace ntdll.dll (if they can actually get into Windows, which I can't), or do something with their memory cards, I'm not sure what.

Are those approaches I listed correct? And 2nd, I don't want to have to mess with my friend's memory if I don't have to.I'm not too much of a tech person. I do, however, have my family's Windows XP Home Edition install CD with me.if I put that into his computer, and try to repair Windows, would that work?

View 5 Replies View Related

Ntdll.dll In Outlook Express News Reader

Mar 30, 2007

A thread here,I was trying to use the news reader part of outlook express and it could read all of the post correctly. The only problem is when I click on New Post or Reply Post, I could see the frame of text editor opened up with no button on it and then tells me that Outlook Express has encountered an error and needs to close, blah blah blah.

I looked through the error reporting file and was told that ntdll.dll was the troublemaker, here is the error reporting file that Outlook Express asked me to send to Microsoft:

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="msimn.exe" FILTER="GRABMI_FILTER_PRIVACY">
<MATCHING_FILE NAME="msimn.exe" SIZE="60416" CHECKSUM="0x71D69A0B" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Outlook Express" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="MSIMN.EXE" INTERNAL_NAME="MSIMN" LEGAL_COPYRIGHT="� 2004 Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1DE1D" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:58:38" UPTO_LINK_DATE="08/04/2004 05:58:38" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="msoe.dll" SIZE="1314816" CHECKSUM="0x46A871A5" BIN_FILE_VERSION="6.0.2900.3028" BIN_PRODUCT_VERSION="6.0.2900.3028" PRODUCT_VERSION="6.00.2900.3028" FILE_DESCRIPTION="Outlook Express" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.3028 (xpsp_sp2_gdr.061107-0012)" ORIGINAL_FILENAME="MSOE.DLL" INTERNAL_NAME="MSOE" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x142B48" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.3028" UPTO_BIN_PRODUCT_VERSION="6.0.2900.3028" LINK_DATE="11/08/2006 05:06:13" UPTO_LINK_DATE="11/08/2006 05:06:13" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="msoeres.dll" SIZE="2479616" CHECKSUM="0x752385C1" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Outlook Express" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="MSOERES.DLL" INTERNAL_NAME="MSOERES" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x25FEA8" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:58:51" UPTO_LINK_DATE="08/04/2004 07:58:51" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="oeimport.dll" SIZE="104448" CHECKSUM="0x20F1DA64" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Outlook Express Mail Import & Export" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="OEIMPORT.DLL" INTERNAL_NAME="OEIMPORT" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x256B8" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:57:35" UPTO_LINK_DATE="08/04/2004 07:57:35" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="oemig50.exe" SIZE="60416" CHECKSUM="0xDB61F5AB" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Outlook Express Migration 5.0" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="OEMIG50.EXE" INTERNAL_NAME="OEMIG50" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1918A" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:58:42" UPTO_LINK_DATE="08/04/2004 05:58:42" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="oemiglib.dll" SIZE="35328" CHECKSUM="0x12ADE8F3" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Microsoft Outlook Express Migration Library" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="OEMIGLIB.DLL" INTERNAL_NAME="OEMIGLIB" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xCBF9" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:57:36" UPTO_LINK_DATE="08/04/2004 07:57:36" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="setup50.exe" SIZE="73216" CHECKSUM="0xA78C58B" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Outlook Express Setup Library" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="SETUP50.EXE" INTERNAL_NAME="SETUP50" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1DAF5" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:58:33" UPTO_LINK_DATE="08/04/2004 05:58:33" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="wab.exe" SIZE="46080" CHECKSUM="0x29E15FAE" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Address Book" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="WAB.EXE" INTERNAL_NAME="WAB.EXE" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0xECBB" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:58:29" UPTO_LINK_DATE="08/04/2004 05:58:29" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="wabfind.dll" SIZE="32768" CHECKSUM="0xAA31F3E8" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Find People" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="WABFIND.DLL" INTERNAL_NAME="WABFIND.DLL" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xAAD3" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:39" UPTO_LINK_DATE="08/04/2004 07:56:39" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="wabimp.dll" SIZE="85504" CHECKSUM="0xDAAD0BBD" BIN_FILE_VERSION="6.0.2900.3028" BIN_PRODUCT_VERSION="6.0.2900.3028" PRODUCT_VERSION="6.00.2900.3028" FILE_DESCRIPTION="Microsoft WAB Importer/Exporter" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.3028 (xpsp_sp2_gdr.061107-0012)" ORIGINAL_FILENAME="WABIMP.DLL" INTERNAL_NAME="WABIMP.DLL" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x247FA" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.3028" UPTO_BIN_PRODUCT_VERSION="6.0.2900.3028" LINK_DATE="11/08/2006 05:06:13" UPTO_LINK_DATE="11/08/2006 05:06:13" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="wabmig.exe" SIZE="30208" CHECKSUM="0x1D5ABA9C" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Microsoft (R) Address Book Import Tool" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="WABMIG.EXE" INTERNAL_NAME="WABMIG.EXE" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x15C7B" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:58:28" UPTO_LINK_DATE="08/04/2004 05:58:28" VER_LANGUAGE="English (United States) [0x409]" />
</EXE>
<EXE NAME="ntdll.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="ntdll.dll" SIZE="708096" CHECKSUM="0x9D20568" BIN_FILE_VERSION="5.1.2600.2180" BIN_PRODUCT_VERSION="5.1.2600.2180" PRODUCT_VERSION="5.1.2600.2180" FILE_DESCRIPTION="NT Layer DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="ntdll.dll" INTERNAL_NAME="ntdll.dll" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xAF2F7" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2180" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2180" LINK_DATE="08/04/2004 07:56:36" UPTO_LINK_DATE="08/04/2004 07:56:36" VER_LANGUAGE="English (United States) [0x409]" />
</EXE>
<EXE NAME="kernel32.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="kernel32.dll" SIZE="984064" CHECKSUM="0xF12E1D4A" BIN_FILE_VERSION="5.1.2600.2945" BIN_PRODUCT_VERSION="5.1.2600.2945" PRODUCT_VERSION="5.1.2600.2945" FILE_DESCRIPTION="Windows NT BASE API Client DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft� Windows� Operating System" FILE_VERSION="5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)" ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="� Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xF724D" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2945" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2945" LINK_DATE="07/05/2006 10:55:00" UPTO_LINK_DATE="07/05/2006 10:55:00" VER_LANGUAGE="English (United States) [0x409]" />
</EXE>
</DATABASE>

It has happened every time without failure, and even after I have re-installed the entire Windows XP system, the problem would come up again.
I am using an IBM Thinkpad T42 with Pentium M 1.6GHz processor and 1.2GB of RAM, I have the automatic update enabled to install all the software patches from Microsoft and so on.

View 3 Replies View Related

WHen Exiting Overlord Send/Don't Send Error With Modname "ntdll.dll"

Jul 14, 2009

Every time I exit Overlord I get Send/Don't Send error with modname "ntdll.dll". A mate of mine has the same error.
ps: is is normal that Windows XP has so many errors?

View 1 Replies View Related

Getting Rid Of Spyware

Dec 13, 2005

I've run adaware, spybot and microsoft spyware remover.

View 14 Replies View Related

Spyware Cleaning

Feb 13, 2005

I've been to rid my computer (Windows XP) of spyware and such, uneeded stuff running, as I can only get dial up and it's slow enough at best! If I can figure out how to get this Hijack This log attached, I would sure appreciate it if someone could look at it and what maybe should'nt be there.

View 3 Replies View Related

With Virus & Spyware

May 13, 2006

I'm running Window XP Media Edition. I just started getting warning message that someone is running Data Miner on my pc and spyware messages. It then brings up the following IE page: http://antispylab.com/

View 14 Replies View Related

Got Some Spyware - No Sound Available

Jul 23, 2005

i got some spyware .it's done a lot scrap to my system.finally able toget back every thing except sound.i dont see anyvolume icon on task bar..tried all the help hints..by hecking ,installing drives etc.but no luck Every time same message comes back when i tried to check .no active mixer devices.what to do for this...can i download any devices for this any where on web let me knwo all the solutiongs

View 1 Replies View Related

Get Off Trojans And Other Spyware?

Oct 23, 2006

The Trojan.Downloader.zlob.abt Trojan.Fake.alert.eb... Are both on my sys. but according to Bit Defender, "they're causing no harm to my sys." I presume that means they are quaranteed. I've run SpySweeper and a couple others and have been unable to turn either one up. Nor can I locate them in Google. My questions are, how can I get them off my sys.

View 1 Replies View Related

IE Has Spyware - Random Pop Ups

Jan 19, 2005

My dad has told me that IE was showing that it had spyware it had a different home page. I don't use IE, but I'd say someone clicked that pop up.Its a random pop up, and my home page says its about:blank, but it loads another search engine.

View 8 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved