PDA

View Full Version : RE: ATTENTION! New Explorer Error that is affecting so many...


lowboyone
June 7th 04, 11:26 PM
Am having the same problem, Explorer has performed an illegal operation and will shut down. Also get dangerously low in resources or fatal exception has occurred at 017F:BFF9DFFF........What's up with this? Am running Norton AntiVirus 2004 with all the updates installed......I have found that on 4/26/04 that Norton found and quarantine into the backup items a sure that this is about when I started having problems with Explorer. I did delete that from my computer and ran Symantec W32.Beagle fit-tool and was told it found nothing. What did this bug do before it was found and deleted? If you want to find me, type in the discussion search..........Can't get into folders such as my computer & my documents & recycle bin, was posted on 5-29-04............Am in need of your help or you can e-mail me at
Lets all put our heads together and nip this in the bud...........Still puzzled in California......aka.......lowboyone

----- Gary S. Terhune wrote: -----

Considering the numbers of people who have in the last few days experienced
the same error, I propose a Master Thread (and no, PCR, you are not welcome
to post any Master Posts to this Master Thread!)

My idea is to refer any new threads on this subject to this thread, and to
invite persons participating in ongoing threads to transfer them here. So
far, the symptoms are that several functions of Windows Explorer
(Explorer.exe) are failing, all with the same error message:
"EXPLORER caused an invalid page fault in module <unknown> at 0000:07c7fc6e.

There are several possibilities, and if we all put our heads and experiences
together, I'm betting we come up with the solution(s) rather soon. The
probability is that some infection--virus, spyware, worm, etc.--has done
damage that remains *after* cleaning out whatever it was, using Antivirus or
spyware/adware cleaners. Another, less likely possibility is that a Windows
Update, probably for Internet Explorer, has caused the problem (I say less
likely simply because this rash of errors has appeared suddenly in just the
last few days, and I'm not aware of any new Windows Update.) Somewhere in
the middle is the possibility that every one of the people experiencing this
error are using the same antivirus or other cleaner and that an update to
*that* is causing the problem.

I'm asking that everyone who is experiencing this problem wrack their brains
and try to remember everything that has occurred over the last few days,
especially any new installations, any Windows or other major applications
updates, etc. Also include a list of what antivirus and other cleaner
software you use. If your AV or whatever has found and "cleaned" anything
out, please look into Logs or Quarantine lists to see if you can discover
what items were gotten rid of.

I am reposting, below my signature, a message from MVP Chris Quirke that he
posted earlier to a thread on the same topic. It seems to me that Chris may
be more on point than any of the rest of us have been thus far. Please look
into the possibilities that Chris suggests and see if anything turns up.

I am not sure about posting references to this particular message, other
than via Google Groups. It may be a foul-up in my own system, but news ID
references aren't working for me. So, to refer people to this thread, I'll
use three links: The news: ID link, the Google link, and (if I can figure it
out) the MS Support site's interface link. I welcome any of you regulars to
help me manage this effort, since I am, as usual, rather pressed for free
time. Right now, I have to take the family to do some major grocery
shopping, and we haven't done much of that for two months. Gonna be one of
those 4 or 5 cart trips!

--
Gary S. Terhune
MS MVP for Win9x

(Reposted from thread titled "Can't open any folders in 98SE!", in response
to message from "ASB")

On Fri, 28 May 2004 17:53:51 -0700, "ASB"

>OK, the post already on here doesn't help me at all. My
>problem most likely does not have to do with internet
>explorer, but windows explorer.

They have been tightly intertwined since IE 4, unfortunately.

>In fact, windows explorer doesn't open.

Do you see a desktop, with Taskbar, Start Menu, SysTray and desktop
icons? If so, you have at least the zeroth instance of Explorer.exe
running fine, and attention would move to the file associations for
Folder, File Folder (directory) and Drive.

If not, then something may have botched Explorer.exe, or the setting
to establish this as the shell, and you'd have to tackle this from the
command prompt (F8 boot menu; Command Prompt Only):

C:
CD \WINDOWS
EDIT SYSTEM.INI

Look for a line like

shell=explorer.exe

If it doesn't look like that, ;comment it away and add that line, e.g.

; shell=explorer.exe ytr6sx.exe
shell=explorer.exe

....or...

; shell=malware.exe
shell=explorer.exe

....and that may be enough to fix. Suspect this if you manually
cleaned up malware by deleting the malware files, but didn't cleanup
references to these malware intrusions.

OTOH, if you see the correct line, something else is wrong (quick 33%
guesses; a bad shell32.dll or a botched IE uninstall/upgrade) then you
need to use an alternate shell to "get in", like this...

; shell=explorer.exe
shell=taskman.exe

....and use the Run menu item to run stuff from the raw Task Manager.

If OTOH you do see Explorer running OK (as the desktop etc.) but you
can't run it explicitly, then we need more detail:
- does the dummy "My Computer" version work OK?
- if you click on a drive in My Computer, does it navigate in?
- if you click on a directory in My Computer, does it navigate in?
- if you rt-click, Explore on a drive in My Computer, does it work?
- if you rt-click, Explore on a dir in My Computer, does it work?
- or does the rt-click on either of these menus not show Explore?

>By the way, I've already run the latest PCCillin antivirus
>and AdAware and I haven't found anything.

Usually what happens is that a botched malware cleanup fails to undo
settings changes that the malware set to entrench itself.



>------------ ----- --- -- - - - -
Drugs are usually safe. Inject? (Y/n)
>------------ ----- --- -- - - - -

glee
June 8th 04, 05:21 AM
You need to run Hijack This, and post back with the log file.

If you can't open My Computer or Windows Explorer to get at the Hijack This file in
order to run it, download it and then run it using a DOS window (MS-DOS Prompt).
For example, if you have the Hijack This .exe file unzipped to the C:\Download
folder, open a DOS box, type:
C:\Download\Hijackthis.exe
and press Enter.

Here is my usual reply about using Hijack This:

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forum.aumha.org/
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located here:
http://tomcoyote.com/hjt/
and an in-depth tutorial is here:
http://aumha.org/a/hjttutor.htm
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"lowboyone" > wrote in message
...
> Am having the same problem, Explorer has performed an illegal operation and will
shut down. Also get dangerously low in resources or fatal exception has occurred at
017F:BFF9DFFF........What's up with this? Am running Norton AntiVirus 2004 with all
the updates installed......I have found that on 4/26/04 that Norton found and
quarantine into the backup items a sure that this is about
when I started having problems with Explorer. I did delete that from my computer and
ran Symantec W32.Beagle fit-tool and was told it found nothing. What did this bug do
before it was found and deleted? If you want to find me, type in the discussion
search..........Can't get into folders such as my computer & my documents & recycle
bin, was posted on 5-29-04............Am in need of your help or you can e-mail me
at
> Lets all put our heads together and nip this in the bud...........Still puzzled in
California......aka.......lowboyone
>
> ----- Gary S. Terhune wrote: -----
>
> Considering the numbers of people who have in the last few days experienced
> the same error, I propose a Master Thread (and no, PCR, you are not welcome
> to post any Master Posts to this Master Thread!)
>
> My idea is to refer any new threads on this subject to this thread, and to
> invite persons participating in ongoing threads to transfer them here. So
> far, the symptoms are that several functions of Windows Explorer
> (Explorer.exe) are failing, all with the same error message:
> "EXPLORER caused an invalid page fault in module <unknown> at 0000:07c7fc6e.
>
> There are several possibilities, and if we all put our heads and experiences
> together, I'm betting we come up with the solution(s) rather soon. The
> probability is that some infection--virus, spyware, worm, etc.--has done
> damage that remains *after* cleaning out whatever it was, using Antivirus or
> spyware/adware cleaners. Another, less likely possibility is that a Windows
> Update, probably for Internet Explorer, has caused the problem (I say less
> likely simply because this rash of errors has appeared suddenly in just the
> last few days, and I'm not aware of any new Windows Update.) Somewhere in
> the middle is the possibility that every one of the people experiencing this
> error are using the same antivirus or other cleaner and that an update to
> *that* is causing the problem.
>
> I'm asking that everyone who is experiencing this problem wrack their brains
> and try to remember everything that has occurred over the last few days,
> especially any new installations, any Windows or other major applications
> updates, etc. Also include a list of what antivirus and other cleaner
> software you use. If your AV or whatever has found and "cleaned" anything
> out, please look into Logs or Quarantine lists to see if you can discover
> what items were gotten rid of.
>
> I am reposting, below my signature, a message from MVP Chris Quirke that he
> posted earlier to a thread on the same topic. It seems to me that Chris may
> be more on point than any of the rest of us have been thus far. Please look
> into the possibilities that Chris suggests and see if anything turns up.
>
> I am not sure about posting references to this particular message, other
> than via Google Groups. It may be a foul-up in my own system, but news ID
> references aren't working for me. So, to refer people to this thread, I'll
> use three links: The news: ID link, the Google link, and (if I can figure it
> out) the MS Support site's interface link. I welcome any of you regulars to
> help me manage this effort, since I am, as usual, rather pressed for free
> time. Right now, I have to take the family to do some major grocery
> shopping, and we haven't done much of that for two months. Gonna be one of
> those 4 or 5 cart trips!
>
> --
> Gary S. Terhune
> MS MVP for Win9x
>
> (Reposted from thread titled "Can't open any folders in 98SE!", in response
> to message from "ASB")
>
> On Fri, 28 May 2004 17:53:51 -0700, "ASB"
>
> >OK, the post already on here doesn't help me at all. My
> >problem most likely does not have to do with internet
> >explorer, but windows explorer.
>
> They have been tightly intertwined since IE 4, unfortunately.
>
> >In fact, windows explorer doesn't open.
>
> Do you see a desktop, with Taskbar, Start Menu, SysTray and desktop
> icons? If so, you have at least the zeroth instance of Explorer.exe
> running fine, and attention would move to the file associations for
> Folder, File Folder (directory) and Drive.
>
> If not, then something may have botched Explorer.exe, or the setting
> to establish this as the shell, and you'd have to tackle this from the
> command prompt (F8 boot menu; Command Prompt Only):
>
> C:
> CD \WINDOWS
> EDIT SYSTEM.INI
>
> Look for a line like
>
> shell=explorer.exe
>
> If it doesn't look like that, ;comment it away and add that line, e.g.
>
> ; shell=explorer.exe ytr6sx.exe
> shell=explorer.exe
>
> ....or...
>
> ; shell=malware.exe
> shell=explorer.exe
>
> ....and that may be enough to fix. Suspect this if you manually
> cleaned up malware by deleting the malware files, but didn't cleanup
> references to these malware intrusions.
>
> OTOH, if you see the correct line, something else is wrong (quick 33%
> guesses; a bad shell32.dll or a botched IE uninstall/upgrade) then you
> need to use an alternate shell to "get in", like this...
>
> ; shell=explorer.exe
> shell=taskman.exe
>
> ....and use the Run menu item to run stuff from the raw Task Manager.
>
> If OTOH you do see Explorer running OK (as the desktop etc.) but you
> can't run it explicitly, then we need more detail:
> - does the dummy "My Computer" version work OK?
> - if you click on a drive in My Computer, does it navigate in?
> - if you click on a directory in My Computer, does it navigate in?
> - if you rt-click, Explore on a drive in My Computer, does it work?
> - if you rt-click, Explore on a dir in My Computer, does it work?
> - or does the rt-click on either of these menus not show Explore?
>
> >By the way, I've already run the latest PCCillin antivirus
> >and AdAware and I haven't found anything.
>
> Usually what happens is that a botched malware cleanup fails to undo
> settings changes that the malware set to entrench itself.
>
>
>
> >------------ ----- --- -- - - - -
> Drugs are usually safe. Inject? (Y/n)
> >------------ ----- --- -- - - - -
>
>

H Leboeuf
June 8th 04, 01:46 PM
From a previous post. Look into DirectX9, see if it helps.

From: "Manlio Laschena" <>
Subject: Re: OE at 197:BFF9DFFF
Date: October 8, 2003 2:42 PM

Followup to msg on Fri, 03 Oct 2003 14:13:33 GMT, Manlio Laschena
<lascspam@> :
(Original msg on bottom)

It seems to be solved !

Through Windows Update I downloaded and installed a revision of
DiretcX 9 , the b, and from then on I had no other crashes with the
"error 0E at 0197:BFF9DFFF".
Now are three days and I start thinking it could be solved !
Of course I have no double check, neither I want ... go back.
Anyhow for the sake of others !

Best Regards
Manlio

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===
"lowboyone" > wrote in message
...
> Am having the same problem, Explorer has performed an illegal operation
and will shut down. Also get dangerously low in resources or fatal exception
has occurred at 017F:BFF9DFFF........What's up with this? Am running Norton
AntiVirus 2004 with all the updates installed......I have found that on
4/26/04 that Norton found and quarantine into the backup items a
sure that this is about when I started having problems
with Explorer. I did delete that from my computer and ran Symantec
W32.Beagle fit-tool and was told it found nothing. What did this bug do
before it was found and deleted? If you want to find me, type in the
discussion search..........Can't get into folders such as my computer & my
documents & recycle bin, was posted on 5-29-04............Am in need of your
help or you can e-mail me at
> Lets all put our heads together and nip this in the bud...........Still
puzzled in California......aka.......lowboyone
>
> ----- Gary S. Terhune wrote: -----
>
> Considering the numbers of people who have in the last few days
experienced
> the same error, I propose a Master Thread (and no, PCR, you are not
welcome
> to post any Master Posts to this Master Thread!)
>
> My idea is to refer any new threads on this subject to this thread,
and to
> invite persons participating in ongoing threads to transfer them
here. So
> far, the symptoms are that several functions of Windows Explorer
> (Explorer.exe) are failing, all with the same error message:
> "EXPLORER caused an invalid page fault in module <unknown> at
0000:07c7fc6e.
>
> There are several possibilities, and if we all put our heads and
experiences
> together, I'm betting we come up with the solution(s) rather soon.
The
> probability is that some infection--virus, spyware, worm, etc.--has
done
> damage that remains *after* cleaning out whatever it was, using
Antivirus or
> spyware/adware cleaners. Another, less likely possibility is that a
Windows
> Update, probably for Internet Explorer, has caused the problem (I say
less
> likely simply because this rash of errors has appeared suddenly in
just the
> last few days, and I'm not aware of any new Windows Update.)
Somewhere in
> the middle is the possibility that every one of the people
experiencing this
> error are using the same antivirus or other cleaner and that an
update to
> *that* is causing the problem.
>
> I'm asking that everyone who is experiencing this problem wrack their
brains
> and try to remember everything that has occurred over the last few
days,
> especially any new installations, any Windows or other major
applications
> updates, etc. Also include a list of what antivirus and other cleaner
> software you use. If your AV or whatever has found and "cleaned"
anything
> out, please look into Logs or Quarantine lists to see if you can
discover
> what items were gotten rid of.
>
> I am reposting, below my signature, a message from MVP Chris Quirke
that he
> posted earlier to a thread on the same topic. It seems to me that
Chris may
> be more on point than any of the rest of us have been thus far.
Please look
> into the possibilities that Chris suggests and see if anything turns
up.
>
> I am not sure about posting references to this particular message,
other
> than via Google Groups. It may be a foul-up in my own system, but
news ID
> references aren't working for me. So, to refer people to this thread,
I'll
> use three links: The news: ID link, the Google link, and (if I can
figure it
> out) the MS Support site's interface link. I welcome any of you
regulars to
> help me manage this effort, since I am, as usual, rather pressed for
free
> time. Right now, I have to take the family to do some major grocery
> shopping, and we haven't done much of that for two months. Gonna be
one of
> those 4 or 5 cart trips!
>
> --
> Gary S. Terhune
> MS MVP for Win9x
>
> (Reposted from thread titled "Can't open any folders in 98SE!", in
response
> to message from "ASB")
>
> On Fri, 28 May 2004 17:53:51 -0700, "ASB"
>
> >OK, the post already on here doesn't help me at all. My
> >problem most likely does not have to do with internet
> >explorer, but windows explorer.
>
> They have been tightly intertwined since IE 4, unfortunately.
>
> >In fact, windows explorer doesn't open.
>
> Do you see a desktop, with Taskbar, Start Menu, SysTray and desktop
> icons? If so, you have at least the zeroth instance of Explorer.exe
> running fine, and attention would move to the file associations for
> Folder, File Folder (directory) and Drive.
>
> If not, then something may have botched Explorer.exe, or the setting
> to establish this as the shell, and you'd have to tackle this from
the
> command prompt (F8 boot menu; Command Prompt Only):
>
> C:
> CD \WINDOWS
> EDIT SYSTEM.INI
>
> Look for a line like
>
> shell=explorer.exe
>
> If it doesn't look like that, ;comment it away and add that line,
e.g.
>
> ; shell=explorer.exe ytr6sx.exe
> shell=explorer.exe
>
> ....or...
>
> ; shell=malware.exe
> shell=explorer.exe
>
> ....and that may be enough to fix. Suspect this if you manually
> cleaned up malware by deleting the malware files, but didn't cleanup
> references to these malware intrusions.
>
> OTOH, if you see the correct line, something else is wrong (quick 33%
> guesses; a bad shell32.dll or a botched IE uninstall/upgrade) then
you
> need to use an alternate shell to "get in", like this...
>
> ; shell=explorer.exe
> shell=taskman.exe
>
> ....and use the Run menu item to run stuff from the raw Task Manager.
>
> If OTOH you do see Explorer running OK (as the desktop etc.) but you
> can't run it explicitly, then we need more detail:
> - does the dummy "My Computer" version work OK?
> - if you click on a drive in My Computer, does it navigate in?
> - if you click on a directory in My Computer, does it navigate in?
> - if you rt-click, Explore on a drive in My Computer, does it work?
> - if you rt-click, Explore on a dir in My Computer, does it work?
> - or does the rt-click on either of these menus not show Explore?
>
> >By the way, I've already run the latest PCCillin antivirus
> >and AdAware and I haven't found anything.
>
> Usually what happens is that a botched malware cleanup fails to undo
> settings changes that the malware set to entrench itself.
>
>
>
> >------------ ----- --- -- - - - -
> Drugs are usually safe. Inject? (Y/n)
> >------------ ----- --- -- - - - -
>
>