[davidg07]

A few days ago I started getting the following message:

iexplore.exe - Application Error

The instruction at "0x37001328" referenced memory at "0x71ab428a". The memory could not
be "written". Click OK to terminate the program

I have tried a few things seen on other forums, but nothing so far has worked. I'm not what anyone would conside a "computer person," so I am in need of some help. I'm using Windows XP and the error message only seems to pop up while I'm using a browser. I normally use Firefox, but it also come up while IE is running. Any help would be appreciated.

Edited by davidg07, 21 May 2005 - 03:20 PM.

[Advertisements]

Hey Dave,

I had a same problem. I figured it out that I have installed an Anti Spyware and an Anti Virus program. I uninstalled both of them (Now I only install them to run a virus check periodically and then uninstall them). Usually all anti spyware causes damage to winsock file.
Uninstall any anti virus and or anti spyware program after cleaning ur system. Then In WinXP SP2: You can fix Winsock by going to Start | Run and typing CMD In the command window type
"netsh winsock reset" and it should reset your winsock.

Then download memory diagnostic program from Microsoft http://oca.microsoft.../en/windiag.asp and run the test (just to make sure your memory doesnt have any issue with it.)

And voilla. You are all set to go. Reboot the machine and it should not give u this error again.

Cheers.

A few days ago I started getting the following message:

iexplore.exe - Application Error

The instruction at "0x37001328" referenced memory at "0x71ab428a".  The memory could not
be "written".  Click OK to terminate the program

I have tried a few things seen on other forums, but nothing so far has worked.  I'm not what anyone would conside a "computer person," so I am in need of some help.  I'm using Windows XP and the error message only seems to pop up while I'm using a browser.  I normally use Firefox, but it also come up while IE is running.  Any help would be appreciated.

[Manzar]

Hey Dave,

I had a same problem. I figured it out that I have installed an Anti Spyware and an Anti Virus program. I uninstalled both of them (Now I only install them to run a virus check periodically and then uninstall them). Usually all anti spyware causes damage to winsock file.
Uninstall any anti virus and or anti spyware program after cleaning ur system. Then In WinXP SP2: You can fix Winsock by going to Start | Run and typing CMD In the command window type
"netsh winsock reset" and it should reset your winsock.

Then download memory diagnostic program from Microsoft http://oca.microsoft.../en/windiag.asp and run the test (just to make sure your memory doesnt have any issue with it.)

And voilla. You are all set to go. Reboot the machine and it should not give u this error again.

Cheers.

A few days ago I started getting the following message:

iexplore.exe - Application Error

The instruction at "0x37001328" referenced memory at "0x71ab428a".  The memory could not
be "written".  Click OK to terminate the program

I have tried a few things seen on other forums, but nothing so far has worked.  I'm not what anyone would conside a "computer person," so I am in need of some help.  I'm using Windows XP and the error message only seems to pop up while I'm using a browser.  I normally use Firefox, but it also come up while IE is running.  Any help would be appreciated.

[davidg07]

Manzar,
Thanks for the suggestion, but that didn't seem to work. I did those steps, and it didn't make any difference. Still getting the same old error message.
-David

[gerryf]

let's see what is running...could you print a hijack log?

[davidg07]

Sorry, don't know what that is.

[gerryf]

see my signature

[davidg07]

Ok, here is the logfile:

Logfile of HijackThis v1.99.1
Scan saved at 4:46:42 PM, on 7/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\IBMTOOLS\UTILS\ibmprc.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Gmail Notifier\G001-1.0.24.0\gnotify.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\3k4t2iqc.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Sony Handheld\HOTSYNC.EXE
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\David Gray\My Documents\Installers\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homestarrunner.com/
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [UC_Start] C:\Program Files\IBM\Updater\\ucstartup.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [IBMPRC] C:\IBMTOOLS\UTILS\ibmprc.exe
O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.24.0\gnotify.exe
O4 - HKLM\..\Run: [AOL 9.0 Optimized] AOLCLIENT.EXE
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [3k4t2iqc] C:\WINDOWS\system32\3k4t2iqc.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Sony Handheld\HOTSYNC.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken\QWDLLS.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O20 - Winlogon Notify: QConGina - C:\WINDOWS\SYSTEM32\QConGina.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: IBM Rapid Restore Ultra Service - Unknown owner - C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: QCONSVC - IBM Corp. - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: ZESOFT - Unknown owner - C:\WINDOWS\zeta.exe (file missing)

[gerryf]

OK Dave,

This looks like a work laptop, correct? You have a boatload of stuff running and a number of obvious errors, plus one running file that is sending up a big warning sign for me

c:\windows\system32\3k4t2iqc.exe

The error you are getting is a memory issue where IE is conflicting with something else in memory. It could be a bad memory stick, but it could also be a programming error.

Here's the problem, though....because this is a work laptop I am relucatant to offer advice

What's the situation with you and the IT department?

[davidg07]

This is an IBM Thinkpad (generally used as work laptops), but it's my personal computer. I just liked the laptop, so I got it. Feel free to give whatever advice on what you think I should do. Thanks.

[gerryf]

Yes, well, I see several Enterprise apps (or those typically used on work computers) as well...

OK, let's start simple




Step 1

Start > Run, type
msconfig
<enter>

On the general tab, select SELECTIVE START UP then uncheck
load system.ini
load win.ini
load startup services
load startup items
Reboot.
Does the error repeat? If not, continue with the next part. If so, go to STEP 2.


If not, Start > Run, type
msconfig
<enter>

check load startup items
Reboot.
Does the error repeat? If not, continue with the next part. If so, go to STEP 2.


If not, Start > Run, type
msconfig
<enter>

check load startup services
Reboot.
Does the error repeat? If not, continue with the next part. If so, go to STEP 2.


If not, Start > Run, type
msconfig
<enter>

check load win.ini
Reboot.
Does the error repeat? If not, continue with the next part. If so, go to STEP 2.


If not, Start > Run, type
msconfig
<enter>

check load system.ini
Reboot.
Does the error repeat? If not, continue with the next part. If so, go to STEP 2.

Report back

-------------------------------------

STEP 2

When you find the error, repeating, you have arrived at the group that is causing the problem.

Leave everything as is and go to the tab with the same name as the one you just re-enabled and uncheck everything you find within the tab....reboot.

Does the probelm recur? If not, check one item and reboot, continuing until you discover the offending application/service

Then report back

[davidg07]

I went through all of Step 1, and while the whole time the error didn't come up. Also, now my computer isn't showing any drivers or devices running. It won't connect to the internet or say that I have a network adapter or anything like that. It loads up all the programs in the system tray (even one's I've previously told not to auto-load), but it doesn't start up a network connection. I try to make a network connection, and it acts like I have no modem or anything. I'm writing this from a second computer right now. Also, when I did the first part of Step 1, windows loaded up and looked like it was in Safe Mode. That time none of the system tray programs loaded, and the start bar was white instead of the usual Windows XP blue. After doing parts 2-4 of Step 1 the system tray programs load, but the start bar is still white like in Safe Mode and there's no network ability. What went wrong, and more importantly what can I do to fix it?

[makai]

Safe mode doesn't use XP desktop themes. Your computer taskbar probably looks like a Win98, ME, or 2K taskbar. All the messing around has probably just changed your desktop theme for Normal mode also.

There are two places that can change the way your desktop appears. One in My Computer Properties, and the other in Desktop Properties. There are inter-related so changing one affects the other.

To correct this, open Display Properties (right click on your desktop>select Properties). On the Themes tab, select Windows XP as the theme.

By the way... I'm a Thinkpad person myself. Here's a great Thinkpad support site... visit it next time you have problems!
http://forum.thinkpads.com/

makai

Edited by makai, 07 July 2005 - 09:19 PM.

[davidg07]

Thanks for the tip makai, but it's not as simple as that. It never actually started in safe mode, and the problem isn't just that the desktop looks weird. It doesn't recognize that there's any hardware installed. When you go to the Device Manager, it's empty. Absolutely nothing in it.

[gerryf]

dave, did you
start > run
msconfig
enter

and choose NORMAL STARTUP, and hit OK, and reboot?

[davidg07]

Yes. The startup tray programs came back, but nothing else.