Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

MSHTML.dll issue

Started by tjmcs , May 20 2017 12:22 PM

Please log in to reply

#1
tjmcs

Posted 20 May 2017 - 12:22 PM

Member

Member
329 posts

Greetings,

Since I discovered this problem due to Internet Explorer 11 crashes, I'm posting here. If wrong, please direct me.

Getting a lot of "IE has stopped working..." errors. Checked my error logs. Found all IE errors were linked to MSHTML.dll. To me, it seems this file is corrupted. Is there any way to remove and replace it?

Thanks.

tjmcs

#2
RKinner

Posted 20 May 2017 - 01:33 PM

Malware Expert

Expert
24,624 posts

Open an elevated command Prompt

Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator

Win 8: http://www.eightforu...indows-8-a.html

Win 10: http://www.howtogeek...-in-windows-10/

Type:

sfc  /scanfile=\windows\system32\mshtml.dll

hit Enter. If the file is good it will say:

Windows Resource Protection did not find any integrity violations.

If the file is bad it will attempt to replace it with a backup copy and tell you if it can fix it.

#3
tjmcs

Posted 20 May 2017 - 01:49 PM

Member

Topic Starter
Member
329 posts

RKinner,

Performed your suggestion. No integrity violations.

Still experienced an IE crash. Event log showed this error:

Faulting application name: IEXPLORER.exe
Faulting module name: MSHTML.dll

Edited by tjmcs, 20 May 2017 - 01:59 PM.

#4
RKinner

Posted 20 May 2017 - 02:31 PM

Malware Expert

Expert
24,624 posts

1. Please download the Event Viewer Tool by Vino Rosso

http://images.malwar...om/vino/VEW.exe

and save it to your Desktop:

2. Right-click VEW.exe and Run AS Administrator

3. Under 'Select log to query', select:

* System

4. Under 'Select type to list', select:

* Error

* Warning

Then use the 'Number of events' as follows:

1. Click the radio button for 'Number of events'

Type 20 in the 1 to 20 box

Then click the Run button.

Notepad will open with the output log.

Please post the Output log in your next reply then repeat but select Application. (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download

Latest Version button - Do NOT press the large Start Download button on the upper left!)

Download, Save and Install it. Tell it you do not need CCLEANER. Run Speccy. When it finishes (the little icon in the bottom left will stop moving),

File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System.

(It will be near the top about 10 lines down.) Save the file. Attach the file to your next post. (More Reply Options, Choose File, Open, Attach This File)

Get Process Explorer

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).

View, Select Column, check Verified Signer, OK

Options, Verify Image Signatures

Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.

Wait a full minute then:

File, Save As, Save. Note the file name. Open the file on your desktop and copy and paste the text to a reply.

#5
tjmcs

Posted 20 May 2017 - 03:18 PM

Member

Topic Starter
Member
329 posts

VEW system result.

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 20/05/2017 3:55:31 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 18/03/2017 2:36:05 AM
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 20/05/2017 7:01:56 PM
Type: Error Category: 0
Event: 36887 Source: Schannel
The following fatal alert was received: 40.

Log: 'System' Date/Time: 20/05/2017 4:20:17 PM
Type: Error Category: 0
Event: 7032 Source: Service Control Manager
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: An instance of the service is already running.

Log: 'System' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 20/05/2017 1:33:02 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 20/05/2017 1:33:02 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 19/05/2017 9:59:34 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 19/05/2017 9:59:34 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 19/05/2017 10:39:25 AM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 19/05/2017 10:39:25 AM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 18/05/2017 9:58:13 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 18/05/2017 9:58:13 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 17/05/2017 11:00:53 PM
Type: Error Category: 0
Event: 7031 Source: Service Control Manager
The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Log: 'System' Date/Time: 17/05/2017 11:00:53 PM
Type: Error Category: 0
Event: 7024 Source: Service Control Manager
The Windows Search service terminated with service-specific error %%-1073473535.

Log: 'System' Date/Time: 17/05/2017 2:06:11 AM
Type: Error Category: 0
Event: 36888 Source: Schannel
The following fatal alert was generated: 10. The internal error state is 10.

Log: 'System' Date/Time: 17/05/2017 2:06:08 AM
Type: Error Category: 0
Event: 36888 Source: Schannel
The following fatal alert was generated: 10. The internal error state is 10.

Log: 'System' Date/Time: 17/05/2017 2:06:07 AM
Type: Error Category: 0
Event: 36888 Source: Schannel
The following fatal alert was generated: 10. The internal error state is 10.

Log: 'System' Date/Time: 17/05/2017 2:06:04 AM
Type: Error Category: 0
Event: 36888 Source: Schannel
The following fatal alert was generated: 10. The internal error state is 10.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 20/05/2017 4:16:49 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 20/05/2017 4:16:49 PM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 20/05/2017 2:07:32 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 20/05/2017 2:07:32 PM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 20/05/2017 3:16:20 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 20/05/2017 3:16:20 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 19/05/2017 10:05:31 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 19/05/2017 10:05:31 PM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 19/05/2017 10:58:38 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 19/05/2017 10:58:38 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 19/05/2017 1:53:29 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 19/05/2017 1:53:29 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 18/05/2017 2:43:19 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 18/05/2017 2:43:19 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 18/05/2017 12:26:15 AM
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERAL&PROD_UDISK&REV_5.00#1407011459472082121804&0#.

Log: 'System' Date/Time: 17/05/2017 2:25:01 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 17/05/2017 2:25:01 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 16/05/2017 10:49:40 PM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 16/05/2017 10:49:40 PM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\system32\Rtlihvs.dll

Log: 'System' Date/Time: 16/05/2017 2:23:55 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

#6
tjmcs

Posted 20 May 2017 - 03:19 PM

Member

Topic Starter
Member
329 posts

VEW application result.

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 20/05/2017 3:57:52 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 20/05/2017 8:02:56 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0xf78 Faulting application start time: 0x01d2d1a410ecaf36 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 5067c99b-3d97-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 8:02:25 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0x724 Faulting application start time: 0x01d2d1a3f109a6a6 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 3e028c9b-3d97-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 7:50:09 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0xd0c Faulting application start time: 0x01d2d1a23a98722e Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 87668291-3d95-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 5:25:15 PM
Type: Error Category: 101
Event: 1002 Source: Application Hang
The program iexplore.exe version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: c58 Start Time: 01d2d18de11ba29c Termination Time: 0 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id:

Log: 'Application' Date/Time: 20/05/2017 5:21:29 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x0007470d Faulting process id: 0xf84 Faulting application start time: 0x01d2d18d76993aef Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: c2960841-3d80-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 5:11:28 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x0007470d Faulting process id: 0xe44 Faulting application start time: 0x01d2d18c1bc2d46f Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 5c62382e-3d7f-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 4:40:55 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0xea4 Faulting application start time: 0x01d2d187d83f9fba Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 17a46b1d-3d7b-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 4:40:50 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0xcc0 Faulting application start time: 0x01d2d187cb8c1ed4 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 14d4d5b8-3d7b-11e7-813e-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 3
Event: 7010 Source: Microsoft-Windows-Search
The index cannot be initialized.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 3
Event: 3058 Source: Microsoft-Windows-Search
The application cannot be initialized.

Context: Windows Application

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 3
Event: 3028 Source: Microsoft-Windows-Search
The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:47 PM
Type: Error Category: 3
Event: 3029 Source: Microsoft-Windows-Search
The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
Element not found. (HRESULT : 0x80070490) (0x80070490)

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 3
Event: 3029 Source: Microsoft-Windows-Search
The plug-in in <Search.JetPropStore> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 1
Event: 9002 Source: Microsoft-Windows-Search
The Windows Search Service cannot load the property store information.

Context: Windows Application, SystemIndex Catalog

Details:
The content index database is corrupt. (HRESULT : 0xc0041800) (0xc0041800)

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 3
Event: 7042 Source: Microsoft-Windows-Search
The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 3
Event: 7040 Source: Microsoft-Windows-Search
The search service has detected corrupted data files in the index {id=4700}. The service will attempt to automatically correct this problem by rebuilding the index.

Details:
The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801)

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 3
Event: 9000 Source: Microsoft-Windows-Search
The event description cannot be found.

Log: 'Application' Date/Time: 20/05/2017 4:19:46 PM
Type: Error Category: 3
Event: 455 Source: ESENT
Windows (2492) Windows: Error -1811 occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00045.log.

Log: 'Application' Date/Time: 20/05/2017 2:42:47 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0xde4 Faulting application start time: 0x01d2d17757816219 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 97049e9b-3d6a-11e7-8f2d-5404a608dfec

Log: 'Application' Date/Time: 20/05/2017 2:42:40 PM
Type: Error Category: 100
Event: 1000 Source: Application Error
Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17840, time stamp: 0x555fe1bb Faulting module name: MSHTML.dll, version: 11.0.9600.17842, time stamp: 0x5565cf99 Exception code: 0xc0000005 Fault offset: 0x002442a3 Faulting process id: 0x1384 Faulting application start time: 0x01d2d17747b9f848 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\system32\MSHTML.dll Report Id: 927e6a4d-3d6a-11e7-8f2d-5404a608dfec

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 20/05/2017 5:24:06 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 4:24:05 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 4:22:05 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 4:21:36 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

Log: 'Application' Date/Time: 20/05/2017 4:20:27 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
No protocol handler is available. Install a protocol handler that can process this URL type. (HRESULT : 0x80040d37) (0x80040d37)

Log: 'Application' Date/Time: 20/05/2017 4:20:24 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

Log: 'Application' Date/Time: 20/05/2017 4:20:16 PM
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Index Corruption}.

Log: 'Application' Date/Time: 20/05/2017 2:41:51 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 1:40:18 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 1:38:18 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 1:37:49 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

Log: 'Application' Date/Time: 20/05/2017 1:36:47 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
No protocol handler is available. Install a protocol handler that can process this URL type. (HRESULT : 0x80040d37) (0x80040d37)

Log: 'Application' Date/Time: 20/05/2017 1:33:46 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

Log: 'Application' Date/Time: 20/05/2017 1:33:35 PM
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Index Corruption}.

Log: 'Application' Date/Time: 20/05/2017 2:58:12 AM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 20/05/2017 1:58:12 AM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 19/05/2017 10:04:57 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
A server error occurred. Check that the server is available. (HRESULT : 0x80041206) (0x80041206)

Log: 'Application' Date/Time: 19/05/2017 10:04:29 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

Log: 'Application' Date/Time: 19/05/2017 10:03:22 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <mapi://{S-1-5-21-3292478683-1069677828-4044609029-1000}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
No protocol handler is available. Install a protocol handler that can process this URL type. (HRESULT : 0x80040d37) (0x80040d37)

Log: 'Application' Date/Time: 19/05/2017 10:00:20 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Program Files (x86)/Microsoft Office/Office14/Visio Content/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)

#7
tjmcs

Posted 20 May 2017 - 03:21 PM

Member

Topic Starter
Member
329 posts

BTW, how do you post such large posts?

#8
RKinner

Posted 20 May 2017 - 04:15 PM

Malware Expert

Expert
24,624 posts

You have to attach the speccy log (More Reply Options, Choose File, Open, Attach This File)

#9
tjmcs

Posted 20 May 2017 - 04:26 PM

Member

Topic Starter
Member
329 posts

Speecy result and Process Explorer result.

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 95.25 0 K 24 K 0
iexplore.exe 2.78 187,080 K 206,976 K 460 Internet Explorer Microsoft Corporation (Verified) Microsoft Corporation
procexp64.exe 0.90 25,020 K 44,372 K 2756 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
Interrupts 0.22 0 K 0 K n/a Hardware Interrupts and DPCs
dwm.exe 0.16 32,800 K 34,280 K 2672 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
csrss.exe 0.15 3,780 K 20,396 K 568 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
System 0.13 452 K 16,140 K 4
svchost.exe 0.11 32,404 K 45,492 K 472 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.11 188,148 K 196,160 K 1000 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
ETDCtrl.exe 0.09 5,076 K 13,544 K 116 ETD Control Center ELAN Microelectronics Corp. (Verified) ELAN Microelectronics Corporation
LMS.exe 0.01 2,756 K 5,292 K 2980 Local Manageability Service Intel Corporation (Verified) Intel Corporation
taskhost.exe 0.01 23,604 K 24,708 K 1788 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
WmiApSrv.exe 0.01 2,288 K 6,384 K 4300 WMI Performance Reverse Adapter Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.01 4,824 K 10,368 K 792 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.01 7,232 K 13,440 K 2812 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe 0.01 23,636 K 29,008 K 2404 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
explorer.exe 0.01 28,140 K 45,140 K 4940 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.01 18,300 K 19,900 K 944 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
HPNetworkCommunicatorCom.exe < 0.01 3,780 K 10,172 K 3252 HPNetworkCommunicatorCom Hewlett-Packard Development Company, LP (Verified) Hewlett Packard
SearchIndexer.exe < 0.01 54,776 K 62,216 K 3764 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
wmpnetwk.exe < 0.01 11,024 K 11,356 K 1104 Windows Media Player Network Sharing Service Microsoft Corporation (Verified) Microsoft Windows
iexplore.exe < 0.01 20,172 K 45,440 K 1928 Internet Explorer Microsoft Corporation (Verified) Microsoft Corporation
ScanToPCActivationApp.exe < 0.01 5,316 K 14,280 K 2276 ScanToPCActivationApp Hewlett-Packard Development Company, LP (Verified) Hewlett Packard
WLIDSVC.EXE < 0.01 7,440 K 15,076 K 1768 Microsoft® Windows Live ID Service Microsoft Corp. (Verified) Microsoft Corporation
svchost.exe < 0.01 30,372 K 40,756 K 356 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
ETDCtrlHelper.exe < 0.01 3,336 K 7,352 K 1164 ETD Control Center Helper ELAN Microelectronics Corp. (Verified) ELAN Microelectronics Corporation
AsScrPro.exe < 0.01 1,508 K 5,416 K 3208 AsScrPro ASUS (Verified) ASUSTeK Computer Inc.
csrss.exe < 0.01 2,284 K 4,692 K 452 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
HControl.exe < 0.01 6,640 K 8,072 K 3620 HControl ASUS (Verified) ASUSTeK Computer Inc.
svchost.exe < 0.01 14,452 K 16,264 K 1432 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
WLIDSVCM.EXE  1,508 K 3,624 K 1980 Microsoft® Windows Live ID Service Monitor Microsoft Corp. (Verified) Microsoft Corporation
wlanext.exe  2,264 K 5,840 K 1224 Windows Wireless LAN 802.11 Extensibility Framework Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe  3,412 K 7,940 K 684 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe  1,676 K 4,704 K 544 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows
WDC.exe  1,432 K 5,388 K 3688 WDC ASUS (Verified) ASUSTeK Computer Inc.
wcourier.exe  3,224 K 7,920 K 1444 Wireless Console 3  (No signature was present in the subject)
UNS.exe  3,084 K 7,356 K 1320 User Notification Service Intel Corporation (Verified) Intel Corporation
TrustedInstaller.exe  9,792 K 15,208 K 4244 Windows Modules Installer Microsoft Corporation (Verified) Microsoft Windows
taskeng.exe  1,976 K 5,220 K 4240 Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  11,964 K 15,536 K 4052 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  58,212 K 47,936 K 2152 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  5,788 K 10,460 K 872 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  30,544 K 30,616 K 948 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  2,596 K 6,072 K 2176 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  1,328 K 3,792 K 1692 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  1,352 K 3,836 K 1600 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe  2,336 K 5,656 K 3492 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
spoolsv.exe  9,140 K 17,636 K 1396 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
smss.exe  540 K 1,252 K 328 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows
services.exe  6,312 K 13,168 K 600 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows
rundll32.exe  2,112 K 6,684 K 4764 Windows host process (Rundll32) Microsoft Corporation (Verified) Microsoft Windows
RAVCpl64.exe  9,324 K 11,396 K 2912 Realtek HD Audio Manager Realtek Semiconductor (Verified) Realtek Semiconductor Corp
RAVBg64.exe  15,564 K 11,916 K 696 HD Audio Background Process Realtek Semiconductor (Verified) Realtek Semiconductor Corp
procexp.exe  2,312 K 7,612 K 3424 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
OSPPSVC.EXE  4,136 K 11,700 K 4568 Microsoft Office Software Protection Platform Service Microsoft Corporation (Verified) Microsoft Corporation
lsm.exe  2,812 K 4,576 K 632 Local Session Manager Service Microsoft Corporation (Verified) Microsoft Windows
lsass.exe  11,752 K 19,456 K 624 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows
KBFiltr.exe  1,148 K 4,180 K 3680 KBFiltr ASUS (Verified) ASUSTeK Computer Inc.
igfxtray.exe  3,196 K 7,736 K 2996 igfxTray Module Intel Corporation (Verified) Intel Corporation - pGFX
igfxpers.exe  3,732 K 10,348 K 2572 persistence Module Intel Corporation (Verified) Intel Corporation - pGFX
ICCProxy.exe  1,364 K 4,996 K 3344 Intel® Integrated Clock Controller Service - Intel® ICCS Intel Corporation (Verified) Intel Corporation
hkcmd.exe  2,548 K 6,824 K 1536 hkcmd Module Intel Corporation (Verified) Intel Corporation - pGFX
HControlUser.exe  1,080 K 4,080 K 2656 HControlUser ASUS (Verified) ASUSTeK Computer Inc.
GoogleCrashHandler64.exe  1,636 K 756 K 3028 Google Crash Handler Google Inc. (Verified) Google Inc
GoogleCrashHandler.exe  1,500 K 688 K 3000 Google Crash Handler Google Inc. (Verified) Google Inc
GFNEXSrv.exe  832 K 2,668 K 1292 GFNEXSrv ASUS (Verified) ASUSTeK Computer Inc.
FlashUtil64_25_0_0_171_ActiveX.exe  4,332 K 9,852 K 2876 Adobe® Flash® Player Installer/Uninstaller 25.0 r0 Adobe Systems Incorporated (Verified) Adobe Systems Incorporated
DMedia.exe  1,292 K 5,032 K 3148 ATK Media ASUS (Verified) ASUSTeK Computer Inc.
dllhost.exe  2,760 K 7,412 K 3752 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
conhost.exe  1,072 K 2,940 K 1232 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
audiodg.exe  18,628 K 17,576 K 5104 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
ATKOSD2.exe  2,140 K 8,204 K 3092 ATKOSD2 ASUS (Verified) ASUSTeK Computer Inc.
ATKOSD.exe  952 K 5,932 K 3664 ATKOSD ASUS (Verified) ASUSTeK Computer Inc.
AsLdrSrv.exe  1,364 K 4,228 K 1216 ASLDR Service ASUS (Verified) ASUSTeK Computer Inc.
armsvc.exe  1,196 K 4,000 K 1528 Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems
AmIcoSinglun64.exe  2,468 K 6,596 K 2936 Single LUN Icon Utility for VID 058F PID 6366 Alcor Micro Corp. (No signature was present in the subject) Alcor Micro Corp.

Attached Files

JOE-PC.txt 316.24KB 273 downloads

#10
RKinner

Posted 20 May 2017 - 04:55 PM

Malware Expert

Expert
24,624 posts

Speccy doesn't show anything wrong with the PC. VEW says you have a lot of search errors so there may be some confusion in the file system. Try running a disk check:

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:

2. Click Properties, and then click Tools.

3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,

4. Check both boxes and then click Start.

You will receive the following message:

The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?

Click Yes to schedule the disk check, but don't restart yet.

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application. Reboot. The disk check will run and will probably take an hour or more to finish.

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after the line).

sfc /scannow

Run VEW again as before.

For your IE problem try running it without extensions:

Copy the next line:

"\Program Files (x86)\Internet Explorer\iexplore" -extoff http://www.geekstogo.com/

Start, All Programs, Accessories, Command Prompt. Right click in the new window and Paste (or Edit then Paste) and the copied line should appear. Hit Enter.

IE will open to geekstogo.com with Extensions off. (Click on the x to remove the message at the bottom.) Play around with IE. Does it crash? If not one of your extensions is at fault. Click on the gear in the upper right then Manage Add-ons. Click on each add-on and Disable. Restart IE. If no crashes then enable a few add-ons and restart IE. Continue until you find the one that causes the crash,

If running without extensions does not help then try restting IE. In IE, click on the gear and then Internet Options then Advanced. Reset. Reset.

#11
tjmcs

Posted 20 May 2017 - 06:21 PM

Member

Topic Starter
Member
329 posts

So far, no errors. Was able to view webpage I was having problems with. Event log is clear. Actually, my add-ons are the same as before. Don't know. Thanks for hard work. Will mark as solved.

#12
tjmcs

Posted 29 May 2017 - 09:30 AM

Member

Topic Starter
Member
329 posts

Back to the same problem. Found out it is my Shockwave add-on. Can not view some videos I would like but browser not crashing.

#13
RKinner

Posted 29 May 2017 - 01:24 PM

Malware Expert

Expert
24,624 posts

Perhaps a different browser might work better?

#14
tjmcs

Posted 30 May 2017 - 07:04 AM

Member

Topic Starter
Member
329 posts

Think I have found a solution to my problem. Was told Adobe Shockwave might be causing problem. Uninstalled it using Adobe uninstaller and directions on the page. Took it off a day ago and have not had problem. So far. Will keep post updated.

#15
tjmcs

Posted 03 June 2017 - 11:05 AM

Member

Topic Starter
Member
329 posts

Report on solution. No go. Still receiving the IE has stopped working error. Am running IE11 with no add-ons (through start>accessories>system tools>IE no add-ons). No Shockwave or Flash Player. If I start having the problem multiple times during the day, I will run an SFC and the problem goes away for a couple days. I follow each SFC with a Chkdsk. SFC shows the typical Asus pintlgb.imd error. Chkdsk doesn't show anything.