I don't know why it's doing this suddenly.I run win98se with ie6sp1. I'm current on all fixes and updates, tried to repair ie, ran scandisk, sfc, checked many other sites but have not been able to come up with a solution. Here goes:
Today my browser started giving me this: Iexplore has caused an invalid page fault error in module msvcrt.dll...
The browser would shut down and off went an error report.
Dr. Watson is telling me this: Microsoft ® C Runtime Library performed an invalid memory access.
Module Name: MSVCRT.DLL
Description: Microsoft ® C Runtime Library
Version: 6.00.8337.0
Product: Microsoft ® Visual C++
Manufacturer: Microsoft Corporation
Application Name: Iexplore.exe
Description: Internet Explorer
Version: 6.00.2800.1106
Product: Microsoft® Windows® Operating System
Manufacturer: Microsoft Corporation
And Hijack this produced this: Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:30:10 PM, on 2/27/08
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSGLOOP.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\MSG32.EXE
C:\PROGRAM FILES\COMMON FILES\STOPZILLA!\SZSERVER.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\REGPROT\REGPROT.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\CHRIS\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\PROGRAM FILES\STOPZILLA!\STOPZILLA.EXE
C:\CHRIS\PROGRAM FILES\MICROSOFT WORKS\WKDETECT.EXE
C:\CHRIS\PROGRAM FILES\IOMEGA\IOMEGA AUTOMATIC BACKUP\IBACKUP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\DRWATSON.EXE
C:\PROGRAM FILES\REGISTRYSMART\REGISTRYSMART.EXE
C:\CHRIS\PROGRAM FILES\DIGIPORTAL SOFTWARE\CHOICEMAILONE\CHOICEMAIL.EXE
C:\CHRIS\PROGRAM FILES\DIGIPORTAL SOFTWARE\CHOICEMAILONE\CHOICEMAIL.EXE
C:\CHRIS\PROGRAM FILES\DIGIPORTAL SOFTWARE\CHOICEMAILONE\IZYMAIL.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\TREND MICRO\HIJACKTHIS\HIJACKTHIS.EXE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/ext/hp/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: CitiBrowserHelper Class - {E8C0F153-B768-4e68-B14F-40F0E8531675} - (no file)
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\CHRIS\Program Files\RoboForm\ROBOFORM.DLL
O2 - BHO: PopStop - {65D9ACBC-D683-47D7-8C60-C0E727DCC0B1} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\IETOOLBAR.DLL
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - c:\Program Files\STOPzilla!\SZIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN1\YT.DLL
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\CHRIS\Program Files\RoboForm\ROBOFORM.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [RegProt] c:\regprot\regprot.exe /start
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] c:\chris\program files\iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] c:\chris\program files\iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Chris\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [STOPzilla] C:\PROGRAM FILES\STOPZILLA!\STOPZILLA.EXE /autostart
O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [szserver] "C:\PROGRAM FILES\COMMON FILES\STOPZILLA!\SZSERVER.EXE" szserver
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Chris\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [DRL Sheduler] C:\PROGRAM FILES\TRAFFICSEEKER 8.0\Scheduler.exe
O4 - HKCU\..\Run: [Iomega Automatic Backup] C:\CHRIS\PROGRAM FILES\IOMEGA\IOMEGA AUTOMATIC BACKUP\IBACKUP.EXE
O4 - HKCU\..\Run: [RoboForm] "C:\CHRIS\Program Files\RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\RunServices: [Microsoft Works Update Detection] C:\Chris\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\RunServices: [DRL Sheduler] C:\PROGRAM FILES\TRAFFICSEEKER 8.0\Scheduler.exe
O4 - HKCU\..\RunServices: [Iomega Automatic Backup] C:\CHRIS\PROGRAM FILES\IOMEGA\IOMEGA AUTOMATIC BACKUP\IBACKUP.EXE
O4 - HKCU\..\RunServices: [RoboForm] "C:\CHRIS\Program Files\RoboForm\RoboTaskBarIcon.exe"
O4 - HKUS\.DEFAULT\..\Run: [Microsoft Works Update Detection] C:\Chris\Program Files\Microsoft Works\WkDetect.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [DRL Sheduler] C:\PROGRAM FILES\TRAFFICSEEKER 8.0\Scheduler.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [Iomega Automatic Backup] C:\CHRIS\PROGRAM FILES\IOMEGA\IOMEGA AUTOMATIC BACKUP\IBACKUP.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [RoboForm] "C:\CHRIS\Program Files\RoboForm\RoboTaskBarIcon.exe" (User 'Default user')
O4 - .DEFAULT Startup: TimeSync.lnk = C:\CHRIS\Program Files\Time Synchro\tsyn.exe (User 'Default user')
O4 - Startup: TimeSync.lnk = C:\CHRIS\Program Files\Time Synchro\tsyn.exe
O8 - Extra context menu item: Yahoo! &SMS - file://C:\Program Files\Yahoo!\Common/ycsms.htm
O8 - Extra context menu item: Get It With Kontiki - res://C:\PROGRAM FILES\KONTIKI\BIN\BH309190.DLL/201
O8 - Extra context menu item: RoboForm Toolbar - file://C:\CHRIS\Program Files\RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Fill Forms - file://C:\CHRIS\Program Files\RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Save Forms - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Identities Editor - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditIdent.html
O8 - Extra context menu item: Passcards Editor - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditPass.html
O8 - Extra context menu item: Safenotes Editor - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditNote.html
O8 - Extra context menu item: RoboForm Options - file://C:\CHRIS\Program Files\RoboForm\RoboFormComOptions.html
O8 - Extra context menu item: Customize Menu - file://C:\CHRIS\Program Files\RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Password Generator - file://C:\CHRIS\Program Files\RoboForm\RoboFormComPasswordGenerator.html
O8 - Extra context menu item: RoboForm TaskBar Icon - file://C:\CHRIS\Program Files\RoboForm\RoboFormComTaskBarIcon.html
O8 - Extra context menu item: Set Fields - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSetFields.html
O8 - Extra context menu item: Reset Fields - file://C:\CHRIS\Program Files\RoboForm\RoboFormComResetFields.html
O8 - Extra context menu item: Clear Fields - file://C:\CHRIS\Program Files\RoboForm\RoboFormComClearFields.html
O8 - Extra context menu item: Logoff - file://C:\CHRIS\Program Files\RoboForm\RoboFormComLogoff.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSavePass.html
O9 - Extra button: Identities - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditIdent.html
O9 - Extra 'Tools' menuitem: Identities Editor - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditIdent.html
O9 - Extra button: Passcards - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditPass.html
O9 - Extra 'Tools' menuitem: Passcards Editor - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditPass.html
O9 - Extra button: Safenotes - {45DB34C3-955C-11D3-ABEF-444553540002} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditNote.html
O9 - Extra 'Tools' menuitem: Safenotes Editor - {45DB34C3-955C-11D3-ABEF-444553540002} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComEditNote.html
O9 - Extra button: Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComOptions.html
O9 - Extra 'Tools' menuitem: RoboForm Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComOptions.html
O9 - Extra button: Customize - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComCustomizeIEMenu.html
O9 - Extra 'Tools' menuitem: Customize Menu - {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComCustomizeIEMenu.html
O9 - Extra button: Generate - {320AF880-6646-11D3-ABEE-C5DBF3571F50} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComPasswordGenerator.html
O9 - Extra 'Tools' menuitem: Password Generator - {320AF880-6646-11D3-ABEE-C5DBF3571F50} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComPasswordGenerator.html
O9 - Extra button: TaskBar - {320AF880-6646-11D3-ABEE-C5DBF3571F51} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComTaskBarIcon.html
O9 - Extra 'Tools' menuitem: RoboForm TaskBar Icon - {320AF880-6646-11D3-ABEE-C5DBF3571F51} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComTaskBarIcon.html
O9 - Extra button: Set Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F52} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSetFields.html
O9 - Extra 'Tools' menuitem: Set Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F52} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComSetFields.html
O9 - Extra button: Reset Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F53} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComResetFields.html
O9 - Extra 'Tools' menuitem: Reset Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F53} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComResetFields.html
O9 - Extra button: Clear Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F54} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComClearFields.html
O9 - Extra 'Tools' menuitem: Clear Fields - {320AF880-6646-11D3-ABEE-C5DBF3571F54} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComClearFields.html
O9 - Extra button: Logoff - {320AF880-6646-11D3-ABEE-C5DBF3571F55} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComLogoff.html
O9 - Extra 'Tools' menuitem: Logoff - {320AF880-6646-11D3-ABEE-C5DBF3571F55} - file://C:\CHRIS\Program Files\RoboForm\RoboFormComLogoff.html
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {642ACB32-23DA-11D5-80CF-0050DA680987} (HearMe Voice Client Control (Firewall)) - http://www.talkingtech.cc/hearme/vccfe.cab
O16 - DPF: {40289096-9F72-4A04-BCB3-E434ECDCEE33} (AppDLCtrl Class) - http://download.howudodat.com/chatterbox/download/appdl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/18e1806b627b02...ip/RdxIE601.cab
O16 - DPF: {E5C97835-6865-443E-8C33-671D9C71A6D0} (LedaX Control) - http://www.clientspace.com/download/RapidocsX.cab
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.bitstream.com/wfplayer/tdserver.cab
O16 - DPF: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_01) -
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - https://rr.esecurecare.net/rnt/rnl/java/RntX.cab
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direcway.com/dwayready/dpcsysinfo.cab
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB
O16 - DPF: {01111C00-3E00-11D2-8470-0060089874ED} (Support.com ActionRunner Class) - http://help.rr.com/Foundrysdccommon/download/tgctlar.cab
O16 - DPF: {C3D96A02-EEA7-4264-98D7-D882A7338DE5} - http://imgfarm.com/images/nocache/communit...etup1.0.0.4.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
O16 - DPF: {F5820AD3-9B20-423E-B2AA-7AF2B4055746} (CRegistryDownload Class) - http://download.paltalk.com/download/0.x/regdload.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab28578.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://messenger.zone.msn.com/binary/ZAxRcMgr.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab28578.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?326
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://ipgweb.cce.hp.com/rdqna/downloads/msxml4.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {A526A2C7-723E-4081-BF70-A7A9913E8C4A} (LogData Class) - http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {F09BFD07-20B5-46D8-A6D5-BE4EF22F1F4D} (DGTx.uc1) - http://members.driverguide.com/director/di...de=toolkit_lite
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://www.driveragent.com/files/driveragent.cab
O16 - DPF: IEToolbar - http://www.adlandpro.com/toolbar/ietoolbar.cab
O24 - Desktop Component 0: (no name) - http://www.teste-dich.net/lay18/Bilder/index_50.gif
--
End of file - 15497 bytes
I had also run adaware, and because that one is no longer as good as it used to be I tried StopZilla, which found some entries. I also downloaded and ran registrysmart, which found a load of more entries which I haven't deleted. I have been using Registry mechanic, and I always double check before I delete anything. I also disabled browser addons as suggested somewhere, but it made no difference. Now the STRANGE thing is, that this does not happen everywhere. Apparently I have no problem here. But when I go to Yahoo for instance, it happens immediately. Same thing with some of Microsoft's pages, where I obviously went for help as well. My homepage opens just fine and so do other sites.
One more clue: I Un-installed McAfee and removed all associated left overs manually. After the reboot was when this started happening. The reason I un-installed McAfee is because there were some problems with the original install and I am planning on re-installing it. Any input is highly appreciated!!!!!
PS: Came back earlier but could not open this post to edit. That time I got
IEXPLORE caused an invalid page fault in module FLASH9E.OCX at 016f:0620762d
Well, I downloaded the most recent DX for my system and so far so good. I am going to continue searching for updates of various components and see where it takes me.