Something similar after I downloaded an update.
It installed fine. I had no problems. Then after reboot, all seemed okay, And the computer froze. Then after another reboot, I try to copy a file using the right click for the file menu, and get a pop up that says "Protection Error 00000052". That was it before it closed Explorer and rebooted.
I went back and reproduced the error several times and this is what I see:
EXPLORER caused an invalid page fault in
module KERNEL32.DLL at 018f:bff9db61.
Registers:
EAX=c0030bfc CS=018f EIP=bff9db61 EFLGS=00010216
EBX=02e9fe28 SS=0197 ESP=02e5ff78 EBP=02e60214
ECX=00000000 DS=0197 ESI=00000000 FS=3d07
EDX=bff76855 ES=0197 EDI=bff79198 GS=0000
Bytes at CS:EIP:
53 8b 15 e4 9c fc bf 56 89 4d e4 57 89 4d dc 89
Stack dump:
The actual error disables my taskbar and desktop, so I can't really do anything after it hits.
If I get the Explorer Fault, It just sets off a chain of unclosable pop-ups. Gah!
I included this, if it helps. Norton's is installed but disabled. I don't know if that is possibly causing conflict, but I am stumped at this point.
Wee! This is my first post!
Logfile of HijackThis v1.97.7
Scan saved at 6:56:35 PM, on 11/10/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\DESKTOP ARCHITECT\DATRAY.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\SPYWAREGAURD 2.2\SGMAIN.EXE
F:\HOW-TO GUIDES\WINDOWS MOD UTILITIES\THE WONDERFUL ICON\WONDERFL.EXE
C:\PROGRAM FILES\TCLOCK\TCLOCK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\SPYWAREGAURD 2.2\SGBHP.EXE
F:\HOW-TO GUIDES\PC CLINICS\AVAST!\ASHSERV.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
F:\HOW-TO GUIDES\INTERNET UTILITIES\AOL\AMERICA ONLINE 5.0\WAOL.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
F:\HOW-TO GUIDES\INTERNET UTILITIES\AIM95\AIM.EXE
D:\PROGRAM FILES\BROWSERS\MOZILLA FIREFOX\FIREFOX.EXE
D:\GRAPHIC UTILITIES\OPEN CANVAS\OC11B71\OC11B71.EXE
D:\GRAPHIC UTILITIES\OPEN CANVAS\OC303PE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
F:\HOW-TO GUIDES\PC CLINICS\AVAST!\ASHSIMPL.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forums.pp-nest.net/index.php?
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Webcrusin' with Amyah Mae
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\HOW-TO GUIDES\TEXT EDITORS UTILITIES\ADOBE\ACROBAT READER 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-deleon.dll
O2 - BHO: (no name) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\PROGRAM FILES\SPYWAREGAURD 2.2\DLPROTECT.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-deleon.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_12_0.DLL (file missing)
O3 - Toolbar: (no name) - {52FE5233-367C-4EFB-BDD7-0BE4D212C107} - (no file)
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKCU\..\Run: [Desktop Architect] "C:\PROGRAM FILES\DESKTOP ARCHITECT\DATRAY.EXE" -S
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGaurd 2.2\sgmain.exe
O4 - Startup: The Wonderful Icon.lnk = F:\How-To Guides\Windows Mod Utilities\The Wonderful Icon\wonderfl.exe
O4 - Startup: TClock.lnk = C:\Program Files\TClock\TClock.exe
O4 - User Startup: SpywareGuard.lnk = C:\Program Files\SpywareGaurd 2.2\sgmain.exe
O4 - User Startup: The Wonderful Icon.lnk = F:\How-To Guides\Windows Mod Utilities\The Wonderful Icon\wonderfl.exe
O4 - User Startup: TClock.lnk = C:\Program Files\TClock\TClock.exe
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: AOL Instant Messenger (SM) (HKLM)
O9 - Extra button: Wallpaper (HKLM)
O9 - Extra 'Tools' menuitem: &Toolbar Wallpaper (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .swf: C:\PROGRA~1\INTERN~1\PLUGINS\NPSWF32.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38098.6718402778
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab