Page 1 of 4 123 ... LastLast
Results 1 to 15 of 50
  1. #1
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Getting a DEP Error with Windows Explorer (XPHE-SP2)

    My son's computer is giving us a "Data Execution Prevention" error whenever he invokes any kind of program that uses Windoze Explorer. This included file explorer, the control panel, and others. Updating Symantec did nothing to correct the problem. Does anybody out there have any suggestions?

    TIA, Douglas

  2. #2
    Gold Lounger Rebel's Avatar
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    3,024
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Getting a DEP Error with Windows Explorer (XPH

    <!mskb=875351>Microsoft Knowledge Base Article 875351<!/mskb> may help.
    John
    A Child's Mind, Once Stretched by Imagination...
    Never Regains Its Original Dimensions

  3. #3
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: Getting a DEP Error with Windows Explorer (XPHE-SP2)

    I would do a thorough check for spyware etc. - see Anti Adware, Spyware, Hijack and Tutorials & Links to Detection & Removal Tools.

    If that doesn't help, You receive a "Data Execution Prevention" error message in Windows XP Service Pack 2 or in Windows XP Tablet PC Edition 2005 describes how to turn off DEP for a specific application or in general.

  4. #4
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    I have run the latest Symantec virus checker - no viruses. I ran AdAware and found over 500 malware and adware files, cleared them, but no solution to the explorer problem. Ran Spybot and found a few more - same story. Ran Stinger without success. Downloaded HijackThis, ran it and posted the log on the Tom Coyote site. Am now waiting.

    Douglas

  5. #5
    Plutonium Lounger
    Join Date
    Oct 2001
    Location
    Lexington, Kentucky, USA
    Posts
    12,107
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Getting a DEP Error with Windows Explorer (XPH

    I've had a recent experience with helping someone with her computer and AdAware/Spybot finding almost 1,000 "bad guys" but when I suggested to her (for the heck of it) that she run them AGAIN, some more stuff was found. You might also try to run AdAware and Spybot for a second time to see if the same thing happens in your case. I have no idea why - maybe the program(s) get overloaded and can't handle any more in that first run. Shouldn't hurt to try again.

  6. #6
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    I agree with Al here. I always run Adaware and Spybot until they say I'm clean. Just to be sure. <img src=/S/yep.gif border=0 alt=yep width=15 height=15>

    Have a look here to see if it sheads any light on the DEP error. It does sound as though something is trying to run Windows Explorer without the proper permissions.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  7. #7
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    I keep running them, but so far, I have been unable to track down the cause for the DEP which is a real pain because I cannot use the file explorer, the control panel, unzip files, look at certain directories, invoke the "run" command, or just about anything else. I can do this in safe mode, so it is something that loads after that, but I don't know what. I have a log posted over on the HijackThis forums, but no one has answered it so far. Must not have used a provoking enough title I guess.

    D.

  8. #8
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    If you want to post the log here (as an attachment, please) I'll have a look at it and see if there is something obvious or something strange that I can track down and identify. I'm not the expert that the folks on those forums are, but I've cleaned more than a few computers up for friends and family. If you can operate in Safe Mode then you can get rid of this problem without too much trouble once you can identify it.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  9. #9
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Doc, that's very kind of you. I am not getting any help so far over on the HJT forum. Here is the log file as an attachment.

    Thanks again. Douglas

  10. #10
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Hey Douglas,

    These two entries trouble me because I couldn't find out what they were on Google. Do you recognize or know what coygezhh.dll is associated with ??

    O2 - BHO: (no name) - {82948568-39AA-6E27-ABFD-6C134A8E66C3} - C:WINDOWSsystem32coygezhh.dll
    O2 - BHO: (no name) - {83948568-39DE-1853-ABF3-6213308766CD} - C:WINDOWSsystem32coygezhh.dll


    Also this one. Same questions about ejqssx.dll.

    O2 - BHO: (no name) - {D6C7826D-3C8A-1504-AFF3-6213308767C4} - C:WINDOWSsystem32ejqssx.dll

    And this one. No name, no file ....... no use that I can see.

    O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)

    And this. Do you know what it is ?? What it does ?? Is Ehnkkd listed in Add/Remove Programs ??

    O4 - HKLM..Run: [Fqkjozs] C:Program FilesEhnkkdVgpn.exe

    This as well. Recognize Enae or baat.exe ??

    O4 - HKCU..Run: [Enae] Cocuments and SettingsLittle KahunaApplication Databaat.exe

    This one is trouble and you should try to remove MyWebSearchBar from Add/Remove Programs.

    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZSYYYYYYBBUS

    These two are references to adware that is no longer present.

    O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:WINDOWSsystem32ms.exe (file missing)
    O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:WINDOWSsystem32ms.exe (file missing)

    Please understand. I'm offering these entries as possible sources of trouble. I'm not telling you to remove them with HijackThis or any other program just yet. The entries are all suspicious in a general sense, but each PC configuration is different and each person must deceide what tradeoffs they will accept to use some programs that come bundled with adware. Go back to the HijackThis forum and "bump" your question back to the top of the list and continue to wait for a reply. Go back and bump your post each day until someone picks it up. They're volunteers like us, so be patient.

    I would also go to Add/Remove Programs and remove Weatherbug. It comes in with AOL Instant Messenger and is adware junk you don't want. It's an optional install so tell your kids or whoever uses the IM client to read the prompts when upgrading or installing and say NO to the stuff they don't understand or programs that want to install when you install something else unless they are necessary to your program. If you simply can't wait, then be certain to backup any files you care about and then post back here and I'll suggest which entries can be removed safely. There are several that I'm very sure are safe to remove, but would prefer to wait for conformation from the other forum or you telling me that you can't wait and have done the backups I request. HTH.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  11. #11
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Doc,

    Thanks for taking the time to look through this junk. I add the following, not as a justification, but rather just as "information" that might explain the rash of stuff found on this PC. This box is my 12 year old son's. We built it together (kind of) so that he would move off the family computer which he tended to fill (and foul) up. So far, the lectures about "careful and responsible" computer use have fallen on barren ground. He is a gizmo addict and tends to download anything that strikes his fancy. I have removed WeatherBug more than once from the family PC and he adamantly declares that he "uses" it.

    I am of two minds over this. Obviously, I wish he was wiser when it comes to computers and downloading, but how does one become wise? Not from listening to one's parents (as I recall). So, to some extent, I think he has to learn from experience (a work in progress). I am bothered by this current situation, because I cannot determine what is causing the DEP error and that particular problem prevents access to the "add/remove" module of the control panel. So that option is out until we get past the DEP error.

    Once again, I appreciate your time and efforts on this. One additional question. How does one "bump" one's post on the HJT forum? I know that everyone is a volunteer and I do not wish to be a whiney suplicant, but there are so many posts on that forum that in the course of one day, an entry is buried several pages back.

    TIA, Douglas

  12. #12
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Douglas,

    I'm glad you clarified who the box belongs to. That explains alot and also gives us a bit more latitude with our handling of the situation. My experience is that 12 year olds don't have much in the way of "critical" data to worry about. That's not to say that I would not respect his data in my efforts. Just that I can be a bit less "sure" about something and know I'm not going to block access to the only copy of a doctoral thesis or irreplaceable family photographs. <img src=/S/grin.gif border=0 alt=grin width=15 height=15> And if something were to happen ............ as you so wisely pointed out, you don't recall learning anything from your parents lectures, but the experiences of life's mistakes..... GREAT Teacher !!! We first need to get back control of the system. So if you are willing I'll give it a shot and see if we can clean this up.

    Run another HijackThis scan and this time when it finishes have it remove the following items ............
    O2 - BHO: (no name) - {82948568-39AA-6E27-ABFD-6C134A8E66C3} - C:WINDOWSsystem32coygezhh.dll
    O2 - BHO: (no name) - {83948568-39DE-1853-ABF3-6213308766CD} - C:WINDOWSsystem32coygezhh.dll
    O2 - BHO: (no name) - {D6C7826D-3C8A-1504-AFF3-6213308767C4} - C:WINDOWSsystem32ejqssx.dll
    O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
    O4 - HKLM..Run: [Fqkjozs] C:Program FilesEhnkkdVgpn.exe
    O4 - HKCU..Run: [Enae] Cocuments and SettingsLittle KahunaApplication Databaat.exe
    O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:WINDOWSsystem32ms.exe (file missing)
    O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:WINDOWSsystem32ms.exe (file missing)

    Reboot the system and see how much, if any functionality you get back. Also be sure that the system is not connected to the internet (unplug the cable or phone line) while you are doing this. Then run another HijackThis scan and post the results as an attachment.

    One last thing. Some of the things I checked out had to do with translation and looking at webpages in your "native" language. Any clue what that is all about ?? If it's something particular to your situation I'll avoid anything with a reference to that.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  13. #13
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    I ran the HJT program and deleted the items listed in your post.

    The good news is that the system was able to reboot and I was able to log into my son's environment. The bad news is that the DEP error kicked in when I tried to open Explorer. So the problem still exists. I reran Hijack and saved a new log which I have attached. I have to run out and do errands this morning. Will check back upon return. I certainly appreciate all the help you folks have given.

    Douglas

  14. #14
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Douglas,

    Glad to hear that you got back in. <img src=/S/fanfare.gif border=0 alt=fanfare width=31 height=23> You didn't say how much control you have over the machine so I'll assume you can do most basic things. I would next recommend that you try to uninstall MyWebSearch from the machine. It is questionable as to the true nature of the program and whether or not it is spyware/adware, but it may be interfering with some things and is definitely not necessary. I found these instructions here. The last line I'd be suspicious of. Help from the people who are promoting the program?? <img src=/S/doh.gif border=0 alt=doh width=15 height=15> See if this helps and then post back. Good Luck <img src=/S/crossfingers.gif border=0 alt=crossfingers width=17 height=16>

    "First close all open browser windows. Then click 'Start' menu, then select 'Control Panel' and open the 'Add/Remove Programs' option. Find "My Search Bar" in the list of programs, and click 'Change/Remove' and follow the prompts to remove them. Other components to look for and remove are:

    My Web Search (Smiley Central or FWP product as applicable)
    My Way Speedbar (Smiley Central or other FWP as applicable)
    My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
    My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
    Search Assistant - My Way
    Fun Web Products Easy Installer
    Reboot your PC to ensure the uninstall process is complete.

    If required you can change your browser home page by clicking Tools > Internet Options on your browser.

    This procedure should completely remove MySearch and MyWebSearch. If you do have any problems removing MyWebSearch/MySearch, NoAdware Customer Support is happy to personally assist any of its registered users to manually remove MyWebSearch or MySearch, if that's what you want."
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  15. #15
    3 Star Lounger
    Join Date
    Jun 2002
    Location
    Duluth, Minnesota, USA
    Posts
    215
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Getting a DEP Error with Windows Explorer (XPH

    Doc, it's late at night and I am beat, so I won't try anything tonight. Tomorrow (when son is off to school) I may have time to try your latest fix.

    BTW, I can only do file related things in "safe" mode. Still can't get explorer to function in regular mode without the DEP error.

    Douglas

Page 1 of 4 123 ... LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •