aspnet_state.exe error

Discussion in 'Malware Help (A Specialist Will Reply)' started by bbar, Oct 23, 2006.

  1. bbar

    bbar Private E-2

    Hi,

    I've read and followed the instructions on the thread named "READ & RUN ME FIRST Before Asking for Support" and the problem still seems to exist. Bitdefender found nothing and Panda ActiveScan found three cookies (I have included the logs).

    On shutdown I'm getting the following error:

    aspnet_state.exe - Application Error

    The instruction at "0x007006e" referenced memory at "0x007006e". The memory could not be "read".

    I have also attached the HJT log. It’s strange because Windows Task Manager shows aspnet_state.exe running under user name “NETWORK SERVICE”, but it isn’t on the HJT log.

    Any help would be appreciated.

    Thanks a lot.
     

    Attached Files:

  2. bbar

    bbar Private E-2

    I forgot to put the GetRunKey and ShowNew logs in my original post. Here they are.
     

    Attached Files:

  3. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and check the boxes for the following entries:
    ( Make sure ALL browser windows are closed when you click FIX )

    O2 - BHO: AvayaIEHlprObj Class - {E6DF0B46-7D6F-407A-A6A2-62D17A021A9A} - C:\Program Files\Avaya\Avaya IP Softphone\AvayaWebDial.dll (file missing)

    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

    O20 - AppInit_DLLs:
    Again, make sure ALL browser windows are closed when you click FIX.

    Next, run CCleaner to clean up cookies and temp files.


    Are you familiar with these entries below?
     
  4. bbar

    bbar Private E-2

    First off, thanks for the response. I’m familiar with those two services - both of them are for the Avaya IP Softphone, which is installed on my computer. I followed your instructions and tried to fix the following three entries:

    O2 - BHO: AvayaIEHlprObj Class - {E6DF0B46-7D6F-407A-A6A2-62D17A021A9A} - C:\Program Files\Avaya\Avaya IP Softphone\AvayaWebDial.dll (file missing)
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O20 - AppInit_DLLs:

    There was an error removing this one though:

    O20 - AppInit_DLLs:

    An error window opened and it wanted me to email merijn@spywareinfo.com with what I was trying to remove, and a HJT log. I looked up the email address (here: http://www.spywareinfo.com/~merijn/contact.php) and after I found that the email address was not in use anymore and that the owner wanted people to just post on the forums, I decided against sending an email to the new gmail address.

    Anyway, I’m not sure if this is going to do any good, but I’ve attached a new HJT log. None of the three entries appear on the log, but I still get the aspnet_state.exe error on shutdown. If I kill the process through task manager and then shutdown, it goes down perfectly. Any more suggestions?

    Thanks again for your help.
     

    Attached Files:

  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your log looks ok, because the file "aspnet_state.exe" your're referring belongs to the ASP State Service which is part of the Windows OS and not really malware related I would recommend posting this over in the Software Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds