Dr Watson?

Discussion in 'Software' started by Kegman, Mar 22, 2005.

  1. Kegman

    Kegman Private E-2

    Last night I was cleaning up my HD getting rid of crap i didn't need like an old 4 minute video of a monkey smoking a cigar when i opened a folder full of mpegs avi's and wav's when i got an error that froze up the folder, apparently something was wrong with "Dr. Watsons Postmordum debugger". Didn't think much of it but now everytime i try to open a folder with mpegs avi's or wav's i get an error, if i move the error away and ignore it i can still do things like delete files and open other folders but it's been freezing up alot and just being a pain. It doesn't happen with music files however, just movie files with the exception of ogm's.

    Its just a standard windows explorer error but it only shows up when folders with movie files are opened.

    Windows Explorer has encountered a problem and needs to close. We are sorry for the inconvenience.

    then it asks me to send, dunno if you guys could help me with it but thanks in advance.
     
  2. Adrynalyne

    Adrynalyne Guest

    I suspect malware as the culprit. Please go through the sticky threads in this forum before continuing.

    http://forums.majorgeeks.com/showthread.php?t=35407

    Moving this to spyware forum, Chas and Phillie.

    If you find the system clean, please, by all means, put it back in Software.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Will do Adryn! Quite often this occurs due to a bad BHO. Many times an HSA or about:blank hijack can cause this.

    Kegman, run the steps in the link that Adryn gave and then continue to the below if necessary:


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  4. Kegman

    Kegman Private E-2

    Ok, I downloaded all the programs on the page Adrynalyne linked to, updated them all, ran the trend micro thing (java version) and then DC'd and ran Spybot CCclearer and adaware with spywareblaster as well. Other than 9 cookies found in my temp internet folder before CC they didn't find anything.

    I unzipped HJT to the HJT file so it's in C:\Program Files\HJT\highjackthis\highjackthis.exe
    closed my web browser gaim everything i had running and ran HJT and saved the log, hope i did it right here goes.
     

    Attached Files:

  5. Adrynalyne

    Adrynalyne Guest

    Well, it looks clean to me, but I'll wait for Chas's logo of approval before moving it back to software.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I do not see any obvious problems in your log. However let me comment on a few observations:

    According to your log you have no antivirus application and you did not run the online Symantec scanner. To be sure you do not have any kind of virus problem, you really should be using a full blown antivirus application.

    Another issue of safety: you should get a real software firewall installed. The one in WinXP SP2 does not provide sufficient protection.

    Adryn, I'm moving this back to software with a redirect from the Spyware Forum!
     
  7. Adrynalyne

    Adrynalyne Guest

    ok Kegman, here is what I would like you to try.

    First, see if you have these problems in Safe Mode. If it does not:

    Go to IE options, advanced tab, and uncheck enable third party browser extensions.

    Reboot, and see if it happens there.
     
  8. Kegman

    Kegman Private E-2

    Alrightie, rebooted in normal safe mode and opened the folder, got the same "windows explorer has encountered a problem and needs to close" error message.
     
  9. Adrynalyne

    Adrynalyne Guest

    Click on the details of the error and get the modname.

    We already know the appname is explorer.exe
     
  10. Kegman

    Kegman Private E-2

    AppName: explorer.exe AppVer: 6.0.2900.2180 ModName: unknown
    ModVer: 0.0.0.0 Offset: 00000000
     
  11. Adrynalyne

    Adrynalyne Guest

    Try a new user account.
     
  12. Kegman

    Kegman Private E-2

    Alrightie, I moved the folder to shared and made two new accounts one with admin and one with limited and both still got the erorr.
     
  13. Adrynalyne

    Adrynalyne Guest

    This only happens with the videos? Do you have Sp2?
     
  14. Kegman

    Kegman Private E-2

    Yeah, it only happends with video files with WMP set as default player, i have VLC set to default for ogg's and folders with those open fine. And yes, i've got SP2 and all the other updates to this point i beleive.
     
  15. Adrynalyne

    Adrynalyne Guest

    Try this:

    Start Regedit
    Go to HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \

    Change ClassicViewState to 1

    Make sure you backup any key you modify.

    Reboot, then see if the problem remains.
     
  16. Kegman

    Kegman Private E-2

    I love you.....ya know...in...a purley platonic way. Made the backup changed it rebooted and that damnedable error was gone. Thanks for all the help guys.
     
  17. Kegman

    Kegman Private E-2

    Mayhaps i spoke to soon. Now when i open the folder it opens without the error, the folder doesnt "stop responding". so i thought all was good, I clicked a file and it played, file just happened to be a wmv, now for some reason Mpegs and avi's give me a wmp error, i also got the dr watson error again.

    EventType : BEX P1 : drwtsn32.exe P2 : 5.1.2600.0 P3 : 3b7d84a2
    P4 : dbghelp.dll P5 : 5.1.2600.2180 P6 : 4110969a P7 : 0001295d
    P8 : c0000409 P9 : 00000000

    and the WMP error is

    szAppName : wmplayer.exe szAppVer : 9.0.0.3250 szModName : hungapp
    szModVer : 0.0.0.0 offset : 00000000

    Do you think changing to winamp would would fix these?
     
  18. Adrynalyne

    Adrynalyne Guest

    Maybe, but then you are simply ignoring the problem.

    Maybe you should try reinstalling WMP?

    Also,

    How big are these videos, and the folder in general?

    Windows XP does poorly with extremely large multimedia files.

    The regedit I had you do, removed the thumbnail view, so that XP didn't have to process it.

    The next step is to rehack it so XP doesn't try to 'query' extra info about the files as well. Lets try reinstalling WMP first :)
     
  19. Kegman

    Kegman Private E-2

    Alrightie, well the folder itself is around 80 gig with about 20 folders in it. Their around 1.5 - 8 gigs per folder. I'll give reinstalling wmp a chance and post results unless ya think the fact that my folders are friggen huge revealed some light on the problem.
     
  20. Adrynalyne

    Adrynalyne Guest

    Yeah, them being large doesn't help, while you are reinstalling WMP, I'll dredge up that reghack.
     
  21. Adrynalyne

    Adrynalyne Guest


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds