I've seen many cases people refering for

C++ Library Runtime Error
C:\Windows\Explorer.exe
Abnormal program termination

message to this site -
http://www.doxdesk.com/parasite/CommonName.html
but it doesn't open...what should I do?

I see the error message when I open a new IE window, or Windows Explorer.
It doesn't seem to be spywares. I've run ad-aware and spy-bot too.
Tried "regsvr32 msxml3.dll", but it didn't work either.

I would appreciate if anybody can help me out.

Re: runtime error - reference doesn't open by Mike

Mike
Wed Jun 16 03:30:55 CDT 2004

www.doxdesk.com has not been available for some days. This may be the result
of a DOS attack. The same also seems to be the case for www.pestpatrol.com
which is another anti parasite site.

The commonname parasite, which is a toolbar, is often installed as part of
IMesh or Netsonic.

Unfortuante3ly there are a number of different variants of this pest some of
which are difficult to remove.

This would be a good time to download yourself a copy of the free Ad-Aware 6.0
from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also SpyBot
Search & Destroy (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as good
as when you last updated their reference files. I also use a program called
BHODemon (http://www.definitivesolutions.com/bhodemon.htm that checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
some parasites getting a grip on your PC.

Then there is CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best way
of getting rid of the many forms of the CoolWebSearch hijacker details of
which can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp..

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html). Create a
folder called hijackthis on C: and copy the file you downloaded to that
folder. Close as many applications as you can including all instances of
Internet Explorer and then run hijackthis.exe and post back the log, provided
that it isn't too long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.
--?
Mike Maltby MS-MVP
mcmaltby@hotmail.com

Ed <Ed@discussions.microsoft.com> wrote:

> I've seen many cases people refering for
>
> C++ Library Runtime Error
> C:\Windows\Explorer.exe
> Abnormal program termination
>
> message to this site -
> http://www.doxdesk.com/parasite/CommonName.html
> but it doesn't open...what should I do?
>
> I see the error message when I open a new IE window, or Windows Explorer.
> It doesn't seem to be spywares. I've run ad-aware and spy-bot too.
> Tried "regsvr32 msxml3.dll", but it didn't work either.
>
> I would appreciate if anybody can help me out.



Re: runtime error - reference doesn't open by Ed

Ed
Wed Jun 16 07:47:01 CDT 2004

Thanks for the reply.
Everyone seems to think it's the spyware that causes the problem.
But as far as I can recall, it first happened when I ran "RegCleaner" program.
I meddled up with too many registries that day.
I used to run Ad-aware regularly, and didn't have any problem before.
And my browser doesn't have any unwanted search bars or something, because I hate to install commercial programs, and never did.
Though nobody mentioned that, it happens only when my computer is connected to the Internet. It doesn't show the message when I plug out the wire.
Thanks

"Mike M" wrote:

> www.doxdesk.com has not been available for some days. This may be the result
> of a DOS attack. The same also seems to be the case for www.pestpatrol.com
> which is another anti parasite site.
>
> The commonname parasite, which is a toolbar, is often installed as part of
> IMesh or Netsonic.
>
> Unfortuante3ly there are a number of different variants of this pest some of
> which are difficult to remove.
>
> This would be a good time to download yourself a copy of the free Ad-Aware 6.0
> from Lavasoft (http://www.lavasoftusa.com/software/adaware/) and also SpyBot
> Search & Destroy (http://www.safer-networking.org/) and use them to check your
> system for other commercial parasites remembering that they are only as good
> as when you last updated their reference files. I also use a program called
> BHODemon (http://www.definitivesolutions.com/bhodemon.htm that checks for
> unwanted Browser Help Objects and SpywareBlaster
> (http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
> some parasites getting a grip on your PC.
>
> Then there is CWShredder
> (http://www.zerosrealm.com/downloads/CWShredder.zip or
> http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best way
> of getting rid of the many forms of the CoolWebSearch hijacker details of
> which can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html
> and also http://www.pestpatrol.com/pestinfo/c/cws.asp..
>
> Finally if you still continue to experience problems download a copy of
> HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html). Create a
> folder called hijackthis on C: and copy the file you downloaded to that
> folder. Close as many applications as you can including all instances of
> Internet Explorer and then run hijackthis.exe and post back the log, provided
> that it isn't too long, to this thread, otherwise to the HijackThis Forum at
> http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
> identify the cause of your problem.
> --Â?
> Mike Maltby MS-MVP
> mcmaltby@hotmail.com
>
> Ed <Ed@discussions.microsoft.com> wrote:
>
> > I've seen many cases people refering for
> >
> > C++ Library Runtime Error
> > C:\Windows\Explorer.exe
> > Abnormal program termination
> >
> > message to this site -
> > http://www.doxdesk.com/parasite/CommonName.html
> > but it doesn't open...what should I do?
> >
> > I see the error message when I open a new IE window, or Windows Explorer.
> > It doesn't seem to be spywares. I've run ad-aware and spy-bot too.
> > Tried "regsvr32 msxml3.dll", but it didn't work either.
> >
> > I would appreciate if anybody can help me out.
>
>
>

Re: runtime error - reference doesn't open by Mike

Mike
Wed Jun 16 09:45:15 CDT 2004

I still feel that you have unwanted malware such as a commercial parasite and
until you have eliminated that as being the cause by running an updated
version of AdAware (http://www.lavasoftusa.com/software/adaware/) and also
SpyBot (http://www.safer-networking.org/), checked for unwanted BHOs using
BHODemon (http://www.definitivesolutions.com/bhodemon.htm), checked for the
possibility of the CoolWebSearch parasite (unlikely I think) using CWShredder
and perhaps also run HiJackThis
(http://www.spywareinfo.com/~merijn/downloads.html) and checked the log, I
don't think you can confidently say your PC is free of all parasites. All the
more so since you say your problem arises when you connect to the net.

I only mentioned the CommonName parasite because you stated that that was what
you had found. There are many other causes, virtually all due to the presence
of malware, for the C++ Library Runtime Error you are seeing.

However if you think your problem was due to using RegCleaner the solution is
easy, undo the changes that were made using the archived undo file.
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


Ed <Ed@discussions.microsoft.com> wrote:

> Thanks for the reply.
> Everyone seems to think it's the spyware that causes the problem.
> But as far as I can recall, it first happened when I ran "RegCleaner"
> program. I meddled up with too many registries that day.
> I used to run Ad-aware regularly, and didn't have any problem before.
> And my browser doesn't have any unwanted search bars or something,
> because I hate to install commercial programs, and never did. Though
> nobody mentioned that, it happens only when my computer is connected to
> the Internet. It doesn't show the message when I plug out the wire.
> Thanks



Re: runtime error - reference doesn't open by Mike

Mike
Wed Jun 16 12:43:33 CDT 2004

Ed,

Thanks for the feedback. It appears that one or both of the Browser Help
Objects you disabled using BHODemon were the cause of your problem. Shame you
didn't make a note of the actual files but nevertheless its good to read
you've now solved your problem.

Regards,
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


Ed <Ed@discussions.microsoft.com> wrote:

> Thanks Mike!
>
> It's fixed!
> I tried both BHOdemon and HiJackThis, and don't know which one fixed it,
> though. I disabled two items found by BHODemon, and scan&fixed several
> registry items with HiJackThis. I think I found something
> "...CommonFiles"...
>
> Thanks a lot! I've had this problem for months and now it's gone!
> Again, thank you very much!