Archived from groups: microsoft.public.windowsxp.help_and_support (
More info?)
Two days later...
I just had another crash but all the BOH's were removed two days ago. When I
checked the Add-on list in IE, I found something that wasn't there the first
time I reported the list; IEHlprObjClass, no publisher given, file name
"IE_kmw.dll". That file is not in the Castlecops list of BOH's.
Q1) Is this a moving target? Does my list change daily depending upon what
sites I visit? I've downloaded nothing since posting here. I've read a few
articles from the on-line Forbes magazine which always has a big ad cover
the screen forcing me to click to advance but that's about it.
Q2) Should I remove this new intrusion or did the system put it there for
good reason?
"Ramesh, MS-MVP" <ramesh@XOX.mvps.org> wrote in message
news:eIiJlUPhFHA.1460@tk2msftngp13.phx.gbl...
> And, here is a master list of Malware BHOs
>
http://castlecops.com/CLSID.html
>
> --
> Ramesh, Windows XP MVP
>
http://windowsxp.mvps.org
>
>
> "John Gregory" <jaygreg90@hotmail.com> wrote in message
> news:eR8kMZKhFHA.576@tk2msftngp13.phx.gbl...
>> 1) >>Messenger adds a toolbar button to IE's toolbar. When was the
>> last time you used it?<<
>>
>> If this is in reference to the icon I removed from IE earlier, why is it
>> still listed as “enabled” as an Add-on to IE? Should I disable it?
>>
>> 2) >>Acrobat is for viewing pdf files in IE - this is very likely to
>> crash IE (yet neither crashes if you allow acrobat to open as a
>> standalone application) - I read many PDF files a day..<<
>>
>> What a coincidence! I just received an error message identifying “Acrobat
>> IE Helper” as the culprit. It read “The instruction at 0x01b0d3d0
>> referenced memory at 0x01b0d3d0. The memory could not be read. Click OK
>> to terminate the program”. (This is referencing the same location?) So… I
>> disabled Acrobat from the Add-on list. We’ll see what happens. That was
>> my first crash with IE on this machine. I hope I’m not gumming things up
>> here.
>>
>>
>>
>> 3) >>Bad download blocker - Duplicating IE's feature assuming that
>> it does what it name suggests rather than the opposite.<<
>>
>> I assume this came with the Google Toolbar I downloaded last night. The
>> added ability to block ads while browsing is what sparked my interest to
>> download in the first place. I’ll remove this last if necessary.
>>
>>
>>
>> 4) >>Why do you want a McAfee toolbar. Isn't it intrusive enough
>> already. Do you use it?<<
>>
>> If the “toolbar” is the McAfee icon in the system tray that leads me to
>> their menu when I click on it, “Yes”, I use it.
>>
>>
>>
>> 5) >>I don't have Java installed and if I do it will be MS's. Can't
>> imagine it does anything useful. Do you use it?<<
>>
>> I have sites I visit that require Java in order to display technical
>> analysis of stock charts. I assume this is related. IT was probably put
>> there by the StockCharts website. As for Shockwave… I haven’t a clue. I
>> think it has something to do with displaying animated figures that dance
>> around on the ads I don’t want to view. Or perhaps something to do with
>> sound. Should I remove this?
>>
>>
>>
>> If you’re serious about BHO = CRASH … I should remove 1,2,and 4.
>>
>> P.S. I've got to leave for a few hours so I won't pick up your replies
>> 'till this evening. I deeply appreciate the help from both of you. Sure
>> hope I haven't screwed this machine up by downloading that Google
>> toolbar. I never had a browser crash involving memory that couldn't be
>> read before... on this machine.
>>
>>
>>
>> "David Candy" <.> wrote in message
>> news:uBkRY6JhFHA.3936@tk2msftngp13.phx.gbl...
>> No because they are all useless (unless you use it like google).
>> Messenger adds a toolbar button to IE's toolbar. When was the last time
>> you used it? Acrobat is for viewing pdf files in IE - this is very likely
>> to crash IE (yet neither crashes if you allow acrobat to open as a
>> standalone application) - I read many PDF files a day..
>>
>> Bad download blocker - Duplicating IE's feature assuming that it does
>> what it name suggests rather than the opposite.
>> Why do you want a McAfee toolbar. Isn't it intrusive enough already. Do
>> you use it?
>> I don't have Java installed and if I do it will be MS's. Can't imagine it
>> does anything useful. Do you use it?
>>
>> And I don't have them because I remove them. I like IE not crashing. I
>> often have over 20 windows open and a crash is likely to stop me dead and
>> unable to even remember what I've just lost or able to find it again.
>> Sometimes I keep windows open for weeks. I have a PDF open in acrobat
>> that I opened over a week ago. I stupidly rebooted yesterday and spent
>> over an hour finding my place in this large document. And no I don't read
>> anything about computers.
>>
>> BHO = CRASH.
>> --
>> --------------------------------------------------------------------------------------------------
>>
http://webdiary.smh.com.au/archives/_comment/001075.html
>> =================================================
>> "John Gregory" <jaygreg90@hotmail.com> wrote in message
>> news:uBo8OxJhFHA.3656@TK2MSFTNGP09.phx.gbl...
>>>I recognize all these as legitimate companies with the exception of
>>>numbers
>>> 2 and 6. So I should remove 2 and 6?
>>>
>>> P.S. Why would you have none and I have as many as I do? Wouldn't you
>>> have
>>> something from the Java and Shockwave folks?
>>>
>>>
>>> "David Candy" <.> wrote in message
>>> news:e7qBreJhFHA.2472@TK2MSFTNGP15.phx.gbl...
>>> If you don't recognise it then remove it. I have none. Though I had a
>>> site
>>> last week where stupid scripting meant I had to put acrobat back for a
>>> few
>>> minutes (done in Acrobat's Preferences)
>>>
>>> --
>>> --------------------------------------------------------------------------------------------------
>>>
http://webdiary.smh.com.au/archives/_comment/001075.html
>>> =================================================
>>> "John Gregory" <jaygreg90@hotmail.com> wrote in message
>>> news:utdaxXJhFHA.3448@TK2MSFTNGP12.phx.gbl...
>>>>>> Is it a Messenger Service window? See fig:<<
>>>>
>>>>
>>>>
>>>> Unfortunately, I didn’t keep the message. It did NOT look like the one
>>>> in
>>>> your figure. I recognized it as being a common message I receive from
>>>> time
>>>> to time from the Windows XP software informing me of an error it
>>>> suggests
>>>> I
>>>> report. Nothing looked strange. It referred me to a Microsoft link that
>>>> contained instructions for the problem identified as “The error was
>>>> likely
>>>> caused by Microsoft Internet Explorer”. The heading of the document
>>>> said
>>>> “Microsoft Online Crash Analysis”. Three steps were give for me to
>>>> analyze
>>>> the problem in Safe Mode. I’m sorry I can’t failed to copy the original
>>>> message. It did not appear suspicious. I have seen the format several
>>>> times
>>>> over the year and a half I’ve had this machine.
>>>>
>>>>
>>>>
>>>> Can you discern any irregularities from the list I gave?
>>>>
>>>>
>>>>
>>>> P.S. The message also began by having me install “XP Service Pack 2”
>>>> for
>>>> Internet Explorer.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> "Ramesh, MS-MVP" <ramesh@XOX.mvps.org> wrote in message
>>>> news:OXYqaOJhFHA.3316@TK2MSFTNGP14.phx.gbl...
>>>>> John,
>>>>>
>>>>>>> I got a MS Windows message concerning "possible" trouble with my
>>>>>>> browser.
>>>>>
>>>>> Is it a Messenger Service window? See fig:
>>>>>
>>>>>
http://www.microsoft.com/windows2000/images/msgr_spam_01.jpg
>>>>>
>>>>> Pls post the exact info that the message contained.
>>>>>
>>>>> --
>>>>> Ramesh, Windows XP MVP
>>>>>
http://windowsxp.mvps.org
>>>>>
>>>>>
>>>>> "John Gregory" <jaygreg90@hotmail.com> wrote in message
>>>>> news:OnwxWLJhFHA.2904@tk2msftngp13.phx.gbl...
>>>>>> After reading an article in "Wired" last night, I installed the
>>>>>> Google
>>>>>> Toolbar on my Windows 2000 XP HE. I ran Ad-AwareSE and SpyBot.
>>>>>> Browsing
>>>>>> seemed to go quicker and smoother. This morning, however, I got a MS
>>>>>> Windows message concerning "possible" trouble with my browser. It
>>>>>> recommended examining my add-ons in IE. I don't have sufficient
>>>>>> knowledge
>>>>>> to recognize what I should and shouldn't have or, more appropriately,
>>>>>> what may be harmful here. I know that those "RealPlayer" programs are
>>>>>> invasive so when I saw that listed, I disabled it. That's all I've
>>>>>> touch.
>>>>>> Could someone please give me advice about the remainder:
>>>>>>
>>>>>>
>>>>>>
>>>>>> 1) AcroIE Obj Class by Adobe - a Browser Helper Object (BHO)
>>>>>>
>>>>>> 2) Bad download blocker by Safer Networking Ltd - (BHO) Also,
>>>>>> Not
>>>>>> verified (NV)
>>>>>>
>>>>>> 3) Google by Google Inc (NV) - Toolbar
>>>>>>
>>>>>> 4) Google Toolbar Helper by Google (NV) - (BHO)
>>>>>>
>>>>>> 5) McAfee by McAfee (NV) - Toolbar
>>>>>>
>>>>>> 6) Research by (nothing) - Browser extension (no file was
>>>>>> listed
>>>>>> though)
>>>>>>
>>>>>> 7) Shockwave Flash Object by Macromedia - ActiveX control
>>>>>>
>>>>>> 8) Sun Java Console by Javasoft/Sun Microsystems - Browser
>>>>>> extension
>>>>>>
>>>>>> 9) Windows Manager by (nothing) - Browser extension. No file
>>>>>> listed
>>>>>>
>>>>>>
>>>>>>
>>>>>> I think number 9 may have been written down wrong. It may be "Windows
>>>>>> Messenger". I've seen that crop up in my message tray before. I
>>>>>> turned
>>>>>> it
>>>>>> off. It also (an icon) cropped up on the Google toolbar last night. I
>>>>>> removed it. (Could this be why I got an error message this AM?)
>>>>>>
>>>>>>
>>>>>>
>>>>>> Would appreciate general comments and specific references by number
>>>>>> as
>>>>>> to
>>>>>> "engage (E)" or disengage (D) each add-on.
>>>>>>
>>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>