IE7 "Buffer Overflow"

Discussion:

(too old to reply)

Robert

2008-06-12 07:32:01 UTC

Recently my McAffee Antivirus program has been 'blocking buffer overflow'
problems in both my explorer and in my Windows Media Player.
I recieved a new update from microsoft today [June 11] and this corresponds
with this problem. After I clear McAffee's message I have problems like:
explorer freezing up, not being able to use the Properties item of the
context menu, not being able to close Explorer [the window disappears and it
leaves the Processes listbox in Task Manager, but if I restart Windows it
asks to End Now Explorer]
Windows Media Player simply won't play the file I request it to and then in
the same way as described above, won't shut down entirely.
I've checked McAffee for updates and performed a scan wihtout negative
results. I ran HiJackThis and examined all the entries - they all appear to
be from trusted sources. I can include a log file if requested.
The problem appears intermittent. I can't simulate the problem and so i
can't report how to make this problem happen. The first time I noticed it was
when I went to open an AVI file earlier tonight. As the AVI wasn't important,
after trying to load the AVI thru other software I have, I decided to delete
it. I then rebooted my computer, discovering the End Now problem with
Explorer and Win Media. I went on with my life... but in the process I needed
to open Explorer to view my folders and the problem came up again. But on
subsequent uses of Explorer had no problems. Then it happened again - I just
opened Explorer and the message came. That's when I decided to run Mcaffee
and then HiJackThis.. and write this question!
Hopefully someone out there will know what's going on.

Thanx for any thoughts...
Robert

--
Take Care,

Robert

rob^_^

2008-06-12 11:48:11 UTC

Permalink

Hi Rob,

Check your settings for Temporary File storage. Tools>Internet Options -
General tab, Browsing History, Settings button. The recommendations are for
50 to 250 Mb. I am not sure but it looks like this has been reset on my
machine(Vista) to the lower limit.

Regards.

Post by Robert
Recently my McAffee Antivirus program has been 'blocking buffer overflow'
problems in both my explorer and in my Windows Media Player.
I recieved a new update from microsoft today [June 11] and this corresponds
explorer freezing up, not being able to use the Properties item of the
context menu, not being able to close Explorer [the window disappears and it
leaves the Processes listbox in Task Manager, but if I restart Windows it
asks to End Now Explorer]
Windows Media Player simply won't play the file I request it to and then in
the same way as described above, won't shut down entirely.
I've checked McAffee for updates and performed a scan wihtout negative
results. I ran HiJackThis and examined all the entries - they all appear to
be from trusted sources. I can include a log file if requested.
The problem appears intermittent. I can't simulate the problem and so i
can't report how to make this problem happen. The first time I noticed it was
when I went to open an AVI file earlier tonight. As the AVI wasn't important,
after trying to load the AVI thru other software I have, I decided to delete
it. I then rebooted my computer, discovering the End Now problem with
Explorer and Win Media. I went on with my life... but in the process I needed
to open Explorer to view my folders and the problem came up again. But on
subsequent uses of Explorer had no problems. Then it happened again - I just
opened Explorer and the message came. That's when I decided to run Mcaffee
and then HiJackThis.. and write this question!
Hopefully someone out there will know what's going on.
Thanx for any thoughts...
Robert
--
Take Care,
Robert

Robert

2008-06-12 16:23:01 UTC

Permalink

Should have mentioned: running Windows XP.
Yes, my Browsing History Setting were changed from what I had them - except
in the opposite direction: set over the maximum limit as well as the days for
keeping pages. I've set these to the correct amount, however - what does this
solution have to do with Windows Media Player? [not sure which version but I
keep Windows Update set to Automatix so I assume the latest Win Media Player]
--
Take Care,

Robert

Post by rob^_^
Hi Rob,
Check your settings for Temporary File storage. Tools>Internet Options -
General tab, Browsing History, Settings button. The recommendations are for
50 to 250 Mb. I am not sure but it looks like this has been reset on my
machine(Vista) to the lower limit.
Regards.

Robert

2008-06-12 17:01:01 UTC

Permalink

You'll notice I replied once to your helpful response... And made the
appropriate changes... And then, moments later opened Explorer to browse my
local folders to play an album located their. I right-clicked the album,
chose 'Play In Winamp' and voila... Buffer Overflow.

Thought I'd write out the exact actions taken...
--
Take Care,

Robert

Frank Saunders MS-MVP IE,OE/WM

2008-06-12 21:08:57 UTC

Permalink

Post by Robert
You'll notice I replied once to your helpful response... And made the
appropriate changes... And then, moments later opened Explorer to browse my
local folders to play an album located their. I right-clicked the album,
chose 'Play In Winamp' and voila... Buffer Overflow.

I know of three causes for the vast majority of such problems:
1. You might have incompatible add-ons:
Go to Start | All Programs | Accessories | System Tools
and click Internet Explorer (No Add-ons).

2. Tools | Internet Options | Advanced
Scroll to the bottom and click Reset Internet Explorer Settings. Read this
article first:
How to use Reset Internet Explorer Settings (RIES):
http://support.microsoft.com/kb/923737
Note that the Reset IE Settings button will delete AutoComplete data (such
as passwords.) Do you have those backed up?

3. Malware already installed on the computer: Help with malware
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing programs like Messenger Plus,
whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

You might also try the steps here:
"Internet Explorer stops responding, stops working, or restarts"
http://support.microsoft.com/gp/pc_ie_intro

**Post your HijackThis log to
http://aumha.net/viewforum.php?f=30
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
or other appropriate forums for expert analysis, not here.**

--
Frank Saunders MS-MVP IE,OE/WM
Do not reply with email

unknown

2008-06-30 17:45:53 UTC

Permalink

After loading a number of video conversion utilities, I experienced similar problems as above. Buffer overflows with Windows Media Player 11 and even Windows Explorer. I uninstalled all of the utilities, also tried going back to WPM 10, but issue did not go away.

What fixed it was using Windows System Restore Wizard to take me back to Restore Point from the prior day. That worked perfectly, everything is good now.

So one of those utilities either stepped on a system file or a registration entry or something. Lesson learned: next time I will establish a restore point prior to loading anything new.

Hope this helps.
Jim