rsaenh.dll kills IE 6.0.2900.2180

Please help,
I can't seem to find any workable solution after googling this stuff for
about a week now.
Hello,
While WU is searching to see what updates I need to install, an error report
dialog comes up and I have to close IE. Here's what I've gotten from the
event log:

Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
rsaenh.dll, version 5.1.2600.2161, fault address 0x0002021a.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 72 73 61 65 6e in rsaen
0038: 68 2e 64 6c 6c 20 35 2e h.dll 5.
0040: 31 2e 32 36 30 30 2e 32 1.2600.2
0048: 31 36 31 20 61 74 20 6f 161 at o
0050: 66 66 73 65 74 20 30 30 ffset 00
0058: 30 32 30 32 31 61 02021a
What can I do to remedy this? It's blocking my installation of IE7!

thanks in advance,
wnz

See http://www.updatexp.com/cryptographic-service.html
--
Erwin Ried
http://erwin.ried.cl


"thewanz" wrote:

> Please help,
> I can't seem to find any workable solution after googling this stuff for
> about a week now.
> Hello,
> While WU is searching to see what updates I need to install, an error report
> dialog comes up and I have to close IE. Here's what I've gotten from the
> event log:
>
> Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
> rsaenh.dll, version 5.1.2600.2161, fault address 0x0002021a.
>
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 69 65 78 ure iex
> 0018: 70 6c 6f 72 65 2e 65 78 plore.ex
> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
> 0028: 30 30 2e 32 31 38 30 20 00.2180
> 0030: 69 6e 20 72 73 61 65 6e in rsaen
> 0038: 68 2e 64 6c 6c 20 35 2e h.dll 5.
> 0040: 31 2e 32 36 30 30 2e 32 1.2600.2
> 0048: 31 36 31 20 61 74 20 6f 161 at o
> 0050: 66 66 73 65 74 20 30 30 ffset 00
> 0058: 30 32 30 32 31 61 02021a
> What can I do to remedy this? It's blocking my installation of IE7!
>
> thanks in advance,
> wnz

None of the suggestions on that page you sent me to changed the behavior. I
did manage to install updates by changing my updates preferences to "download
automatically, then let me decide when to install" but after getting those
done I still could not make it through the updates site scanning section.

I've since downloaded the latest debugger package and hope to try and get
more information via ntsd. I'll send the result in a couple of days.

Thanks again for your time,
Wnz

"Erwin Ried" wrote:

> See http://www.updatexp.com/cryptographic-service.html
> --
> Erwin Ried
> http://erwin.ried.cl
>
>
> "thewanz" wrote:
>
> > Please help,
> > I can't seem to find any workable solution after googling this stuff for
> > about a week now.
> > Hello,
> > While WU is searching to see what updates I need to install, an error report
> > dialog comes up and I have to close IE. Here's what I've gotten from the
> > event log:
> >
> > Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
> > rsaenh.dll, version 5.1.2600.2161, fault address 0x0002021a.
> >
> > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > 0010: 75 72 65 20 20 69 65 78 ure iex
> > 0018: 70 6c 6f 72 65 2e 65 78 plore.ex
> > 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
> > 0028: 30 30 2e 32 31 38 30 20 00.2180
> > 0030: 69 6e 20 72 73 61 65 6e in rsaen
> > 0038: 68 2e 64 6c 6c 20 35 2e h.dll 5.
> > 0040: 31 2e 32 36 30 30 2e 32 1.2600.2
> > 0048: 31 36 31 20 61 74 20 6f 161 at o
> > 0050: 66 66 73 65 74 20 30 30 ffset 00
> > 0058: 30 32 30 32 31 61 02021a
> > What can I do to remedy this? It's blocking my installation of IE7!
> >
> > thanks in advance,
> > wnz

Hello,
I finally remembered how to attach an ntsd debugger the iexplore process,
then did a !analyze -v and got this result:
Problem Description: When I try to run Windows Update, IE6 blows up:

0:000> !analyze -
************************************************** *****************************
* *
* Exception Analysis *
*
************************************************** *****************************


FAULTING_IP:
ntdll!RtlEnterCriticalSection+11
7c901016 f0ff4204 lock inc dword ptr [edx+4]

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
ExceptionAddress: 7c901016 (ntdll!RtlEnterCriticalSection+0x00000011)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 0063004c
Attempt to write to address 0063004c

FAULTING_THREAD: 000004c4

DEFAULT_BUCKET_ID: STRING_DEREFERENCE

PROCESS_NAME: iexplore.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memo
ry at "0x%08lx". The memory could not be "%s".

WRITE_ADDRESS: 0063004c

BUGCHECK_STR: ACCESS_VIOLATION

LAST_CONTROL_TRANSFER: from 7c80ee07 to 7c901016

STACK_TEXT:
0013c3a8 7c80ee07 00630048 00000000 00630034
ntdll!RtlEnterCriticalSection+0x11
WARNING: Stack unwind information not available. Following frames may be
wrong.
0013c3f4 0ffeb9c4 00630034 00000000 046214e8 kernel32!FindClose+0x30
0013c408 0ffed6c1 04584cfc 00000020 04584ce0 rsaenh!FreeContainerInfo+0xb9
0013c4f0 0ffdd53e 00000001 046214e8 00000020 rsaenh!ReadContainerInfo+0x477
0013c518 0ffdeb3e 04584ce0 046214e8 00000028 rsaenh!OpenUserKeyGroup+0x24
0013c564 0ffded6e 0463ccd8 00000028 0013c59c rsaenh!NTagLogonUser+0x23a
0013c588 77de8307 0013c5e4 0463ccd8 00000028 rsaenh!CPAcquireContext+0x34
0013c650 77de8675 0013c728 0463ccd8 0463cc78
ADVAPI32!CryptAcquireContextA+0x619

0013c6b8 08331088 0013c728 045723c0 082bcc90
ADVAPI32!CryptAcquireContextW+0xa4
0013c820 082ff4db 0013c904 0013cb10 0013caa8
LegitCheckControl!DllUnregisterServ
er+0x65898
0013c824 0013c904 0013cb10 0013caa8 0013cad0
LegitCheckControl!DllUnregisterServ
er+0x33ceb
0013c828 0013cb10 0013caa8 0013cad0 00000000 0x13c904
0013c904 00000000 00000000 00000000 00000000 0x13cb10


FOLLOWUP_IP:
rsaenh!FreeContainerInfo+b9
0ffeb9c4 5f pop edi

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: rsaenh!FreeContainerInfo+b9

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: rsaenh

IMAGE_NAME: rsaenh.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 40eb5d28

STACK_COMMAND: ~0s ; kb

FAILURE_BUCKET_ID: ACCESS_VIOLATION_rsaenh!FreeContainerInfo+b9

BUCKET_ID: ACCESS_VIOLATION_rsaenh!FreeContainerInfo+b9

Followup: MachineOwner
---------
Operating System:WindowsXP

Have you seen anything like this before?

"thewanz" wrote:

> None of the suggestions on that page you sent me to changed the behavior. I
> did manage to install updates by changing my updates preferences to "download
> automatically, then let me decide when to install" but after getting those
> done I still could not make it through the updates site scanning section.
>
> I've since downloaded the latest debugger package and hope to try and get
> more information via ntsd. I'll send the result in a couple of days.
>
> Thanks again for your time,
> Wnz
>
> "Erwin Ried" wrote:
>
> > See http://www.updatexp.com/cryptographic-service.html
> > --
> > Erwin Ried
> > http://erwin.ried.cl
> >
> >
> > "thewanz" wrote:
> >
> > > Please help,
> > > I can't seem to find any workable solution after googling this stuff for
> > > about a week now.
> > > Hello,
> > > While WU is searching to see what updates I need to install, an error report
> > > dialog comes up and I have to close IE. Here's what I've gotten from the
> > > event log:
> > >
> > > Faulting application iexplore.exe, version 6.0.2900.2180, faulting module
> > > rsaenh.dll, version 5.1.2600.2161, fault address 0x0002021a.
> > >
> > > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > > 0010: 75 72 65 20 20 69 65 78 ure iex
> > > 0018: 70 6c 6f 72 65 2e 65 78 plore.ex
> > > 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
> > > 0028: 30 30 2e 32 31 38 30 20 00.2180
> > > 0030: 69 6e 20 72 73 61 65 6e in rsaen
> > > 0038: 68 2e 64 6c 6c 20 35 2e h.dll 5.
> > > 0040: 31 2e 32 36 30 30 2e 32 1.2600.2
> > > 0048: 31 36 31 20 61 74 20 6f 161 at o
> > > 0050: 66 66 73 65 74 20 30 30 ffset 00
> > > 0058: 30 32 30 32 31 61 02021a
> > > What can I do to remedy this? It's blocking my installation of IE7!
> > >
> > > thanks in advance,
> > > wnz

"thewanz" <> wrote in message
news:4BBEC2B8-B23B-4C5F-ADD7-
....
> LegitCheckControl!DllUnregisterServ
....
> Have you seen anything like this before?


Yes. We are discussing that in your other thread. Instead of just tacking
the same information on there it would be helpful if you would respond
more directly to the suggestion you are replying to in it.

E.g. did you try removing your McAfee products before recreating
this dump?

http://www.microsoft.com/communities...113&sloc=en-us


---

Disabled, but did not uninstall.

I also downloaded the WGA diagnostic tool. When I ran it, I got the same
break (rsaenh.dll).

I will attempt uninstalling McAfee and see what develops.

"Robert Aldwinckle" wrote:

> "thewanz" <> wrote in message
> news:4BBEC2B8-B23B-4C5F-ADD7-
> ....
> > LegitCheckControl!DllUnregisterServ
> ....
> > Have you seen anything like this before?
>
>
> Yes. We are discussing that in your other thread. Instead of just tacking
> the same information on there it would be helpful if you would respond
> more directly to the suggestion you are replying to in it.
>
> E.g. did you try removing your McAfee products before recreating
> this dump?
>
> http://www.microsoft.com/communities...113&sloc=en-us
>
>
> ---
>
>
>

ok, after uninstalling McAfee virus protection and firewall, then rebooting,
I ran windows update and IE broke in the same spot.

"Robert Aldwinckle" wrote:

> "thewanz" <> wrote in message
> news:4BBEC2B8-B23B-4C5F-ADD7-
> ....
> > LegitCheckControl!DllUnregisterServ
> ....
> > Have you seen anything like this before?
>
>
> Yes. We are discussing that in your other thread. Instead of just tacking
> the same information on there it would be helpful if you would respond
> more directly to the suggestion you are replying to in it.
>
> E.g. did you try removing your McAfee products before recreating
> this dump?
>
> http://www.microsoft.com/communities...113&sloc=en-us
>
>
> ---
>
>
>