help with DllRegisterServer in regwizc.dll failing

Discussion in 'Windows Update' started by RuUstyM, Sep 15, 2005.

  1. RuUstyM

    RuUstyM Guest

    I can not resolve this problem. Sorry, But I had to repost here to see if
    anyone here might have a solution. I'll be brief. I have been helping a
    friend clean up her once infested pc. It seems to be clean now. I went to
    Jupitor Jones site to start preparing the pc for the installation of Sp2 now
    that it is clean. I have done this checklist twice on 2 of my own pc's and
    all has gone well. On #11 of his site, it says to type in the "run" box:
    regsvr32.exe licdll.dll . All well and it suceeds. THen it tells to type in
    the "run" box: regsvr32.exe regwizc.dll . Instead of it suceeding, I get this
    DllRegisterServer in regwizc.dll failed. return code 0x80040154.
    SO, I am afraid to start the installation unless I get this resolved first.
    I did install the MS antispy program but uninstalled it prior to trying this
    (it is known to unregister this)
    I tried unregistering it- it suceeds. but registering these DLL fail. Please
    help. Dell wont. Microsoft wont either.
     
    RuUstyM, Sep 15, 2005
    #1
    1. Advertisements

  2. George Hester, Sep 15, 2005
    #2
    1. Advertisements

  3. RuUstyM

    RuUstyM Guest

    THanks george- These are all my posts with all the people that have tried to
    help. That is why I put in the beginning of this post " I can not resolve
    this problem. Sorry, But I had to repost here to see if anyone here might
    have a solution". I have tried all these things. I hope that there is a way
    to fix this. please help in a different way that these other nice people,
    already tried to help. thanks
     
    RuUstyM, Sep 15, 2005
    #3
  4. ....

    So, have you found your "propeller head" yet? <eg>


    regsvr32 must be returning an unexpected code.
    E.g. it is not listed in here.

    <title>KB249873 - Explanation of Regsvr32 Usage and Error Messages</title>


    In that case a good way to detect such problems and
    more is to use DependencyWalker with its Profiling feature
    to trace the actual execution of the regsvr32.exe command
    with that module name as its operand.

    Another thing that I would do, which I imagine could be what
    the other poster who discovered a permission problem did,
    is run RegMon and FileMon concurrently with the above
    trace. E.g. if permissions problems still exist in either the
    registry or the file system which are causing your error symptom
    some specifics about them might be exposed that way.


    BTW a Google Groups search shows that this is a common
    error which apparently means a COM object is not registering.
    However, solutions for it, especially with this particular module,
    are much less common. ;)


    Hmm... you might find some clues in Eric Brodish's list of codes

    http://inetexplorer.mvps.org/archive/wuc.htm
    <quote>
    0x80040154 -2147221164 REGDB_E_CLASSNOTREG
    BITS in Windows 2000 is dependent on SENS and EventSystem services.
    If COM+ catalog is corrupted, one of these errors was seen.
    </quote>


    E.g. check that the mentioned services are running.
    For repairs to catalog problems look for posts by Torgeir Bakken [MVP].


    Good luck

    Robert Aldwinckle[/QUOTE]
     
    Robert Aldwinckle, Sep 17, 2005
    #4
  5. RuUstyM

    RuUstyM Guest

    Robert, So thankful for your post. I read all your ideas. However, It was
    like trying to understand a foreign language. I went to those sites and it is
    overwhelming. Its a friends computor and I want to help her fix this before I
    install sp2. But, I am a bit leery about trying all these registry monitors &
    tools (especially when I dont know how to read it & what I am looking for)-
    SO forgive me for not being smart in pc stuff. I would have to have step by
    step instructions on what to do with any of these programs I am not familiar
    with. And, I dont expect for anyone to do that.
    ANyways, I navigated to that microsoft link and you said something about
    that com
    object. All I know, is that when I try to register that in run, the exact
    error I get is this. "DllRegisterServer in regwizc.dll failed. return code
    0x80040154."
    DOnt know if there is something else I can try. Thank you for your time. any
    other ideas?? please post.
     
    RuUstyM, Sep 17, 2005
    #5
  6. ....

    Have you installed DependencyWalker at least?
    (Actually an older version is already available in the XP Support Tools.)

    You could also use DependencyWalker just to see if all of regwizc.dll's
    dependent modules are present. I think it warns you in an understandable
    way about that. The FAQ at the site and the Help are quite good too.

    But it's really not that difficult to profile the execution of regsvr32 regwizc.dll
    with it. Just open depends.exe, open regsvr32.exe with it, then use the
    Profile menu to start profiling. You will be prompted to provide the command
    line operand(s) (i.e. type regwizc.dll) and allowed to customize its output.
    FWIW I leave all the boxes checked. Then let it run. You can capture
    the logging pane with standard Windows Edit commands, e.g. right-click
    Select All and Copy and paste them into a Notepad window. I suspect
    that since you know the error code you are looking for that you will then
    easily be able to see the context of the error and probably be able to figure
    out what it implies for yourself but if not just paste a good chunk of whatever
    it was which led up to that point into a reply and if necessary I can try to compare
    it with my output and see where that tack leads.


    BTW where is Jupiter? Aren't these his ideas you are trying to execute?
    Aren't there any contingency instructions on his site for this case too? <eg>


    Good luck

    Robert
    ---
     
    Robert Aldwinckle, Sep 17, 2005
    #6
  7. RuUstyM

    RuUstyM Guest

    Hi RObert. I copy and pasted the bottom box after it finished profiling-
    ALso, the
    ones ending with (127) were in bold red font.

    Warning: At least one delay-load dependency module was not found.
    Warning: At least one module has an unresolved import due to a missing
    export function in a delay-load dependent module.

    --------------------------------------------------------------------------------
    Starting profile on 9/17/2005 at 4:49:25 PM

    Operating System: Microsoft Windows XP Personal (32-bit), version 5.01.2600
    Service Pack 1
    Program Executable: c:\windows\system32\REGSVR32.EXE
    Program Arguments: regwizc.dll
    Starting Directory: C:\WINDOWS\SYSTEM32\
    Search Path:
    C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program
    Files\Common Files\Sonic Shared;

    Options Selected:
    Simulate ShellExecute by inserting any App Paths directories into the
    PATH environment variable.
    Log DllMain calls for process attach and process detach messages.
    Hook the process to gather more detailed dependency information.
    Log LoadLibrary function calls.
    Log GetProcAddress function calls.
    Log debug output messages.
    Automatically open and profile child processes.
    --------------------------------------------------------------------------------

    Started "REGSVR32.EXE" (process 0x6A0) at address 0x01000000. Successfully
    hooked module.
    , DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL" called.
    DllMain(0x77E60000, DLL_PROCESS_ATTACH, 0x00000000) in "KERNEL32.DLL"
    returned 1 (0x1).
    Injected "DEPENDS.DLL" at address 0x08370000.

    DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x0006FD30) in "DEPENDS.DLL" called.
    Entrypoint reached. All implicit modules have been loaded.
    DllMain(0x08370000, DLL_PROCESS_ATTACH, 0x0006FD30) in "DEPENDS.DLL"
    returned 1 (0x1).
    DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0006FD30) in "MSVCRT.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL],
    "InitializeCriticalSectionAndSpinCount") called from "MSVCRT.DLL" at address
    0x77C35A0C and returned 0x77E7DDB1.
    DllMain(0x77C10000, DLL_PROCESS_ATTACH, 0x0006FD30) in "MSVCRT.DLL" returned
    1 (0x1).
    DllMain(0x78000000, DLL_PROCESS_ATTACH, 0x0006FD30) in "RPCRT4.DLL" called.
    DllMain(0x78000000, DLL_PROCESS_ATTACH, 0x0006FD30) in "RPCRT4.DLL" returned
    1 (0x1).
    DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0006FD30) in "ADVAPI32.DLL" called.
    DllMain(0x77DD0000, DLL_PROCESS_ATTACH, 0x0006FD30) in "ADVAPI32.DLL"
    returned 1 (0x1).
    DllMain(0x77D40000, DLL_PROCESS_ATTACH, 0x0006FD30) in "USER32.DLL" called.
    DllMain(0x77D40000, DLL_PROCESS_ATTACH, 0x0006FD30) in "USER32.DLL" returned
    1 (0x1).
    DllMain(0x4FEC0000, DLL_PROCESS_ATTACH, 0x0006FD30) in "OLE32.DLL" called.
    DllMain(0x4FEC0000, DLL_PROCESS_ATTACH, 0x0006FD30) in "OLE32.DLL" returned
    1 (0x1).
    Loaded "KLG.DAT" at address 0x5A000000. Successfully hooked module.
    Loaded "OLEAUT32.DLL" at address 0x77120000. Successfully hooked module.
    DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL" called.
    GetProcAddress(0x4FEC0000 [OLE32.DLL], "DcomChannelSetHResult") called from
    "OLEAUT32.DLL" at address 0x7712AE02 and returned 0x4FEF36BC.
    DllMain(0x77120000, DLL_PROCESS_ATTACH, 0x00000000) in "OLEAUT32.DLL"
    returned 1 (0x1).
    DllMain(0x5A000000, DLL_PROCESS_ATTACH, 0x00000000) in "KLG.DAT" called.
    LoadLibraryW("rpcrt4.dll") called from "RPCRT4.DLL" at address 0x7801901C.
    LoadLibraryW("rpcrt4.dll") returned 0x78000000.
    DllMain(0x5A000000, DLL_PROCESS_ATTACH, 0x00000000) in "KLG.DAT" returned 1
    (0x1).
    Loaded "SWPG.DAT" at address 0x008B0000. Successfully hooked module.
    DllMain(0x008B0000, DLL_PROCESS_ATTACH, 0x00000000) in "SWPG.DAT" called.
    DllMain(0x008B0000, DLL_PROCESS_ATTACH, 0x00000000) in "SWPG.DAT" returned 1
    (0x1).
    LoadLibraryExW("C:\WINDOWS\System32\uxtheme.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x77D57315.
    Loaded "UXTHEME.DLL" at address 0x5AD70000. Successfully hooked module.
    DllMain(0x5AD70000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL" called.
    DllMain(0x5AD70000, DLL_PROCESS_ATTACH, 0x00000000) in "UXTHEME.DLL"
    returned 1 (0x1).
    LoadLibraryExW("C:\WINDOWS\System32\uxtheme.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000.
    LoadLibraryW(".\UxTheme.dll") called from "UXTHEME.DLL" at address 0x5AD7A4C4.
    LoadLibraryW(".\UxTheme.dll") returned 0x5AD70000.
    LoadLibraryExW("C:\WINDOWS\System32\uxtheme.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x77D57315.
    LoadLibraryExW("C:\WINDOWS\System32\uxtheme.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x5AD70000.
    LoadLibraryExW("C:\WINDOWS\System32\MSCTF.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x77D57315.
    Loaded "MSCTF.DLL" at address 0x74720000. Successfully hooked module.
    DllMain(0x74720000, DLL_PROCESS_ATTACH, 0x00000000) in "MSCTF.DLL" called.
    GetProcAddress(0x77F50000 [NTDLL.DLL], "NtQueryInformationProcess") called
    from "MSCTF.DLL" at address 0x74722084 and returned 0x77F5BDD8.

    GetProcAddress(0x00000000, "CtfImmCoUninitialize") called from "MSCTF.DLL"
    at address 0x74721DBC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "CtfImmLastEnabledWndDestroy") called from
    "MSCTF.DLL" at address 0x74721DDC and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "CtfImmSetCiceroStartInThread") called from
    "MSCTF.DLL" at address 0x74721DFC and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "CtfImmIsCiceroStartedInThread") called from
    "MSCTF.DLL" at address 0x74721E1C and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "CtfImmIsCiceroEnabled") called from "MSCTF.DLL"
    at address 0x74721E3C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "CtfImmIsTextFrameServiceDisabled") called from
    "MSCTF.DLL" at address 0x74721E5C and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "CtfImmEnterCoInitCountSkipMode") called from
    "MSCTF.DLL" at address 0x74721E7C and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "CtfImmLeaveCoInitCountSkipMode") called from
    "MSCTF.DLL" at address 0x74721E9C and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x00000000, "ImmGetDefaultIMEWnd") called from "MSCTF.DLL" at
    address 0x74721EBC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmReleaseContext") called from "MSCTF.DLL" at
    address 0x74721EDC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmNotifyIME") called from "MSCTF.DLL" at
    address 0x74721EFC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmSetConversionStatus") called from "MSCTF.DLL"
    at address 0x74721F1C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetConversionStatus") called from "MSCTF.DLL"
    at address 0x74721F3C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetProperty") called from "MSCTF.DLL" at
    address 0x74721F5C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetOpenStatus") called from "MSCTF.DLL" at
    address 0x74721F7C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetContext") called from "MSCTF.DLL" at
    address 0x74721F9C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmSetOpenStatus") called from "MSCTF.DLL" at
    address 0x74721FBC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmInstallIMEA") called from "MSCTF.DLL" at
    address 0x74721FDC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetDescriptionA") called from "MSCTF.DLL" at
    address 0x74721FFC and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetDescriptionW") called from "MSCTF.DLL" at
    address 0x7472201C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetIMEFileNameA") called from "MSCTF.DLL" at
    address 0x7472203C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmGetIMEFileNameW") called from "MSCTF.DLL" at
    address 0x7472205C and returned NULL. Error: The specified procedure could
    not be found (127).
    GetProcAddress(0x00000000, "ImmSetHotKey") called from "MSCTF.DLL" at
    address 0x74722146 and returned NULL. Error: The specified procedure could
    not be found (127).
    LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x74720000.
    LoadLibraryExW("regwizc.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH)
    called from "REGSVR32.EXE" at address 0x01001919.
    Loaded "REGWIZC.DLL" at address 0x5DA50000. Successfully hooked module.
    DllMain(0x77340000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ProcessIdToSessionId") called
    from "COMCTL32.DLL" at address 0x7734248C and returned 0x77E754CE.
    GetProcAddress(0x77D40000 [USER32.DLL], "GetSystemMetrics") called from
    "COMCTL32.DLL" at address 0x773429B0 and returned 0x77D4AE53.
    GetProcAddress(0x77D40000 [USER32.DLL], "MonitorFromWindow") called from
    "COMCTL32.DLL" at address 0x773429C5 and returned 0x77D4D6E8.
    GetProcAddress(0x77D40000 [USER32.DLL], "MonitorFromRect") called from
    "COMCTL32.DLL" at address 0x773429DA and returned 0x77D4D8D1.
    GetProcAddress(0x77D40000 [USER32.DLL], "MonitorFromPoint") called from
    "COMCTL32.DLL" at address 0x773429EF and returned 0x77D4E33C.
    GetProcAddress(0x77D40000 [USER32.DLL], "EnumDisplayMonitors") called from
    "COMCTL32.DLL" at address 0x77342A04 and returned 0x77D4D778.
    GetProcAddress(0x77D40000 [USER32.DLL], "EnumDisplayDevicesW") called from
    "COMCTL32.DLL" at address 0x77342A19 and returned 0x77D569E2.
    GetProcAddress(0x77D40000 [USER32.DLL], "GetMonitorInfoW") called from
    "COMCTL32.DLL" at address 0x77342A36 and returned 0x77D4D65A.
    DllMain(0x77340000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL"
    returned 1 (0x1).

    "SHLWAPI.DLL" at address 0x70A86697 and returned 0x77EBC201.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "CreateTimerQueueTimer") called
    from "SHLWAPI.DLL" at address 0x70A866A7 and returned 0x77E743BE.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ChangeTimerQueueTimer") called
    from "SHLWAPI.DLL" at address 0x70A866B5 and returned 0x77E75421.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "DeleteTimerQueueTimer") called
    from "SHLWAPI.DLL" at address 0x70A866C3 and returned 0x77E74B4B.
    DllMain(0x70A70000, DLL_PROCESS_ATTACH, 0x00000000) in "SHLWAPI.DLL"
    returned 1 (0x1).
    DllMain(0x7CD00000, DLL_PROCESS_ATTACH, 0x00000000) in "SHELL32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "CreateActCtxW") called from
    "SHELL32.DLL" at address 0x7CD53C2A and returned 0x77E6E59E.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ActivateActCtx") called from
    "SHELL32.DLL" at address 0x7CD5349C and returned 0x77E73813.
    LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CD53456.
    Loaded "COMCTL32.DLL" at address 0x71950000. Successfully hooked module.
    DllMain(0x71950000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "GetSystemWindowsDirectoryW")
    called from "COMCTL32.DLL" at address 0x719C51C5 and returned 0x77E7648D.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "CreateActCtxW") called from
    "COMCTL32.DLL" at address 0x719C5088 and returned 0x77E6E59E.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ActivateActCtx") called from
    "COMCTL32.DLL" at address 0x719C5102 and returned 0x77E73813.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "DeactivateActCtx") called from
    "COMCTL32.DLL" at address 0x719C514F and returned 0x77E737E7.
    DllMain(0x71950000, DLL_PROCESS_ATTACH, 0x00000000) in "COMCTL32.DLL"
    returned 1 (0x1).
    LoadLibraryW("comctl32.dll") returned 0x71950000.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "DeactivateActCtx") called from
    "SHELL32.DLL" at address 0x7CD535CD and returned 0x77E737E7.
    LoadLibraryW("comctl32.dll") called from "SHELL32.DLL" at address 0x7CD534D3.
    LoadLibraryW("comctl32.dll") returned 0x77340000.
    GetProcAddress(0x77340000 [COMCTL32.DLL], "InitCommonControlsEx") called
    from "SHELL32.DLL" at address 0x7CD534E3 and returned 0x773416C9.
    DllMain(0x7CD00000, DLL_PROCESS_ATTACH, 0x00000000) in "SHELL32.DLL"
    returned 1 (0x1).
    DllMain(0x762A0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSASN1.DLL" called.
    DllMain(0x762A0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSASN1.DLL" returned
    1 (0x1).
    DllMain(0x762C0000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL" called.
    LoadLibraryA("advapi32.dll") called from "CRYPT32.DLL" at address 0x762C92A2.
    LoadLibraryA("advapi32.dll") returned 0x77DD0000.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptAcquireContextW") called
    from "CRYPT32.DLL" at address 0x762C92B5 and returned 0x77DD835C.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptSignHashW") called from
    "CRYPT32.DLL" at address 0x762C92C7 and returned 0x77DDF3F8.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptVerifySignatureW") called
    from "CRYPT32.DLL" at address 0x762C92D9 and returned 0x77DDA957.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptSetProviderW") called from
    "CRYPT32.DLL" at address 0x762C92EB and returned 0x77E099BF.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "CryptEnumProvidersW") called from
    "CRYPT32.DLL" at address 0x762C92FD and returned 0x77DDFB2E.
    LoadLibraryA("kernel32.dll") called from "CRYPT32.DLL" at address 0x762DC6FA.
    LoadLibraryA("kernel32.dll") returned 0x77E60000.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "RegisterWaitForSingleObject")
    called from "CRYPT32.DLL" at address 0x762DC711 and returned 0x77E6BCC6.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "UnregisterWaitEx") called from
    "CRYPT32.DLL" at address 0x762DC727 and returned 0x77E6BD35.
    LoadLibraryA("advapi32.dll") called from "MSASN1.DLL" at address 0x762A77B0.
    LoadLibraryA("advapi32.dll") returned 0x77DD0000.
    GetProcAddress(0x77DD0000 [ADVAPI32.DLL], "RegOpenKeyExA") called from
    "MSASN1.DLL" at address 0x762A77C6 and returned 0x77DD229A.
    DllMain(0x762C0000, DLL_PROCESS_ATTACH, 0x00000000) in "CRYPT32.DLL"
    returned 1 (0x1).
    DllMain(0x63000000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "CreateActCtxW") called from
    "WININET.DLL" at address 0x630708E1 and returned 0x77E6E59E.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ActivateActCtx") called from
    "WININET.DLL" at address 0x63070959 and returned 0x77E73813.
    LoadLibraryW("comctl32.dll") called from "SHLWAPI.DLL" at address 0x70A7C0AE.
    LoadLibraryW("comctl32.dll") returned 0x71950000.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "DeactivateActCtx") called from
    "WININET.DLL" at address 0x630709A5 and returned 0x77E737E7.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "GetFileAttributesExA") called
    from "WININET.DLL" at address 0x6305B7A1 and returned 0x77E6F947.
    DllMain(0x63000000, DLL_PROCESS_ATTACH, 0x00000000) in "WININET.DLL"
    returned 1 (0x1).
    DllMain(0x76E80000, DLL_PROCESS_ATTACH, 0x00000000) in "RTUTILS.DLL" called.
    DllMain(0x76E80000, DLL_PROCESS_ATTACH, 0x00000000) in "RTUTILS.DLL"
    returned 1 (0x1).
    DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" called.
    DllMain(0x76B40000, DLL_PROCESS_ATTACH, 0x00000000) in "WINMM.DLL" returned
    1 (0x1).
    DllMain(0x76EB0000, DLL_PROCESS_ATTACH, 0x00000000) in "TAPI32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "CreateActCtxW") called from
    "TAPI32.DLL" at address 0x76EB14A8 and returned 0x77E6E59E.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ActivateActCtx") called from
    "TAPI32.DLL" at address 0x76EB1713 and returned 0x77E73813.
    LoadLibraryW("comctl32.dll") called from "TAPI32.DLL" at address 0x76EB1826.
    LoadLibraryW("comctl32.dll") returned 0x71950000.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "DeactivateActCtx") called from
    "TAPI32.DLL" at address 0x76EB1665 and returned 0x77E737E7.
    DllMain(0x76EB0000, DLL_PROCESS_ATTACH, 0x00000000) in "TAPI32.DLL" returned
    1 (0x1).
    DllMain(0x71AA0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL" called.
    DllMain(0x71AA0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2HELP.DLL"
    returned 1 (0x1).
    DllMain(0x71AB0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" called.
    DllMain(0x71AB0000, DLL_PROCESS_ATTACH, 0x00000000) in "WS2_32.DLL" returned
    1 (0x1).
    DllMain(0x5DA50000, DLL_PROCESS_ATTACH, 0x00000000) in "REGWIZC.DLL" called.
    LoadLibraryA("Secur32.dll") called from "ADVAPI32.DLL" at address 0x77DE7126.
    Loaded "SECUR32.DLL" at address 0x76F90000. Successfully hooked module.
    DllMain(0x76F90000, DLL_PROCESS_ATTACH, 0x00000000) in "SECUR32.DLL" called.
    DllMain(0x76F90000, DLL_PROCESS_ATTACH, 0x00000000) in "SECUR32.DLL"
    returned 1 (0x1).
    LoadLibraryA("Secur32.dll") returned 0x76F90000.
    GetProcAddress(0x76F90000 [SECUR32.DLL], "GetUserNameExW") called from
    "ADVAPI32.DLL" at address 0x77DE717B and returned 0x76F912BF.
    LoadLibraryW("tapi32.dll") called from "TAPI32.DLL" at address 0x76EBBC46.
    LoadLibraryW("tapi32.dll") returned 0x76EB0000.
    DllMain(0x5DA50000, DLL_PROCESS_ATTACH, 0x00000000) in "REGWIZC.DLL"
    returned 1 (0x1).
    LoadLibraryExW("regwizc.dll", 0x00000000, LOAD_WITH_ALTERED_SEARCH_PATH)
    returned 0x5DA50000.
    GetProcAddress(0x5DA50000 [REGWIZC.DLL], "DllRegisterServer") called from
    "REGSVR32.EXE" at address 0x010019EC and returned 0x5DA541EF.
    LoadLibraryA("ole32.dll") called from "ATL.DLL" at address 0x76B2AB1C.
    LoadLibraryA("ole32.dll") returned 0x4FEC0000.
    GetProcAddress(0x4FEC0000 [OLE32.DLL], "CoCreateInstance") called from
    "ATL.DLL" at address 0x76B2ABFF and returned 0x4FEDFD85.
    LoadLibraryA("CLBCATQ.DLL") called from "OLE32.DLL" at address 0x4FEFF0F8.
    Loaded "CLBCATQ.DLL" at address 0x7C890000. Successfully hooked module.
    Loaded "COMRES.DLL" at address 0x77050000. Successfully hooked module.
    Loaded "VERSION.DLL" at address 0x77C00000. Successfully hooked module.
    DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "COMRES.DLL" called.
    DllMain(0x77050000, DLL_PROCESS_ATTACH, 0x00000000) in "COMRES.DLL" returned
    1 (0x1).
    DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL" called.
    DllMain(0x77C00000, DLL_PROCESS_ATTACH, 0x00000000) in "VERSION.DLL"
    returned 1 (0x1).
    DllMain(0x7C890000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL],
    "InitializeCriticalSectionAndSpinCount") called from "CLBCATQ.DLL" at address
    0x7C8FCBE0 and returned 0x77E7DDB1.
    DllMain(0x7C890000, DLL_PROCESS_ATTACH, 0x00000000) in "CLBCATQ.DLL"
    returned 1 (0x1).
    LoadLibraryA("CLBCATQ.DLL") returned 0x7C890000.
    GetProcAddress(0x7C890000 [CLBCATQ.DLL], "GetCatalogObject") called from
    "OLE32.DLL" at address 0x4FEFF10D and returned 0x7C8B966D.
    LoadLibraryA("CLBCATQ.DLL") called from "OLE32.DLL" at address 0x4FEFF774.
    LoadLibraryA("CLBCATQ.DLL") returned 0x7C890000.
    GetProcAddress(0x7C890000 [CLBCATQ.DLL], "GetCatalogObject2") called from
    "OLE32.DLL" at address 0x4FEFF787 and returned 0x7C8B9672.
    GetProcAddress(0x4FEC0000 [OLE32.DLL], "CLSIDFromOle1Class") called from
    "OLE32.DLL" at address 0x4FEFF650 and returned 0x4FEF195F.
    GetProcAddress(0x77E60000 [KERNEL32.DLL],
    "InitializeCriticalSectionAndSpinCount") called from "CLBCATQ.DLL" at address
    0x7C8D5081 and returned 0x77E7DDB1.
    LoadLibraryW("C:\WINDOWS\System32\mslbui.dll") called from "MSCTF.DLL" at
    address 0x74753162.
    Loaded "MSLBUI.DLL" at address 0x605D0000. Successfully hooked module.
    DllMain(0x605D0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSLBUI.DLL" called.
    DllMain(0x605D0000, DLL_PROCESS_ATTACH, 0x00000000) in "MSLBUI.DLL" returned
    1 (0x1).
    LoadLibraryW("C:\WINDOWS\System32\mslbui.dll") returned 0x605D0000.
    GetProcAddress(0x605D0000 [MSLBUI.DLL], "CTFGetLangBarAddIn") called from
    "MSCTF.DLL" at address 0x7475319B and returned 0x605D2AF6.
    GetProcAddress(0x77F50000 [NTDLL.DLL], "RtlDllShutdownInProgress") called
    from "MSCTF.DLL" at address 0x74754C91 and returned 0x77F6010E.
    LoadLibraryExW("C:\PROGRA~1\Yahoo!\MESSEN~1\idle.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x77D57315.
    Loaded "IDLE.DLL" at address 0x60300000. Successfully hooked module.
    Loaded "MSVCR71.DLL" at address 0x7C340000. Successfully hooked module.
    DllMain(0x7C340000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR71.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL],
    "InitializeCriticalSectionAndSpinCount") called from "MSVCR71.DLL" at address
    0x7C3418AB and returned 0x77E7DDB1.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "FlsAlloc") called from
    "MSVCR71.DLL" at address 0x7C341950 and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "FlsGetValue") called from
    "MSVCR71.DLL" at address 0x7C34195D and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "FlsSetValue") called from
    "MSVCR71.DLL" at address 0x7C34196A and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "FlsFree") called from
    "MSVCR71.DLL" at address 0x7C341977 and returned NULL. Error: The specified
    procedure could not be found (127).
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "IsProcessorFeaturePresent")
    called from "MSVCR71.DLL" at address 0x7C341FDA and returned 0x77E8131B.
    DllMain(0x7C340000, DLL_PROCESS_ATTACH, 0x00000000) in "MSVCR71.DLL"
    returned 1 (0x1).
    DllMain(0x60300000, DLL_PROCESS_ATTACH, 0x00000000) in "IDLE.DLL" called.
    DllMain(0x60300000, DLL_PROCESS_ATTACH, 0x00000000) in "IDLE.DLL" returned 1
    (0x1).
    LoadLibraryExW("C:\PROGRA~1\Yahoo!\MESSEN~1\idle.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) returned 0x60300000.
    DllMain(0x5DA50000, DLL_PROCESS_DETACH, 0x00000000) in "REGWIZC.DLL" called.
    DllMain(0x5DA50000, DLL_PROCESS_DETACH, 0x00000000) in "REGWIZC.DLL"
    returned 1 (0x1).
    DllMain(0x76EB0000, DLL_PROCESS_DETACH, 0x00000000) in "TAPI32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ReleaseActCtx") called from
    "TAPI32.DLL" at address 0x76EB1AE8 and returned 0x77E73ABA.
    DllMain(0x76EB0000, DLL_PROCESS_DETACH, 0x00000000) in "TAPI32.DLL" returned
    1 (0x1).
    DllMain(0x76B40000, DLL_PROCESS_DETACH, 0x00000000) in "WINMM.DLL" called.
    DllMain(0x76B40000, DLL_PROCESS_DETACH, 0x00000000) in "WINMM.DLL" returned
    1 (0x1).
    DllMain(0x76E80000, DLL_PROCESS_DETACH, 0x00000000) in "RTUTILS.DLL" called.
    DllMain(0x76E80000, DLL_PROCESS_DETACH, 0x00000000) in "RTUTILS.DLL"
    returned 1 (0x1).
    DllMain(0x63000000, DLL_PROCESS_DETACH, 0x00000000) in "WININET.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ReleaseActCtx") called from
    "WININET.DLL" at address 0x6307091E and returned 0x77E73ABA.
    DllMain(0x63000000, DLL_PROCESS_DETACH, 0x00000000) in "WININET.DLL"
    returned 1 (0x1).
    DllMain(0x762C0000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPT32.DLL" called.
    DllMain(0x762C0000, DLL_PROCESS_DETACH, 0x00000000) in "CRYPT32.DLL"
    returned 1 (0x1).
    DllMain(0x762A0000, DLL_PROCESS_DETACH, 0x00000000) in "MSASN1.DLL" called.
    DllMain(0x762A0000, DLL_PROCESS_DETACH, 0x00000000) in "MSASN1.DLL" returned
    1 (0x1).
    DllMain(0x7CD00000, DLL_PROCESS_DETACH, 0x00000000) in "SHELL32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ReleaseActCtx") called from
    "SHELL32.DLL" at address 0x7CD5B966 and returned 0x77E73ABA.
    DllMain(0x7CD00000, DLL_PROCESS_DETACH, 0x00000000) in "SHELL32.DLL"
    returned 1 (0x1).
    DllMain(0x76B20000, DLL_PROCESS_DETACH, 0x00000000) in "ATL.DLL" called.
    LoadLibraryA("USER32.dll") called from "ATL.DLL" at address 0x76B2AB1C.
    LoadLibraryA("USER32.dll") returned 0x77D40000.
    GetProcAddress(0x77D40000 [USER32.DLL], "UnregisterClassW") called from
    "ATL.DLL" at address 0x76B2ABFF and returned 0x77D57053.
    DllMain(0x76B20000, DLL_PROCESS_DETACH, 0x00000000) in "ATL.DLL" returned 1
    (0x1).
    Unloaded "REGWIZC.DLL" at address 0x5DA50000.
    Unloaded "WSOCK32.DLL" at address 0x71AD0000.
    Unloaded "TAPI32.DLL" at address 0x76EB0000.
    Unloaded "WINMM.DLL" at address 0x76B40000.
    Unloaded "RTUTILS.DLL" at address 0x76E80000.
    Unloaded "WININET.DLL" at address 0x63000000.
    Unloaded "CRYPT32.DLL" at address 0x762C0000.
    Unloaded "MSASN1.DLL" at address 0x762A0000.
    Unloaded "SHELL32.DLL" at address 0x7CD00000.
    Unloaded "ATL.DLL" at address 0x76B20000.
    DllMain(0x60300000, DLL_PROCESS_DETACH, 0x00000001) in "IDLE.DLL" called.
    DllMain(0x60300000, DLL_PROCESS_DETACH, 0x00000001) in "IDLE.DLL" returned 1
    (0x1).
    DllMain(0x7C340000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR71.DLL" called.
    DllMain(0x7C340000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCR71.DLL"
    returned 1 (0x1).
    DllMain(0x605D0000, DLL_PROCESS_DETACH, 0x00000001) in "MSLBUI.DLL" called.
    DllMain(0x605D0000, DLL_PROCESS_DETACH, 0x00000001) in "MSLBUI.DLL" returned
    1 (0x1).
    DllMain(0x7C890000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL" called.
    DllMain(0x7C890000, DLL_PROCESS_DETACH, 0x00000001) in "CLBCATQ.DLL"
    returned 1 (0x1).
    DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL" called.
    DllMain(0x77C00000, DLL_PROCESS_DETACH, 0x00000001) in "VERSION.DLL"
    returned 1 (0x1).
    DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "COMRES.DLL" called.
    DllMain(0x77050000, DLL_PROCESS_DETACH, 0x00000001) in "COMRES.DLL" returned
    1 (0x1).
    DllMain(0x76F90000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL" called.
    DllMain(0x76F90000, DLL_PROCESS_DETACH, 0x00000001) in "SECUR32.DLL"
    returned 1 (0x1).
    DllMain(0x71950000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" called.
    GetProcAddress(0x77E60000 [KERNEL32.DLL], "ReleaseActCtx") called from
    "COMCTL32.DLL" at address 0x719C50C6 and returned 0x77E73ABA.
    DllMain(0x71950000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL"
    returned 1 (0x1).
    DllMain(0x71AB0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" called.
    DllMain(0x71AB0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2_32.DLL" returned
    1 (0x1).
    DllMain(0x71AA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2HELP.DLL" called.
    DllMain(0x71AA0000, DLL_PROCESS_DETACH, 0x00000001) in "WS2HELP.DLL"
    returned 1 (0x1).
    DllMain(0x70A70000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL" called.
    DllMain(0x70A70000, DLL_PROCESS_DETACH, 0x00000001) in "SHLWAPI.DLL"
    returned 1 (0x1).
    DllMain(0x77340000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL" called.
    DllMain(0x77340000, DLL_PROCESS_DETACH, 0x00000001) in "COMCTL32.DLL"
    returned 1 (0x1).
    DllMain(0x74720000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" called.
    DllMain(0x74720000, DLL_PROCESS_DETACH, 0x00000001) in "MSCTF.DLL" returned
    1 (0x1).
    DllMain(0x5AD70000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL" called.
    DllMain(0x5AD70000, DLL_PROCESS_DETACH, 0x00000001) in "UXTHEME.DLL"
    returned 1 (0x1).
    DllMain(0x008B0000, DLL_PROCESS_DETACH, 0x00000001) in "SWPG.DAT" called.
    DllMain(0x008B0000, DLL_PROCESS_DETACH, 0x00000001) in "SWPG.DAT" returned 1
    (0x1).
    DllMain(0x5A000000, DLL_PROCESS_DETACH, 0x00000001) in "KLG.DAT" called.
    DllMain(0x5A000000, DLL_PROCESS_DETACH, 0x00000001) in "KLG.DAT" returned 1
    (0x1).
    DllMain(0x77120000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL" called.
    DllMain(0x77120000, DLL_PROCESS_DETACH, 0x00000001) in "OLEAUT32.DLL"
    returned 1 (0x1).
    DllMain(0x4FEC0000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" called.
    DllMain(0x4FEC0000, DLL_PROCESS_DETACH, 0x00000001) in "OLE32.DLL" returned
    1 (0x1).
    DllMain(0x77D40000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" called.
    DllMain(0x77D40000, DLL_PROCESS_DETACH, 0x00000001) in "USER32.DLL" returned
    1 (0x1).
    DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL" called.
    DllMain(0x77DD0000, DLL_PROCESS_DETACH, 0x00000001) in "ADVAPI32.DLL"
    returned 1 (0x1).
    DllMain(0x78000000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" called.
    DllMain(0x78000000, DLL_PROCESS_DETACH, 0x00000001) in "RPCRT4.DLL" returned
    1 (0x1).
    DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" called.
    DllMain(0x77C10000, DLL_PROCESS_DETACH, 0x00000001) in "MSVCRT.DLL" returned
    1 (0x1).
    DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL" called.
    DllMain(0x08370000, DLL_PROCESS_DETACH, 0x00000001) in "DEPENDS.DLL"
    returned 1 (0x1).
    DllMain(0x77E60000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL" called.
    DllMain(0x77E60000, DLL_PROCESS_DETACH, 0x00000001) in "KERNEL32.DLL"
    returned 1 (0x1).
    Exited "REGSVR32.EXE" (process 0x6A0) with code 5 (0x5).

    THERE IT IS. I wont be at this pc until Monday USA time. But, I can read
    your posts from my home pc. I appreaciate your help. SORRY to the Newsgroup
    for posting such a long log but I am at my wits as different people have been
    helping me and am trying different things. thanks again
    PS Jupitor I hope has a solution he can offer. I really like his check list.
    PS. took out the suceeded ones and left all that had errors or in red (127)
     
    RuUstyM, Sep 18, 2005
    #7

  8. Very interesting. I don't have any reference to msctf.dll in mine.
    The only Office products I have installed are the free readers.

    However, I also don't have anything like these either:

    Loaded "KLG.DAT" at address 0x5A000000. Successfully hooked module.
    Loaded "SWPG.DAT" at address 0x008B0000. Successfully hooked module.
    LoadLibraryExW("C:\PROGRA~1\Yahoo!\MESSEN~1\idle.dll", 0x00000000,
    LOAD_WITH_ALTERED_SEARCH_PATH) called from "USER32.DLL" at address 0x77D57315.
    Loaded "IDLE.DLL" at address 0x60300000. Successfully hooked module.
    Loaded "MSVCR71.DLL" at address 0x7C340000. Successfully hooked module.


    So I suspect you have a bunch of stuff to get rid of or at least investigate
    and find an explanation for. Perhaps it is a good thing that this registration
    is failing. ;}

    BTW I don't know that KLG.DAT and SWPG.DAT are necessarily
    malware but they sure don't look like anything official either.
    The Yahoo! thing may be Ok and then the next two would probably
    be Ok too.

    Is that Jupiter's point for this step? Make sure you check for and remove
    malware before installing XPsp2? Good advice if so. I think it could be
    a good idea to uninstall unessential programs which use hooks like this
    anyway and then reinstall them cleanly into the new OS.


    Good luck

    Robert
    ---
     
    Robert Aldwinckle, Sep 18, 2005
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.