Secunia Logo  


Secunia PSI WorldMap
 
Forum Thread: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Secunia PSI - Feedback and Questions

TheAncient
PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by TheAncient on 15th May, 2009 01:23
Posts: 1

User Since: 4th Dec, 2008

Secunia System Score: N/A

Location: CA
Secunia PSI keeps blowing up (right after scan)with message:
"Secunia PSI has encountered a problem and needs to close."
Clicking on the "more information" link shows:
AppName: psi.exe AppVer: 1.0.0.4 ModName: mshtml.dll
ModVer: 8.0.6001.18702 Offset: 00232ede

I re-installed Secunia PSI but keep getting the same error.

Any ideas anyone?

TheAncient

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 9th Nov, 2009 15:27, last edited on 9th Nov, 2009 15:27
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
I experienced a PSI crash with the following signature:

AppName: psi.exe
AppVer: 1.5.0.0
ModName: mshtml.dll
ModVer: 8.0.6001.18852
Offset: 00209f5c

This crash is occurring repeatedly.

--
Sometimes they fool you by walking upright.

Maurice Joyce
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by Maurice Joyce on 9th Nov, 2009 17:52, last edited on 9th Nov, 2009 17:52
Posts: 1,782

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
This file is a component of IE.

Might be worth checking Microsoft update - your mod version is different to mine which works.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 9th Nov, 2009 18:10, last edited on 9th Nov, 2009 18:10
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
Currently this workstation has IE 8 with the following patches:

Update KB968220
Update KB969497
Update KB971180
Security Update KB969897
Security Update KB972260
Security Update KB971961
Security Update KB974455
Update KB976749

The last two were installed 10/15 and 11/4. Possibly PSI doesn't like one of them.

How risky is it to uninstall these patches?

EDIT: http://support.microsoft.com/kb/976749 seems to confirm that the last two patches, above, are responsible for the rev. no. of mshtml.dll on this workstation.

I think I am at the latest patch level for IE because MS Update tells me no high-priority updates for Windows are available, and offers various optional software updates which are not patches to IE 8 (though the compatibility view list comes closest):

Update for Internet Explorer 8 Compatibility View List for Windows XP
The Windows Automation API library
Windows PowerShell 1.0 for Windows XP
Microsoft Base Smart Card Cryptographic Service Provider Package: x86
Group Policy Preference Client Side Extensions for Windows XP
Windows Search 4.0 for Windows XP
Windows Media Player 11
Microsoft Silverlight
Windows Live Essentials

--
Sometimes they fool you by walking upright.

Maurice Joyce
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by Maurice Joyce on 9th Nov, 2009 23:05
Posts: 1,782

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
I have both these installed:

Security Update KB974455
Update KB976749

so not sure that is the issue.

In the IE help menu what is your full version number?

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 9th Nov, 2009 23:48
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
Version 8.0.6001.18702
Build 86001

--
Sometimes they fool you by walking upright.

Maurice Joyce
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by Maurice Joyce on 10th Nov, 2009 01:02
Posts: 1,782

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
This is a head scratcher!

The error Mod Ver U gave is:
ModVer: 8.0.6001.{b}18852{/b}
Offset: 00209f5c

Offset 00209f5c is irc_data_fixup

(irc means Internet Relay Chat)

The IE version number U gave is:

Version 8.0.6001.18702
Build 86001
I am of the opinion that the Mod Ver & actual IE version in help should be the same.

My version is 8.0.6001.18702IC

The IC in my version could be important in that it could relate to Internet Chat.
This is the only real difference we appear to have except all the optional downloads offered by Microsoft are installed on my PC. It certainly would not relate to the Windows Live,Windows Media Player 11 or Search 4 updates.

I am of course talking about an XP OS - not sure about Vista or 7 if U are using them.

There is no real risk in an uninstall/reinstall but I would recommend doing them in the correct order.

I personally would install the IE comp update first to see if that helps.

In the meantime I will check the dependency of the file causing the hassle.

Hope this helps (a bit!) - giving me a headache.



--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 10th Nov, 2009 17:15
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
The AppVer is for the application. The ModVer is for the specific module. In this case, module is mshtml.dll.

So, if you have the latest patches installed, your file %windir%\system32\mshtml.dll is also at ModVer 8.0.6001.18852 even though your application is at AppVer 8.0.6001.18702IC.

The IC in your version means your IE was delivered to you through a third party who customized it with Microsoft's browser customization tool. See: http://support.microsoft.com/kb/969393

--
Sometimes they fool you by walking upright.

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 10th Nov, 2009 17:47
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
Unrolling the recent patches merely changed the ModVer reported in the crash.

I have discovered that IE 8.0 will also crash on this workstation at the same place in the same module.

I have also read that this crash has been encountered by other people in other applications, such as a BlackBerry synch program and various MS apps.

Nobody seems to know the cause. However, some reported that reinstalling IE8 helped them. So that is my next step.

--
Sometimes they fool you by walking upright.

Maurice Joyce
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by Maurice Joyce on 10th Nov, 2009 18:37
Posts: 1,782

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
Thank U for that. Will keep digging around until U state U have fixed it.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8

metaed
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by metaed on 10th Nov, 2009 18:55
Posts: 43

User Since: 11th Feb, 2009

Secunia System Score: 99%

Location: Fort Worth, US
Early results are good. Neither IE 8 nor PSI have crashed under conditions which are identical except for the reinstall of IE8.

What I did:

o uninstall IE8

o allow Windows XP automatic update system to install IE8

o allow Windows XP automatic update system to install patches to IE8

Of course there were several reboots recommended along the way, all of which I allowed also.

Finally I ran a full scan in PSI to be sure all IE8 security issues were patched.

--
Sometimes they fool you by walking upright.

Maurice Joyce
RE: PSI 1.0.0.4 on XP-SP3 machine crashes after short time
by Maurice Joyce on 10th Nov, 2009 18:58
Posts: 1,782

User Since: 4th Jan, 2009

Secunia System Score: 100%

Location: Salisbury, UK
Lets hope it continues to work for U.

--
Maurice

HP Intel Pentium 4
Windows XP Home SP3
IE8