Help - Search - Members - Calendar
Full Version: I'm getting an Msimn error
Gladiator Security Forum > Malware Help Forum > HELP! Think you are Infected?
mikemac
Hi

Last night when I opened my Outlook Express I got a little gray dialogue box with Msimn at the top of it with a red X that says "This program has performed an illegal operation and will shut down. If the problem persists, contact the program vendor." I run all my security ulilities but they found nothing and I'm still getting it. I can't receive or send e-mail but I can view web sites with my browser.

I have a pentium 2 with a Windows 98 SE operating system. I updated Norton anti-virus (2004 version), SpywareBlaster, SpyBot, Ad-aware, Moosoft Cleaner and run them last night but they found nothing. I use an up to date free version of Zone Alarm. I use Mozilla Firefox as my default browser. I just checked with my Internet Service Provider to see if they shut me down for some reason but they hadn't. I have all the Windows Security updates except KB891711. About this time last year John an admin from this forum help me out in the BroadbandReports forum. John suggested that I avoid KB891711 if I'm having a conflict with it. At that time other people were also having a problem with KB891711. I phoned Microsoft with John's advice and they also told me to avoid KB891711 if it gives me a conflict. I've kept the link to my BroadbandReports thread if needed.

I checked to make sure that I have the up to date version of HijackThis v1.99.1. Here's my HijackThis log from today. Any help is much appreciated.

Thanks
Mike

Logfile of HijackThis v1.99.1
Scan saved at 12:59:58 PM, on 5/29/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\CANON\MULTIPASS\MONITR32.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\WINDOWS\SYSTEM\FXREDIR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\PROGRAM FILES\HJT\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.123clicks.com/cgi-bin/start.pl?username=mikemac
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://home.netscape.com/"); (C:\Program Files\Netscape\Users\default\prefs.js)
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.empowerism.com/e/88281/rotate.cfm"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\vovnr4t5.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\vovnr4t5.slt\prefs.js)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\TEMP\MSDXM.OCX (file missing)
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [MP_STATUS_MONITOR] "C:\Program Files\Canon\MultiPASS\monitr32.exe" I
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
LoPhatPhuud
Your log is clean.

I would suggest you do a repair install of Outlook Express. Use Add/Remove Programs and go the Windows component section and select Outlook Express. Select 'Repair' if offered, otherwise, remove, reboot, then re-install.
mikemac
Thanks LoPhatPhuud but I'm not exactly sure what you mean.

In Add/Remove Programs - Install/Uninstall if I highlight Microsoft Outlook Express 6 and click Add/Remove it will remove Outlook Express and I'd have to re-install it, wouldn't I? And I would lose all of my saved e-mails, wouldn't I?

I don't see Microsoft Outlook Express 6 in Add/Remove Programs - Windows Setup.

If I lose all of my saved e-mail by removing and re-installing Microsoft Outlook Express 6 it's going to take me weeks to go through the e-mails I need to copy and save to a web based e-mail account. I'd have to change my e-mail address at a bunch of places before I even started too.

Why would this happen? Does Microsoft Outlook Express 6 only hold so much e-mail? If so I could go through my saved e-mail and delete a lot of what I don't need if that would help?

I'm not even sure where I would re-install it from if I need to?

Mike
LoPhatPhuud
Removing and re-installing Outlook Express will delete the email and address book. These files should always be backed up on a regular basis. This Microsoft article will provide the necessary information to backup and restore the Outlook Express data files: http://support.microsoft.com/kb/270670

The error you are getting indicate the OE executable is probably corrupt so removing and reinstalling will be you only option. Backup your data, remove OE, reboot, install OE, then restore your data.

I cannot understand why you think it will be necessary to change you email address When you setup OE you tell it what addresses to use, not the other way around. There is no need to use another email client..
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.