Solved system32.ex - Application Error

davevont · Dec 4, 2012

Hi all, davevont again, I just love, (need) this forum !

For the last few of days, every time I log into Windows 8 and enter the 'Desktop' this error message greets me.

system32.ex - Application Error
The instruction at 0x240f7c1e referenced memory at 0x00000000.
The memory could not be read.
Click on OK to terminate the program

I click OK and it's gone. There are no evident problems or issues, just every time I logon and enter desktop.
The only change is with the first set of numbers on the error message . . . .The instruction at . . . last time it was 0x004077fe
Doesn't particularly bother me but something's not right.

See Image

Hopachi · Dec 4, 2012

That file doesn't exist on my system(s).
Hmmm...

davevont · Dec 4, 2012

Hi Hopachi . . . . .
I've taken an image of 'Event Viewer' maybe that's of some use ??
I rebooted a few time and didn't get the error warning, but it shows up here

Hopachi · Dec 4, 2012

In a root folder...
Don't know anything about this file. Sorry.
Go there and right click on the file, see it's digitally signed to make sure it's not a fake one.

davevont · Dec 4, 2012

I've just been scrolling through Administrative Events in Event Viewer.
Heck there should be a health warning!
Read too many of those and you would never sleep at night ! ! !

"Useful to a few . . . . Damn dangerous to the many !

Hopachi · Dec 4, 2012

What files are there in "c:\Windows\root" besides that one?

More importantly: if you do you see any services or registry entries like this:
Troj/Sdbot-U - Viruses and Spyware - Threat Analyses - Threat Center - Sophos
I personally don't suggest you download any antiviruses from there... it's just the site's offers.

You'll have to remove the entry's or files as the link suggests.

Since I don't have those files here, personally I would delete the root folder, if I knew what's inside.

Good luck

davevont · Dec 4, 2012

Hi. Couldn't see the root file in C:\Windows\ although I do have hidden files as showing.
While in C:\Windows went into Folder Options View, not as easy in Windows 8, unchecked 'hide protected system operating files'
Inside the root folder was the system32.ex It had an icon . . what I would call a 'can of soup' ! see image
I've scanned it with Norton, = OK. and also what Norton call File Insight - see same image.
Undecided what to do . . . the date of the file is 2006. May be I could some how put it in a Virus Vault, cut it and put it on a Memory stick ?? delete it ?? see what happens if I run it ??I think I will download and run a couple of Virus/Trojan scanners, see what happens

View attachment 12343

looks like this should be in 'Security' now . . .

Hopachi · Dec 4, 2012

davevont said:
Hi. Couldn't see the root file in C:\Windows\ although I do have hidden files as showing.
While in C:\Windows went into Folder Options View, not as easy in Windows 8, unchecked 'hide protected system operating files'
Inside the root folder was the system32.ex It had an icon . . what I would call a 'can of soup' ! see image
I've scanned it with Norton, = OK. and also what Norton call File Insight - see same image.
Undecided what to do . . . the date of the file is 2006. May be I could some how put it in a Virus Vault, cut it and put it on a Memory stick ?? delete it ?? see what happens if I run it ??I think I will download and run a couple of Virus/Trojan scanners, see what happens

View attachment 12343

looks like this should be in 'Security' now . . .

The link is invalid.

Have you checked to see if file is digitally signed? It's optionally but would provide better info over its origins.

davevont · Dec 4, 2012

Hi . . .
File shows no sign of digitally signed.
What I have done is made it visible again, put it into the Norton Virus Vault, re hidden protected system operating files.
Back in Virus Vault it still shows. I've rebooted a couple of times . . No application errors now at start up and no record in 'Application Events Viewer' In a couple of days, if everything is stable, I'll delete it ps. That icon, I'm sure is a can of Campbells SOUP !!!
I will re download attachment for interest
Many, many thanks for your help . . . . .

Hopachi · Dec 4, 2012

I'll delete it ps.

I would do the same thing!

That icon, I'm sure is a can of Campbells SOUP !!!

What..

Seriously,
What would a can of soup do there! Think about it: it's not digitally signed, it's not from Microsoft and I don't have that on a clean system. It can be harmless, but we can be wrong about it: some malware can pass undetected through AV scanners.

It would be best to restore from clean backup or refresh just to make sure:
http://www.eightforums.com/tutorials/2293-refresh-windows-8-a.html
But if you feel safe, use the current install further.

Many, many thanks for your help . . . . .

You're welcome.

Solved system32.ex - Application Error

Member

My Computer

Polyhedric Stellation

My Computer

Member

My Computer

Polyhedric Stellation

My Computer

Member

My Computer

Polyhedric Stellation

My Computer

Member

My Computer

Polyhedric Stellation

My Computer

Member

My Computer

Polyhedric Stellation

My Computer