Question

  Asked: Feb 19 2008   8:17 PM GMT
  Asked by: AsgharE


The executable has changed since the last time you used


Viruses, Outlook, Internet Explorer, Microsoft Word

Hello All
A user has recently start having errors when she is in outlook and use MSword. The errors are for Word.exe or Outlook.exe and sometimes Ie.exe
Note:The Symantec Antivirus EndPoint dose not find any virus.


Word:File Version: 11.0.8202.0
File Description: Microsoft Office Word
File Path: C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
Digital Signature: Microsoft Corporation
Process ID: 0x8b0 (Hexadecimal) 2224 (Decimal)

IE:
The executable has changed since the last time you used C:\Program Files\Internet Explorer\iexplore.exe
File Version: 7.0.6000.16608
File Description: Internet Explorer
File Path: C:\Program Files\Internet Explorer\iexplore.exe
Digital Signature:
Process ID: 0x75c (Hexadecimal) 1884 (Decimal)

EventViewer:Application
Hanging application OUTLOOK.EXE, version 11.0.8169.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event ID: 1002


Hanging application WINWORD.EXE, version 11.0.8202.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Hanging application explorer.exe, version 6.0.2900.3156, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



SystemErrors:

Error code 0000007f, parameter1 00000000, parameter2 00000000, parameter3 00000000, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Error code 100000ea, parameter1 854e4bc8, parameter2 844d4658, parameter3 f7942cb4, parameter4 00000001.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Error code 100000ea, parameter1 857344b0, parameter2 86953ca0, parameter3 f794acb4, parameter4 00000001.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0



It the applications are changing perhaps the machine is being patched and the applications are also being patched.
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Security, Exchange and Microsoft Windows.

Looking for relevant Security Whitepapers? Visit the SearchSecurity.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

Pressler2904  |   Jun 2 2008  4:54PM GMT

From the system errors posted above, it looks like the system in question might have a hardware issue (possibly a memory or system board issue). The 0×7f issues is most likely a hardware (memory or motherboard/system board trace) issue, while the 0xea errors usually point to graphics adapter issues **HOWEVER** if the system in question uses integrated video, the main memory once again becomes the primary source of the error.

Try swapping RAM using KNOWN GOOD modules of the appropriate type. If that does not work, verify the operation of the system board with whatever diagnostic tools are available to you (I use CheckIT Pro, but there are good free tools as well).

Also, if by chance this system is overclocked, bring it back down to factory spec’d speed….