View Full Version : What is causing this popup?


Schnoodledorfer
22nd June 2007, 15:04
Can someone tell me what is generating the following popup? I get it frequently when I click on an avi file in Windows Explorer (XP Home SP2). (I don't need to have to play the video, just select it.)

http://mynetimages.com/4812e019.jpg (http://mynetimages.com)

I did a base64 decode on the "Application Data" and I got the following:
Version: WlFBXUJQVFZaRE5DRkNVJClSOyQ7ViAsAAdVPyE8IzBzZHt+dzMkIjskIzZFcnR9eGp/Rzc7R3J4b3FDMQ==
ImageBase: 0CF60000
Eip: A197E30
Eax: D8D0000
Ecx: D784A58
Edx: 0
Ebx: 0
Esi: D7849A0
Edi: D740000
Ebp: 186E64C
Esp: 186E520
-1
Code = [204]
- 0
- 204
- 227
- 0
- []
> D:\WINDOWS\Explorer.EXE
> D:\WINDOWS\system32\ntdll.dll
> D:\WINDOWS\system32\kernel32.dll
> D:\WINDOWS\system32\msvcrt.dll
> D:\WINDOWS\system32\ADVAPI32.dll
> D:\WINDOWS\system32\RPCRT4.dll
(I'm not including the whole thing, but basically a long list of .dlls and .axs follow.) Trying to decode the "version" results in gibberish. The window is owned by Explorer, but what library is triggering it?

I think I started getting these when I uninstalled ffdshow and replaced it with ffdshow tryouts, which is disabled as far as running with Explorer somehow. Actually playing the video with something that uses ffdshow tryouts doesn't cause the popups. So I suppose it is something that is running instead of ffdshow, but I don't know what it is.

Clicking on the "Copy Text" button does nothing, as far as I can tell. (It is possible to select the text in the window and copy the text using Control-C, however.) "Submit Report" button results in another popup that just says "1" or "2", etc., and has an OK box that closes it. Clicking on "OK" closes the window, but typically another one will pop up.

Hopefully someone will recognize this window. As it is, I don't know what software to blame. Whatever it is, it certainly has a shoddy method of reporting errors. I would blame some sort of malware, but it only seems to be triggered by selecting avi files, so that doesn't seem likely.

Thanks in advance for any help.

setarip_old
22nd June 2007, 18:32
Hi!

Try performing a "System Restore" back to the last time things were working properly...

foxyshadis
23rd June 2007, 01:22
System restore shouldn't be necessary. If you want to play detective to get to the bottom of it, you can disable ffdshow's decoding and see what filters get loaded into your player (graphedit is best for testing this, but mpc or zoomplayer work if you prevent them from using custom overrides). Whatever comes up should be the same as what explorer gets (though it might crash right away there too).

It's almost certainly one of the dlls that came in the popup, that might narrow your search down once you eliminate microsoft dlls and filters.

Alternately you can just take explorer out of ffdshow's blacklist. Explorer tends to get really unstable with video thumbs & previews, but if it was working before it should keep working.

Schnoodledorfer
23rd June 2007, 04:29
Alternately you can just take explorer out of ffdshow's blacklist. Explorer tends to get really unstable with video thumbs & previews, but if it was working before it should keep working.

Thanks. Yes, it appears that the errors are being triggered by Explorer trying to figure out the duration (or whatever) of the avi files so it can display it. (That's apparently the same feature that can occasionally cause avi files to have a handles locked to them so that they are immovable and undeletable until you reboot or use something like unlocker to remove the handles.)

To be clear, I'm not really asking for any serious troubleshooting help at this point - there is more that I can try own my own. I'm just hoping that someone will say: "Oh, gee, that looks like the popup the xvid codec generates when it has an error", or something like that. If nothing else, I could probably reinstall the old version of ffdshow since I didn't seem to have problems with it.

video_magic
7th July 2007, 05:03
I was frustrated terribly by this plague of a message (it delayed Me while I worked with videos) :angry:

The answer I found was to disable a Nero file.
C:\Program Files\Common Files\Ahead\DSFilter

renamed the file NeVideo.ax

I hope this works for You also :)