locked
IE10 and IE11 Open and Then Close RRS feed

  • Question

  • Hi.  I am having similar problems with both IE10 and IE11. Both start with blank screen then close without displaying any content  System is W7 64B SP1 with Norton IS.  This problem started just a couple of weeks ago.

    So far:

    - Uninstalled both IE10 and IE11 several times through "View Installed Updates" but with each re-install the problem remains.  IE9 works fine.

    - Ran sfc /scannow and all files are okay.

    - Have Reset through Internet Options, no change.

    - Have re-registered ieproxy.dll, no change.

    - Have scanned for virus and rootkit, nothing identified.

    - Nothing is identified in Event Viewer under Application or System as an error or warning.

    IE 10 and IE11 will work with "Enhanced Protection Mode" in Internet Properties but this blocks various Add-Ons that I need.

    I am at a complete loss.  Does anyone have further suggestions?

    Thanks.

    Doug ... :-)

    Wednesday, April 16, 2014 6:45 AM

Answers

  • Hi.  Problem solved. In a related suggested solution, it was suggested to re-register the ieproxy.dll.

    I had tried this command once:

    regsvr32.exe “c:\program files\internet explorer\ieproxy.dll

    but had forgotten this was for the 64B version of IE.

    So tried the 32B command:

    regsvr32.exe “c:\program files (x86)\internet explorer\ieproxy.dll

    and it corrected the problem.

    Thanks for your assistance.

    Doug ... :-)

    • Marked as answer by Effective Saturday, April 19, 2014 5:54 PM
    Saturday, April 19, 2014 5:54 PM

All replies

  • Does anyone have further suggestions?

    Use ProcMon to find out what is going on, e.g. for its Process and Thread event class.  Sounds like you have an interferer, probably security related.  E.g. something that is treating your new iexplore.exe as a suspected Trojan and acting accordingly (apparently without any warnings or diagnostics?  ProcMon would be a way of testing that idea too.)   A MalwareBytes Beta is a recent example of the issue.

    http://answers.microsoft.com/en-us/ie/forum/ie11-iewindows8_1/windows-81-update-for-x64-based-systems-kb2919355/fd60d60a-abd5-48c8-9fa2-76332179263b?msgId=81173ea0-2dc9-4052-89f2-ad2fe2af0676



    Robert Aldwinckle
    ---

    Wednesday, April 16, 2014 4:34 PM
    Answerer
  • Hi.  I did have Malware Bytes installed, the AV version only.  Have removed.  Also removed CCCleaner. Still having a problem opening IE10.

    Did run ProcMon and there are several items that appear as Buffer Overflow on file openings.

    Just before the first Thread Exit for iexplorer.exe are these entries,

    - 12:22:40.0273106 PM svchost.exe 616 CreateFile C:\Windows\Prefetch SUCCESS Desired Access: Read Data/List Directory, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 QueryDirectory C:\Windows\Prefetch\*-4E288B88.pf NO SUCH FILE Filter: *-4E288B88.pf
    - 12:22:40.0273931 PM svchost.exe 616 CloseFile C:\Windows\Prefetch SUCCESS
    - 12:22:40.0274913 PM svchost.exe 616 CreateFile C:\Windows\Prefetch SUCCESS Desired Access: Read Data/List Directory, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 QueryDirectory C:\Windows\Prefetch\*-B28CC291.pf NO SUCH FILE Filter: *-B28CC291.pf
    - 12:22:40.0275511 PM svchost.exe 616 CloseFile C:\Windows\Prefetch SUCCESS
    - 12:22:40.0275801 PM IEXPLORE.EXE 1932 CreateFile C:\Program Files (x86)\Internet Explorer\RpcRtRemote.dll NAME NOT FOUND Desired Access: Read Attributes, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 CreateFile C:\Windows\Prefetch SUCCESS Desired Access: Read Data/List Directory, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 QueryDirectory C:\Windows\Prefetch\*-8E2E654A.pf NO SUCH FILE Filter: *-8E2E654A.pf
    - 12:22:40.0276974 PM svchost.exe 616 CloseFile C:\Windows\Prefetch SUCCESS
    12:22:40.0277077 PM IEXPLORE.EXE 1932 CreateFile C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS Desired Access: Read Attributes, Dis"Apple-tab-span" style="white-space:pre;"> IEXPLORE.EXE 1932 QueryBasicInformationFile C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS CreationTime: 20/11/2010 8:24:14 PM, LastAccessTime: 20/11/2010 8:24:14 PM, LastWriteTime: 20/11/2010 8:24:14 PM, ChangeTime: 20/04/2013 7:32:03 PM, FileAttributes: A
    - 12:22:40.0277528 PM IEXPLORE.EXE 1932 CloseFile C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS
    - 12:22:40.0277836 PM svchost.exe 616 CreateFile C:\Windows\Prefetch SUCCESS Desired Access: Read Data/List Directory, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 QueryDirectory C:\Windows\Prefetch\*-BB14A46C.pf NO SUCH FILE Filter: *-BB14A46C.pf
    - 12:22:40.0278291 PM IEXPLORE.EXE 1932 CreateFile C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 CloseFile C:\Windows\Prefetch SUCCESS
    - 12:22:40.0278643 PM IEXPLORE.EXE 1932 CreateFileMapping C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS SyncType: SyncTypeOther
    - 12:22:40.0279027 PM IEXPLORE.EXE 1932 CreateFileMapping C:\Windows\SysWOW64\RpcRtRemote.dll FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: 
    - 12:22:40.0279228 PM svchost.exe 616 CreateFile C:\Windows\Prefetch SUCCESS Desired Access: Read Data/List Directory, Synchronize, Dis"Apple-tab-span" style="white-space:pre;"> svchost.exe 616 QueryDirectory C:\Windows\Prefetch\*-528BC649.pf NO SUCH FILE Filter: *-528BC649.pf
    - 12:22:40.0279786 PM svchost.exe 616 CloseFile C:\Windows\Prefetch SUCCESS
    - 12:22:40.0279991 PM IEXPLORE.EXE 1932 CreateFileMapping C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS SyncType: SyncTypeOther
    - 12:22:40.0281620 PM IEXPLORE.EXE 1932 Load Image C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS Image Base: 0x715a0000, Image Size: 0xe000
    - 12:22:40.0281923 PM IEXPLORE.EXE 1932 CloseFile C:\Windows\SysWOW64\RpcRtRemote.dll SUCCESS

    Any ideas?

    Thanks for the help.

    Doug ... :-)

    Wednesday, April 16, 2014 7:46 PM
  • Did run ProcMon and there are several items that appear as Buffer Overflow on file openings.

    It's easy to be misled by red herrings when using ProcMon.  The best way to use it is to start with a hypothesis about what you might see and stick to checking that.  The reason I suggested using Process and Thread events only is that it gives you an idea of what programs are being loaded at the same time that iexplore.exe is starting and stopping.  It would be best if you have two traces to compare, one of it working normally and one of your problem case. 

    You mentioned Norton, so you would probably see some involvement from it.  If you boot in safe mode does your symptom persist?  Is Norton running then?  Unfortunately we can't use ProcMon then but tools that you can use then are things like msinfo32.exe and resmon.exe.  Consider uninstalling Norton too as a test, since it could be having the same effect.  Often merely disabling a security package does not completely remove its interfering effect.  So, uninstalling and reinstalling it might reset its hooks better anyway.

     

    Good luck



    Robert Aldwinckle
    ---

    Thursday, April 17, 2014 1:37 AM
    Answerer
  • IE 10 and IE11 will work with "Enhanced Protection Mode" in Internet Properties

    That might be a useful comparison case if there isn't a better one.  Trace that and see what the essential difference is?  (First in terms of modules being loaded and then why those happen. <w>)   Note that ProcMon allows us to have multiple windows open with saved .pml traces and they can be filtered separately.



    Robert Aldwinckle
    ---

    Thursday, April 17, 2014 1:55 AM
    Answerer
  • Hi.  Problem solved. In a related suggested solution, it was suggested to re-register the ieproxy.dll.

    I had tried this command once:

    regsvr32.exe “c:\program files\internet explorer\ieproxy.dll

    but had forgotten this was for the 64B version of IE.

    So tried the 32B command:

    regsvr32.exe “c:\program files (x86)\internet explorer\ieproxy.dll

    and it corrected the problem.

    Thanks for your assistance.

    Doug ... :-)

    • Marked as answer by Effective Saturday, April 19, 2014 5:54 PM
    Saturday, April 19, 2014 5:54 PM