Case of the Internet Explorer Launch Failure

A Windows 7 environment with Internet Explorer suddenly had a widespread IE8 failure. Clicking the IE icon did absolutely nothing. First thought was an Internet Explorer Add-ons, but running Internet Explorer in No add-ins mode still demonstrated the issue.

You might also think “Repair IE8” but unfortunately the Microsoft KB article on how to perform this only has how to reset IE8 settings in Windows 7; which requires ability to start IE in the first place http://support.microsoft.com/kb/318378

What’s going on!

So of course first I turn to Process Monitor (http://live.sysinternals.com/ProcMon.exe) and filter by process iexplore.exe

Woah! So many events and so many say SUCCESS!

image

The first key to successful ProcMon’ing is good filtering …

There first thing I notice is a lot of name not found events. So I filter to include only those events. Now I see some DLL files that are “name not found”

image

However these are not an issue as they are later found in the C:\windows\system32 directory. This is important to remember when looking at DLL files and Registry keys that show as “not found”

Typically DLL files are searched for in the same directory as the executable; followed by c:\windows\system32 or C:\windows\syswow64 (for 32-bit process on x64 Windows) So usually only DLLs that do not get found in system32 or syswow64 folder are truly missing.

image

What I do notice missing though are many HKCR\CLSID registry entries. For COM based applications such as Internet Explorer or Microsoft Office if a critical HKCR\CLSID key is missing it can be seriously bad news.

So I add a filter Path begins with HKCR\CLSID. Now these class root ID keys often have many subkeys that are unnecessary – so I am only looking for ones where the root key itself is missing:

image

On a non-broken machine I check this registry key. OK ieproxy.dll looks like a critical Internet Explorer file registration is missing!

image

OK so adding this key back in and now Internet Explorer is back in business…

You’re alive!

image

But why did this key suddenly disappear in 1,000s of machines at once?

The Windows Application Log, Event ID 1034 offers a nice clue…A WebClient product got uninstalled… We also could have used the Reliability Monitor in Windows 7 to see all products/devices installed/uninstalled over a period of time…

image

Further testing proved uninstalling this product broke IE.

But it was now fixed…or so I thought…until I came across some sites failing…

Launching pop-up Windows resulted in blank page being displayed; or in some cases nothing happening at all:

image

While running ProcMon and launching this page I found a missing TypeLib key referring to Microsoft Internet Controls

image

And IServiceProvider registration key

image

So the final solution included adding the following keys back:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Interface\{6D5140C1-7436-11CE-8034-00AA006009FA}]
@=”IServiceProvider”

[HKEY_CLASSES_ROOT\Interface\{6D5140C1-7436-11CE-8034-00AA006009FA}\ProxyStubClsid32]
@=”{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}”

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}]

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1]
@=”Microsoft Internet Controls”

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1]

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\win32]
@=”C:\\Windows\\SysWOW64\\ieframe.dll”

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\win64]
@=”C:\\Windows\\System32\\ieframe.dll”

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\FLAGS]
@=”0″

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\HELPDIR]
@=”C:\\Windows\\System32″


[HKEY_CLASSES_ROOT\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}]

[HKEY_CLASSES_ROOT\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InProcServer32]
@=”C:\\Program Files\\Internet Explorer\\ieproxy.dll”
“ThreadingModel”=”Both”

This can also be achieved by running the following commands from Administrative command prompt

regsvr32 “C:\Program Files\Internet Explorer\ieproxy.dll”

regsvr32 “C:\Windows\System32\ieframe.dll”

(This last one will throw an error; don’t worry about it)

If on x64 bit you may also need to include

regsvr32 “C:\program files (X86)\internet explorer\ieproxy.dll”

regsvr32 “C:\windows\syswow64\ieproxy.dll”

…and voila pop-up Windows are back in business…

image

Moral of the story:

Uninstallers please don’t mess with HKCR keys you are not responsible for. If created captured installs of MSIs pay particular attention to these keys if they get added in your package.

In this case a captured install detected a setup.exe changing these keys. i.e. the application added PSFactoryBuffer to this existing key

[HKEY_CLASSES_ROOT\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}]
@=”PSFactoryBuffer”

Then during the uninstall rather than just removing that value; the captured package removed the entire key.

Finally even better virtualize your apps with App-V or ThinApp or your favourite virtualization technology then your app will never touch IE in the first place!

About chentiangemalc

specializes in end-user computing technologies. disclaimer 1) use at your own risk. test any solution in your environment. if you do not understand the impact/consequences of what you're doing please stop, and ask advice from somebody who does. 2) views are my own at the time of posting and do not necessarily represent my current view or the view of my employer and family members/relatives. 3) over the years Microsoft/Citrix/VMWare have given me a few free shirts, pens, paper notebooks/etc. despite these gifts i will try to remain unbiased.
This entry was posted in Internet Explorer, ProcMon and tagged . Bookmark the permalink.

3 Responses to Case of the Internet Explorer Launch Failure

  1. Sanay says:

    thank you so much for good information, I think MS should learn and provide such information instead of useless fix it downloads

  2. Dr. SteWa says:

    This is a solution I searched for for days…. Many people have the problem with white Tabs opening from links. THANKS VERY MUCH!!!

  3. vic says:

    so exactly how do i fix it? i have the same problem….
    internet explorer actually works but only freezes on windows update..

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s