Solved EventViewer Log Question - Event1904 HHCTRL

[Golden]

Hi,

I was browsing my event Viewer recently and come across several tens of items whose source is listed as Event1904 HHCTRL, under the Windows Logs > Application area. This is the information from the log:

Information 4/04/2011 9:57:28 PM HHCTRL 1904 None "The description for Event ID 1904 from source HHCTRL cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event: 
[URL="http://www.jbhifi.com.au/computers/storage/"]Computer Storage - JB Hi-Fi[/URL]
[URL="http://go.microsoft.com/fwlink?LinkID=45840"]MS05-026: A vulnerability in HTML Help could allow remote code execution[/URL]

The link to JB Hi-Fi is for an online store where I was browsing for Windows 7 updates. This is a legitimate and reputable store. The Microsoft link points to an article titled:
MS05-026: A vulnerability in HTML Help could allow remote code execution

MS05-026: A vulnerability in HTML Help could allow remote code execution

I'm reasonably confident my system is safe:

- NAT router
- Windows Firewall
- Windows 7 always up-to-date
- MSE resident & updated (quick scans daily, full scans weekly)
- MBAM resident & updated hourly (quick scan every boot-up, full scan weekly)
- WoT used during web browsing
- IE8 Protected Mode = ON
- UAC = ON

I suspect this is an innocent? cookie lurking in my system from my browsing, or is there anything I need to be concerned about?

Regards,
Golden

 

[Jacee]

This is a fairly old article about the event ID MS05-026: A vulnerability in HTML Help could allow remote code execution

Also http://www.pcreview.co.uk/forums/event-id-1904-and-locking-up-computer-t2358037.html

 

[Golden]

Mmm thanks Jacee. I'm no wiser though........it seems like an innocous issue. Do you agree?

Regards,
Golden

 

[cluberti]

The error simply states that the web page in question likely hosts the HTML help control object, and has been blocked from performing certain functions due to the HTML help lockdown as per MS05-026. Technically, it's innocuous, but it does mean that site may be attempting to leverage functionality in that control that Microsoft disabled 6 years ago...

 

[Golden]

Cheers cluberti