Tip: Run a free scan for common Windows errors ad

re: internet explorer problem Saturday, December 4, 2004 at 7:26 am Posted by hohner (108 messages posted) A little more information: there are several links to the same page, all behave in the same manner and close the web browser. I have just installed Netscape to determine if it was an IE problem and the result is no different when using Netscape, could this be a problem with the page? I ran a full scan for viruses with my up to date software, no viruses found. On Saturday, December 4, 2004 at 5:48 am, hohner wrote: >Hi, > >When I try to access a web page, it closes itself before it even loads. I tried turning >off all the pop up blockers with sp2 but still no change in behaviour. > [Reply or follow-up to this message] re: internet explorer problem Saturday, December 4, 2004 at 1:45 pm Posted by Falcon (13489 messages posted) Let's get something to go on... Perform the following: Disable System Restore Perform an online virus scan. Download, update, and run these tools: Spybot Search & Destroy Lavasoft Adaware CWShredder Repeat as necessary until clean. If you still experience problems after doing these steps, download HijackThis and post a log to this forum. To protect against reinfection, download and use these: Javacool's SpywareBlaster Javacool's SpywareGuard Malware-blocking HOSTS file Optionally Reenable System Restore If you encounter any broken links, please inform me of them. Also note that these links direct through my web server to allow me to keep them up-to-date or post additional info. The Wereotter [Reply or follow-up to this message] re: internet explorer problem Saturday, December 4, 2004 at 11:12 pm Posted by hohner (108 messages posted) Firstly, thanks for the time and effort you've contributed to resolving my problem. Here are my results: First, I updated and ran my Norton Antivirus, full system scan and found no viruses. Then I ran an online scan using Trend Micro Housecall, again no viruses found. I then installed, updated and ran a full scan of Sypbot S&D. The following was found: DSO Exploit - Microsoft Internet Explorer security hole. (This is interesting because when I visit the MS Update it reports that there are no more available updates for my system). Spybot also found Fastclick - tracking cookie. I fixed the above problems with Spybot. Then I installed, updated and ran Adaware, 2 tracking cookies found. The last step was to run CWShredder, so I downloaded, installed, updated and ran it. Nothing found. The problem however still exists. It is only with one page in particular... www.e-lunatic.org. Every other web page does work as it should. I have been to this page previously without problems and my brother reports that he can still access it. On Saturday, December 4, 2004 at 1:45 pm, Otter wrote: >Let's get something to go on... > Perform the following: > > > Disable System Restore > > Perform an online >virus scan. > > Download, update, and run these tools: > > Spybot Search & >Destroy > Lavasoft Adaware > CWShredder > > Repeat as necessary until clean. > > > If you still experience problems after doing these steps, download >HijackThis and post >a log to >this forum. > > To protect against reinfection, download and use these: > > Javacool's SpywareBlaster > Javacool's SpywareGuard > Malware-blocking HOSTS >file > > > > Optionally Reenable >System Restore > > > > If you encounter any broken links, please inform > me of them. Also note that these links direct through my web server to allow >me to keep them > up-to-date or post additional info. > [Reply or follow-up to this message] re: internet explorer problem Saturday, December 4, 2004 at 11:20 pm Posted by hohner (108 messages posted) Here is the log from hijackthis.... Logfile of HijackThis v1.98.2 Scan saved at 5:46:46 PM, on 5/12/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\Ati2evxx.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Dynalink\Adsl\dslstat.exe C:\Program Files\Dynalink\Adsl\dslagent.exe C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe C:\WINDOWS\system32\hphmon05.exe C:\Program Files\BWMeter\BWMeter.exe C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\Program Files\Internet Explorer\iexplore.exe C:\DOCUME~1\fred\LOCALS~1\Temp\Rar$EX00.094\HijackThis.exe O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\Dynalink\Adsl\dslstat.exe icon O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\Dynalink\Adsl\dslagent.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo O4 - Startup: BWMeter.lnk = C:\Program Files\BWMeter\BWMeter.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://H:\SuperCD\IntraLaunch.CAB O17 - HKLM\System\CCS\Services\Tcpip\..\{C6343CFD-D0A0-437D-9FA1-6BE18F0A7544}: NameServer = 203.25.185.2 203.25.185.1 O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll Thanks again for your help. [Reply or follow-up to this message] re: internet explorer problem Sunday, December 5, 2004 at 4:23 am Posted by Falcon (13489 messages posted) Since I couldn't even get to the main page, this has me suspicious. Not sure whyI couldn't. Anyway, the main page just contains a frame pointing to http://www.lunatic.zabiz.com/. Does that do the same thing? If so, no wonder--the page is thoroughly broken. Is this page any better? http://www.lunatic.zabiz.com/start.html The Wereotter [Reply or follow-up to this message] re: internet explorer problem Sunday, December 5, 2004 at 4:46 am Posted by hohner (108 messages posted) I have just finished reinstalling windows, lol. I had a few other issues and decided it was time to start fresh. I installed windows xp sp2 and a few more updates and have since returned to that page without any problems. I'm not sure what was causing me grief before but it is working fine now. On Sunday, December 5, 2004 at 4:23 am, Otter wrote: >Since I couldn't even get to the main page, this has me suspicious. Not sure whyI >couldn't. Anyway, the main page just contains a frame pointing to http://www.lunatic.zabiz.com/. >Does that do the same thing? If so, no wonder--the page is thoroughly broken. Is >this page any better? http://www.lunatic.zabiz.com/start.html [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum