Author Topic: problems with internet explorer  (Read 599 times)

Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« on: August 14, 2006, 01:57:35 PM »
Hi. Im having problems with internet explorer and msn messenger. i can't get in Email Removed using explorer, only by firefox. here i have a log of hijackthis, maybe that can help.

Logfile of HijackThis v1.99.1
Scan saved at 2:12:05 PM, on 8/14/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\User\My Documents\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Service Pack 3 Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/...ad/tgctlins.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://pablokobak.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab34246.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://zone.msn.com/bingame/dim2/default/popcaploader_v6.cab
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« Reply #1 on: August 14, 2006, 10:10:55 PM »
can someone help me? please! i really need it.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
problems with internet explorer
« Reply #2 on: August 14, 2006, 10:43:50 PM »
Do you have anything disabled on startup with Msconfig?

Can you do the following

==Download and install Windows CleanUp! 4.5.2
Don't run a scan yet

CleanUp! attempts to delete files from various temporary directories (including download directories/caches),
as well as emptying the Recycle Bins.
If you make a habit of saving files that you wish to keep in any of these places,  they will be deleted when CleanUp! is run.
Please move them too a different location before we run this tool if the above is true
Note: It is generally considered poor practice to use temporary folders or the Recycle Bin to store files you intend to keep.

Download and save WinPFind.zip
UNZIP the contents to your desktop
Don't run it yet

Do a "System scan only" with Hijackthis and put a check next to these entries:

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://zone.msn.com/bingame/dim2/default/popcaploader_v6.cab


After you have ticked the above entries, close All other open windows
Including this one
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis

Reboot your computer into Safe Mode. To boot into Safe Mode, please restart your computer. Tap F8 before Windows loads. Select Safe Mode on the screen that appears.

Open Internet options via Control Panel
Under the General tab>>Delete Cookies>>Delete Files
Also clean offline contents at the prompt

Under the Content tab>>Clear SSL Slate

==Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):

    * Empty Recycle Bins
    * Delete Cookies
    * Delete Prefetch files
    * Cleanup! All Users

Click OK
Press the CleanUp! button to start the program.
When it's done>>Click Close
DECLINE to Log off or Restart the computer
NOTE: The first time you run CleanUp! it may prompt to run in Demonstration mode
Deny this, we want to run the actual cleanup!!
Run this twice please

Open the WinPFind folder you extracted to desktop
Double click on WinPFind.exe

Click START SCAN
Let this finish, a log will open so you will know it's done
Close out after

Reboot back to Normal mode

Post the results of the WindPFind.txt located in the WinPFind folder and a fresh hijackthis log
« Last Edit: August 14, 2006, 10:44:28 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« Reply #3 on: August 15, 2006, 02:33:15 AM »
first let me thank u for your help.

here are the results from the scan.

»»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Product Name: Microsoft Windows XP    Current Build: Service Pack 2    Current Build Number: 2600
Internet Explorer Version: 6.0.2900.2180

»»»»»»»»»»»»»»»»» Checking Selected Standard Folders »»»»»»»»»»»»»»»»»»»»

Checking %SystemDrive% folder...

Checking %ProgramFilesDir% folder...

Checking %WinDir% folder...
aspack               10/16/2003 11:45:56 AM      180736     C:\WINDOWS\Lunarmedia Clock B..scr
UPX!                 1/12/2006 11:51:04 PM       97792      C:\WINDOWS\RootkitRevealer.exe
UPX!                 1/12/2006 11:38:26 PM       126464     C:\WINDOWS\upx.exe

Checking %System% folder...
aspack               3/18/2005 12:19:58 PM       2337488    C:\WINDOWS\SYSTEM32\d3dx9_25.dll
aspack               5/26/2005 10:34:52 AM       2297552    C:\WINDOWS\SYSTEM32\d3dx9_26.dll
aspack               7/22/2005 2:59:04 PM        2319568    C:\WINDOWS\SYSTEM32\d3dx9_27.dll
aspack               12/5/2005 1:09:18 PM        2323664    C:\WINDOWS\SYSTEM32\d3dx9_28.dll
aspack               2/3/2006 3:43:16 AM         2332368    C:\WINDOWS\SYSTEM32\d3dx9_29.dll
aspack               3/31/2006 7:40:58 AM        2388176    C:\WINDOWS\SYSTEM32\d3dx9_30.dll
PEC2                 1/12/2006 11:44:04 PM       41397      C:\WINDOWS\SYSTEM32\dfrg.msc
FSG!                 11/11/2003 11:00:22 AM      236544     C:\WINDOWS\SYSTEM32\DivXdec.ax
PTech                5/17/2006 6:23:38 AM        579888     C:\WINDOWS\SYSTEM32\LegitCheckControl.DLL
UPX!                 5/15/2004 4:10:42 PM        75264      C:\WINDOWS\SYSTEM32\MACDec.dll
UPX!                 6/19/2004 6:28:44 PM        177152     C:\WINDOWS\SYSTEM32\MonkeySource.ax
PECompact2           1/12/2006 11:54:54 PM       2368864    C:\WINDOWS\SYSTEM32\MRT.exe
aspack               1/12/2006 11:54:54 PM       2368864    C:\WINDOWS\SYSTEM32\MRT.exe
UPX!                 1/12/2006 11:56:26 PM       62054      C:\WINDOWS\SYSTEM32\msnsc.exe
UPX!                 1/12/2006 11:35:34 PM       55296      C:\WINDOWS\SYSTEM32\MSVirtualCD.cpl
aspack               1/12/2006 11:43:50 PM       708096     C:\WINDOWS\SYSTEM32\ntdll.dll
Umonitor             1/12/2006 11:51:10 PM       657920     C:\WINDOWS\SYSTEM32\rasdlg.dll
UPX!                 1/12/2006 11:46:34 PM       55296      C:\WINDOWS\SYSTEM32\TweakUI.cpl
UPX!                 1/12/2006 11:39:18 PM       12288      C:\WINDOWS\SYSTEM32\VCdControlTool.exe
UPX!                 1/12/2006 11:58:20 PM       301056     C:\WINDOWS\SYSTEM32\VSFilter.dll
winsync              1/12/2006 11:57:54 PM       1309184    C:\WINDOWS\SYSTEM32\wbdbase.deu

Checking %System%\Drivers folder and sub-folders...

Items found in C:\WINDOWS\SYSTEM32\drivers\etc\hosts


Checking the Windows folder and sub-folders for system and hidden files within the last 60 days...
                     8/14/2006 1:08:30 PM      S 2048       C:\WINDOWS\bootstat.dat
                     8/14/2006 1:15:26 PM     H  54156      C:\WINDOWS\QTFont.qfn
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\WindowsShell.Manifest
                     8/5/2006 12:03:20 PM    RHS 227        C:\WINDOWS\assembly\Desktop.ini
                     8/5/2006 12:03:20 PM    RH  0          C:\WINDOWS\assembly\PublisherPolicy.tme
                     8/5/2006 12:03:20 PM    RH  0          C:\WINDOWS\assembly\pubpol1.dat
                     8/5/2006 1:15:06 PM     RH  0          C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index1b.dat
                     8/5/2006 1:15:08 PM     RH  0          C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index1c.dat
                     8/12/2006 10:56:58 PM     S 64         C:\WINDOWS\CSC\00000001
                     8/12/2006 10:23:44 PM     S 64         C:\WINDOWS\CSC\00000002
                     7/26/2006 6:18:50 PM     H  65         C:\WINDOWS\Downloaded Program Files\desktop.ini
                     7/26/2006 6:19:44 PM     HS 67         C:\WINDOWS\Fonts\desktop.ini
                     8/5/2006 12:49:28 PM     H  0          C:\WINDOWS\inf\oem579.inf
                     7/26/2006 6:18:50 PM     H  65         C:\WINDOWS\Offline Web Pages\desktop.ini
                     7/26/2006 6:19:10 PM    RHS 727        C:\WINDOWS\pchealth\helpctr\PackageStore\package_1.cab
                     7/26/2006 6:19:10 PM    RHS 19854      C:\WINDOWS\pchealth\helpctr\PackageStore\package_2.cab
                     7/26/2006 6:19:10 PM    RHS 244933     C:\WINDOWS\pchealth\helpctr\PackageStore\package_3.cab
                     7/26/2006 6:21:00 PM     H  262144     C:\WINDOWS\repair\ntuser.dat
                     8/7/2006 10:54:54 AM    RHS 80         C:\WINDOWS\system32\55E92CEF8F.dll
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\system32\cdplayer.exe.manifest
                     7/26/2006 6:18:50 PM    RH  488        C:\WINDOWS\system32\logonui.exe.manifest
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\system32\ncpa.cpl.manifest
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\system32\nwc.cpl.manifest
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\system32\sapi.cpl.manifest
                     7/26/2006 6:18:50 PM    RH  488        C:\WINDOWS\system32\WindowsLogon.manifest
                     7/26/2006 6:18:44 PM    RH  749        C:\WINDOWS\system32\wuaucpl.cpl.manifest
                     7/7/2006 3:03:30 AM       S 10690      C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914440.cat
                     7/28/2006 5:23:10 AM      S 8225       C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\xact2_3_x86.CAT
                     7/28/2006 5:23:06 AM      S 7927       C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\xinput1_2_x86.CAT
                     8/14/2006 1:35:12 PM     H  1024       C:\WINDOWS\system32\config\default.LOG
                     8/6/2006 8:26:10 PM      H  0          C:\WINDOWS\system32\config\default_TU_23205.LOG
                     8/14/2006 1:08:32 PM     H  1024       C:\WINDOWS\system32\config\SAM.LOG
                     8/6/2006 8:26:12 PM      H  0          C:\WINDOWS\system32\config\SAM_TU_57276.LOG
                     8/15/2006 12:10:16 AM    H  1024       C:\WINDOWS\system32\config\SECURITY.LOG
                     8/6/2006 8:26:10 PM      H  0          C:\WINDOWS\system32\config\SECURITY_TU_62694.LOG
                     8/15/2006 3:30:50 AM     H  20480      C:\WINDOWS\system32\config\software.LOG
                     8/6/2006 8:26:10 PM      H  0          C:\WINDOWS\system32\config\software_TU_86488.LOG
                     8/15/2006 3:23:44 AM     H  1024       C:\WINDOWS\system32\config\system.LOG
                     8/6/2006 8:26:10 PM      H  0          C:\WINDOWS\system32\config\system_TU_11860.LOG
                     7/26/2006 7:10:46 PM     H  1024       C:\WINDOWS\system32\config\TempKey.LOG
                     7/26/2006 7:10:46 PM     H  1024       C:\WINDOWS\system32\config\userdiff.LOG
                     8/12/2006 9:08:32 PM     H  1024       C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
                     7/26/2006 7:13:28 PM     HS 62         C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini
                     8/12/2006 8:23:48 PM      S 341        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\303572DF538EDD8B1D606185F1D559B8
                     8/12/2006 8:23:50 PM      S 413        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165
                     8/5/2006 12:18:56 PM      S 574        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5
                     7/26/2006 6:20:26 PM      S 558        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735
                     8/12/2006 8:23:48 PM      S 126        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\303572DF538EDD8B1D606185F1D559B8
                     8/12/2006 8:23:50 PM      S 98         C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165
                     8/5/2006 12:18:56 PM      S 136        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5
                     7/26/2006 6:20:26 PM      S 144        C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735
                     7/26/2006 7:13:28 PM     HS 62         C:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini
                     7/26/2006 6:21:58 PM     HS 113        C:\WINDOWS\system32\config\systemprofile\Local Settings\History\desktop.ini
                     7/26/2006 6:21:58 PM     HS 113        C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\1FSTB7AA\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\1W54PZVW\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CCUFCWOF\desktop.ini
                     7/26/2006 6:21:58 PM     HS 67         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OEHM83OS\desktop.ini
                     7/26/2006 6:18:52 PM     HS 181        C:\WINDOWS\system32\config\systemprofile\SendTo\desktop.ini
                     7/26/2006 7:13:28 PM     HS 62         C:\WINDOWS\system32\config\systemprofile\Start Menu\desktop.ini
                     7/26/2006 6:20:00 PM     HS 148        C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\desktop.ini
                     7/26/2006 6:20:00 PM     HS 421        C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini
                     7/26/2006 6:20:00 PM     HS 348        C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini
                     7/26/2006 6:20:00 PM     HS 84         C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini
                     7/26/2006 6:20:00 PM     HS 84         C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini
                     7/26/2006 6:22:00 PM     HS 388        C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\7f44d3a1-332b-4b32-ad7e-acbc477e092f
                     7/26/2006 6:22:00 PM     HS 24         C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Preferred
                     8/14/2006 1:08:32 PM     H  6          C:\WINDOWS\Tasks\SA.DAT

Checking for CPL files...
                               1/12/2006 11:54:32 PM       180224     C:\WINDOWS\SYSTEM32\ac3filter.cpl
Microsoft Corporation          1/12/2006 11:47:28 PM       68608      C:\WINDOWS\SYSTEM32\access.cpl
Microsoft Corporation          1/12/2006 11:44:02 PM       549888     C:\WINDOWS\SYSTEM32\appwiz.cpl
Microsoft Corporation          1/12/2006 11:44:08 PM       110592     C:\WINDOWS\SYSTEM32\bthprops.cpl
Logitech Inc.                  6/8/2005 10:13:28 AM        282624     C:\WINDOWS\SYSTEM32\camcpl.cpl
Microsoft Corporation          1/12/2006 11:39:10 PM       135168     C:\WINDOWS\SYSTEM32\desk.cpl
                               1/12/2006 11:55:42 PM       4608       C:\WINDOWS\SYSTEM32\DirectVobSub.cpl
Microsoft Corporation          1/12/2006 11:46:52 PM       80896      C:\WINDOWS\SYSTEM32\firewall.cpl
Microsoft Corporation          1/12/2006 11:54:16 PM       155136     C:\WINDOWS\SYSTEM32\hdwwiz.cpl
Microsoft Corporation          1/12/2006 11:55:22 PM       358400     C:\WINDOWS\SYSTEM32\inetcpl.cpl
Microsoft Corporation          1/12/2006 11:42:40 PM       129536     C:\WINDOWS\SYSTEM32\intl.cpl
Microsoft Corporation          1/12/2006 11:53:08 PM       380416     C:\WINDOWS\SYSTEM32\irprops.cpl
Microsoft Corporation          1/12/2006 11:40:42 PM       68608      C:\WINDOWS\SYSTEM32\joy.cpl
Sun Microsystems, Inc.         4/12/2005 10:48:52 PM       49265      C:\WINDOWS\SYSTEM32\jpicpl32.cpl
Microsoft Corporation          1/12/2006 11:54:08 PM       161792     C:\WINDOWS\SYSTEM32\main.cpl
Microsoft Corporation          1/12/2006 11:49:22 PM       618496     C:\WINDOWS\SYSTEM32\mmsys.cpl
                               1/12/2006 11:35:34 PM       55296      C:\WINDOWS\SYSTEM32\MSVirtualCD.cpl
Microsoft Corporation          1/12/2006 11:52:56 PM       35840      C:\WINDOWS\SYSTEM32\ncpa.cpl
Microsoft Corporation          1/12/2006 11:36:10 PM       25600      C:\WINDOWS\SYSTEM32\netsetup.cpl
Microsoft Corporation          1/12/2006 11:51:46 PM       257024     C:\WINDOWS\SYSTEM32\nusrmgr.cpl
Microsoft Corporation          1/12/2006 11:51:46 PM       36864      C:\WINDOWS\SYSTEM32\nwc.cpl
Microsoft Corporation          1/12/2006 11:35:40 PM       32768      C:\WINDOWS\SYSTEM32\odbccp32.cpl
Microsoft Corporation          1/12/2006 11:46:02 PM       114688     C:\WINDOWS\SYSTEM32\powercfg.cpl
Microsoft Corporation          1/12/2006 11:38:32 PM       298496     C:\WINDOWS\SYSTEM32\sysdm.cpl
Microsoft Corporation          1/12/2006 11:40:44 PM       28160      C:\WINDOWS\SYSTEM32\telephon.cpl
Microsoft Corporation          1/12/2006 11:36:50 PM       94208      C:\WINDOWS\SYSTEM32\timedate.cpl
                               1/12/2006 11:46:34 PM       55296      C:\WINDOWS\SYSTEM32\TweakUI.cpl
Microsoft Corporation          1/12/2006 11:48:10 PM       148480     C:\WINDOWS\SYSTEM32\wscui.cpl
Microsoft Corporation          1/12/2006 11:47:30 PM       174360     C:\WINDOWS\SYSTEM32\wuaucpl.cpl

»»»»»»»»»»»»»»»»» Checking Selected Startup Folders »»»»»»»»»»»»»»»»»»»»»

Checking files in %ALLUSERSPROFILE%\Startup folder...
                     7/26/2006 6:20:00 PM     HS 84         C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini

Checking files in %ALLUSERSPROFILE%\Application Data folder...
                     7/26/2006 7:13:28 PM     HS 62         C:\Documents and Settings\All Users\Application Data\desktop.ini
                     7/28/2006 10:01:56 AM       4          C:\Documents and Settings\All Users\Application Data\DragToDiscUserNameD.txt

Checking files in %USERPROFILE%\Startup folder...
                     7/26/2006 6:20:00 PM     HS 84         C:\Documents and Settings\User\Start Menu\Programs\Startup\desktop.ini

Checking files in %USERPROFILE%\Application Data folder...
                     7/26/2006 7:13:28 PM     HS 62         C:\Documents and Settings\User\Application Data\desktop.ini

»»»»»»»»»»»»»»»»» Checking Selected Registry Keys »»»»»»»»»»»»»»»»»»»»»»»

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
   SV1    =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers]
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\CopyMoveTo
   {51131DA7-1D24-40e5-AE07-5E3750F5DE3C}    = C:\WINDOWS\system32\CopyToSendTo.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Offline Files
   {750fdf0e-2a26-11d1-a3ea-080036587f03}    = %SystemRoot%\System32\cscui.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With
   {09799AFB-AD67-11d1-ABCD-00C04FC30936}    = %SystemRoot%\system32\SHELL32.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With EncryptionMenu
   {A470F8CF-A1E8-4f65-8335-227475AA5C46}    = %SystemRoot%\system32\SHELL32.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\TuneUp Shredder
   {00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}    = "C:\Program Files\TuneUp Utilities 2006\sdshelex.dll"
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\UnlockerShellExtension
   {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}    = C:\Program Files\Unlocker\UnlockerCOM.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\VirusScan
   {cda2863e-2497-4c49-9b89-06840e070a87}    = C:\Program Files\Network Associates\VirusScan\shext.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinRAR
   {B41DB860-8EE4-11D2-9906-E49FADC173CA}    = C:\Program Files\WinRAR\rarext.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
   Start Menu Pin    = %SystemRoot%\system32\SHELL32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\CopyMoveTo
   {51131DA7-1D24-40e5-AE07-5E3750F5DE3C}    = C:\WINDOWS\system32\CopyToSendTo.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\UnlockerShellExtension
   {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}    = C:\Program Files\Unlocker\UnlockerCOM.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\VirusScan
   {cda2863e-2497-4c49-9b89-06840e070a87}    = C:\Program Files\Network Associates\VirusScan\shext.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinRAR
   {B41DB860-8EE4-11D2-9906-E49FADC173CA}    = C:\Program Files\WinRAR\rarext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\CopyMoveTo
   {51131DA7-1D24-40e5-AE07-5E3750F5DE3C}    = C:\WINDOWS\system32\CopyToSendTo.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\EncryptionMenu
   {A470F8CF-A1E8-4f65-8335-227475AA5C46}    = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Offline Files
   {750fdf0e-2a26-11d1-a3ea-080036587f03}    = %SystemRoot%\System32\cscui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Sharing
   {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}    = ntshrui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\TuneUp Shredder
   {00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}    = "C:\Program Files\TuneUp Utilities 2006\sdshelex.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\UnlockerShellExtension
   {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}    = C:\Program Files\Unlocker\UnlockerCOM.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\VirusScan
   {cda2863e-2497-4c49-9b89-06840e070a87}    = C:\Program Files\Network Associates\VirusScan\shext.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinRAR
   {B41DB860-8EE4-11D2-9906-E49FADC173CA}    = C:\Program Files\WinRAR\rarext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{0D2E74C4-3C34-11d2-A27E-00C04FC30871}
    = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F01-7B1C-11d1-838f-0000F80461CF}
    = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F02-7B1C-11d1-838f-0000F80461CF}
    = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{66742402-F9B9-11D1-A202-0000F81FEDEE}
    = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627}
    = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
   AcroIEHlprObj Class = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
   &Tip of the Day = %SystemRoot%\system32\shdocvw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
   ButtonText    = Research   :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}
   MenuText    = @xpsp3res.dll,-20001   :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}
   ButtonText    = Yahoo! Messenger   : C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}
   ButtonText    = @C:\Program Files\Messenger\Msgslang.dll,-61144   : C:\Program Files\Messenger\msmsgs.exe

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
   {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address   : %SystemRoot%\system32\browseui.dll
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
   {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address   : %SystemRoot%\system32\browseui.dll
   {0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links   : %SystemRoot%\system32\SHELL32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   ShStatEXE   "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
   McAfeeUpdaterUI   "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
   Network Associates Error Reporting Service   "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
   LVCOMSX   C:\WINDOWS\system32\LVCOMSX.EXE
   KernelFaultCheck   %systemroot%\system32\dumprep 0 -k

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
   IMAIL   Installed = 1
   MAPI   Installed = 1
   MSFS   Installed = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   MSMSGS   "C:\Program Files\Messenger\Msmsgs.exe" /background

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KernelFaultCheck
   key   SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   item   dumprep 0 -k
   hkey   HKLM
   command   %systemroot%\system32\dumprep 0 -k
   inimapping   0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\state
   system.ini   0
   win.ini   0
   bootini   0
   services   0
   startup   2


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
   NoRemoteRecursiveEvents   1


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum
   {BDEADF00-C265-11D0-BCED-00A0C90AB50F} = C:\Program Files\Common Files\Microsoft Shared\Web Folders\msonsext.dll
   {6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} =
   {0DF44EAA-FF21-4412-828E-260A8728E7F1} =


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ratings

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
   dontdisplaylastusername   0
   legalnoticecaption   
   legalnoticetext   
   shutdownwithoutlogon   1
   undockwithoutlogon   1


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
   NoDriveTypeAutoRun   145
   NoInternetIcon   0
   ClearRecentDocsOnExit   1
   NoLowDiskSpaceChecks   1
   NoSaveSettings   0


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
   PostBootReminder                  {7849596a-48ea-486e-8937-a2a3009f31a9} = %SystemRoot%\system32\SHELL32.dll
   CDBurn                            {fbeb8a05-beee-4442-804e-409d6c4515e9} = %SystemRoot%\system32\SHELL32.dll
   WebCheck                          {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = %SystemRoot%\system32\webcheck.dll
   SysTray                           {35CEC8A3-2BE6-11D2-8773-92E220524153} = C:\WINDOWS\system32\stobject.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
   UserInit   = C:\WINDOWS\system32\userinit.exe,
   Shell      = Explorer.exe
   System      =

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain
    = crypt32.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet
    = cryptnet.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll
    = cscdll.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp
    = wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule
    = wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy
    = sclgntfy.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn
    = WlNotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv
    = wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon
    = wlnotify.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path
   Debugger = ntsd -d

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
   AppInit_DLLs   


»»»»»»»»»»»»»»»»»»»»»»»» Scan Complete »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
WinPFind v1.4.1   - Log file written to "WinPFind.Txt" in the WinPFind folder.
Scan completed on 8/15/2006 3:30:54 AM

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
problems with internet explorer
« Reply #4 on: August 15, 2006, 07:02:22 PM »
How's everything running?
Can you let me know the following
Quote
i can't get in Email Removed using explorer
I can't, on this end, know what that email server is
Can you just let me know the name of the email server without the extension at the end

Eg...
Hot Mail or MSN

Also, although these files may be safe can we check them out please

Go to either of these links
http://www.virustotal.com/flash/index_en.html
OR
http://virusscan.jotti.org/

Use the browse button and navigate to the file on your harddrive
C:\WINDOWS\upx.exe <-this file
Right click on the file and choose Select
Then use the Submit button
Let it finish scanning
Could you post back the results of the scan back here please
Also, This one may be due to running rootkitrevealer
Can you scan it also, just to be sure
C:\WINDOWS\RootkitRevealer.exe <-this file
« Last Edit: August 15, 2006, 07:05:27 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« Reply #5 on: August 15, 2006, 09:47:43 PM »
File:      upx.exe
Status:    
MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)
MD5    9857f7401eff1ddfba4123ba9d5ee08a
Packers detected:    
UPX
Scanner results
AntiVir    
Found nothing
ArcaVir    
Found nothing
Avast    
Found nothing
AVG Antivirus    
Found nothing
BitDefender    
Found nothing
ClamAV    
Found nothing
Dr.Web    
Found nothing
F-Prot Antivirus    
Found nothing
Fortinet    
Found nothing
Kaspersky Anti-Virus    
Found nothing
NOD32    
Found nothing
Norman Virus Control    
Found nothing
UNA    
Found nothing
VirusBuster    
Found nothing
VBA32    
Found nothing


File:      RootkitRevealer.exe
Status:    
MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)
MD5    053dc7bb3fae025e853d1f0f72763874
Packers detected:    
UPX
Scanner results
AntiVir    
Found nothing
ArcaVir    
Found nothing
Avast    
Found nothing
AVG Antivirus    
Found nothing
BitDefender    
Found nothing
ClamAV    
Found nothing
Dr.Web    
Found nothing
F-Prot Antivirus    
Found nothing
Fortinet    
Found nothing
Kaspersky Anti-Virus    
Found nothing
NOD32    
Found nothing
Norman Virus Control    
Found nothing
UNA    
Found nothing
VirusBuster    
Found nothing
VBA32    
Found nothing

ok. there are the results from the scan. and what i was saying is that i can't get in my messesnger or anything that has to do with hot mail. the only way i can check my mail is by fire fox.
 wen i try to get in with explorer i get page can not be display

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
problems with internet explorer
« Reply #6 on: August 15, 2006, 11:51:32 PM »
Try any of the following and see if it helps

I. Check for firewall or filtering software interference
Look for an icon in the notification area on the right side of the taskbar (near the clock) for firewall or filtering software. If there is one, right click on it to check its properties.

Next step, some may be a repeat, but do all of the following:
Recheck Internet Explorer settings:

1. Click ‘Start’, ‘Run’ then type: iexplore
to open IE
2. Click ‘Tools’, ‘Internet Options’
3. Under General, click:

a. ‘Delete Cookies’, ‘OK’
b. ‘Delete Files’, ‘Delete all offline contents’, ‘OK’
c. ‘Clear History’, ‘Yes’
d. ‘Settings’, Adjust the amount to 300 MB, ‘OK’
I have mine to 70mb with no problems

4. Under Security, click ‘Internet’, ‘Default Level’, then ‘Apply’
5. Click ‘Privacy’, ‘Default’, then Apply
6. Under Content, click ‘AutoComplete’, ‘Clear Forms’, ‘Clear Passwords’ then ‘OK’
7. Under Connections, do the following: (skip these if you are using DSL)

a. Select the connection in the Dial-up and Virtual Private Network settings
b. Click ‘Settings’, uncheck all of the checkboxes, ‘OK’
c. Click ‘LAN Settings’, uncheck all of the checkboxes, ‘OK’

8. Under Advanced, click ‘Restore Default’, ‘Apply’, then ‘OK’

Close IE and then reopen it
Is that any help?

If not
Try
9.a. Click Start.
   b. Click Run.
   c. Type regsvr32 softpub.dll
   d. Click OK.  A pop-up should display with the message 'Dll Register Server in softpub.dll Succeeded.'
   e. Click 'OK'.
« Last Edit: August 16, 2006, 12:07:37 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« Reply #7 on: August 16, 2006, 01:12:23 AM »
no, nothing seems to work, i tried everything and got no results. i think its something wrong with my explorer....

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
problems with internet explorer
« Reply #8 on: August 16, 2006, 06:56:55 AM »
Try the following, recommended by Hotmail

On the Tools menu in Internet Explorer, click Internet Options.
On the Security tab, click Trusted sites.
Click Sites, and then clear the Require server verification check box.
In the text box, type *.hotmail.com
Then click Add. Do the same for *.passport.com and for *.msn.com.
Click OK
Then click Default Level.
On the Security tab>>Restricted sites zone.
Click Default level
On the Privacy tab, click Sites. In the empty text box, type hotmail.com, and then click Allow. Do the same for passport.com and for msn.com.
Click OK
Then click Default if the button is available

Is that any help?
Do you have any trouble reaching Windows updates with IE?
http://update.microsoft.com/windowsupdate/...t.aspx?ln=en-us
« Last Edit: August 16, 2006, 07:11:08 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline lissa

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
problems with internet explorer
« Reply #9 on: August 16, 2006, 01:10:12 PM »
did the steps, still getting the same thing, page cannot be display. but this time i did the diagnose fot connections problems and this is the result:

Windows cannot connect to the internet using HTTP, HTTPS, or FTP. This is problably caused by firewall settings on the computer.

Check the firewall settingd for the HTTP port (80), HTTPS port (443) and FTP por (21).


Could that have something to do with my problem? i also notice that my Cipher Strent is 0-bit, isn't supposed to be 124? or something like that...

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
problems with internet explorer
« Reply #10 on: August 19, 2006, 08:54:49 AM »
Sorry for the delay
I recommend you repair your OS installation
Follow the link to run the repair, you will have to have your XP CD handy
http://www.michaelstevenstech.com/XPrepairinstall.htm
Scroll down to XP Repair install

Immediately after the repair, visit Windows updates to reapply Service pack 2

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here