web pages not fully functioning :-(

[jaycabs]

hi every one .

im not sure if this is the right section to put this but recently about a week ago i opened an email not realising my antivirus software was turned off and when i opened it suddenly tabs repeatedly kept opening with out me having any control of my computer besideds manualy turning it off .

 

ever since then many web pages dont seem to fully work .

 

example 1 : a web page were i caqn get screen savers for my mobile , it askes you to vote on a star system for the picture before you can have it but since this problem the you press on a choice of stars but it gets stuck in motion so doesnt complete rigistering what you chose so no screen save to be had :-( .

 

example 2 : when i use ebay , on the left hand side were the options are you normaly get a bit saying " choose more " for a larger selection of options but now since theproblem it just opens up a new tap of the whole same page and doesnt bring up the small tab overlaying the main page with the bigger options .

 

example 3 : my yahoo mail , i use to run yahoo mail beta ( the newest version ) but ever since that problem it loads the page but suddenly it goes to a fault problem page were if i choose to retry it lets me dfo that but as i start to scroll down my messages it gets stuck in motion again saying " loading" but never finishies so agaon it wont let me read my mail there so if i choose to read though yahoo mail classic then it works to read my mail.

 

yahoo gave me some small advice going through "tools" then "nternet options" then in "genral" then to " delete browser history " .

 

also they asked me to go into "security" then " custom level " then " run active x controls and plug-ins " and also " script active x controls marked for safe scripting " but none of that helped.

 

i was running windows internet explorer 7 but just for a try to see if it changed any thing i went to the newer windows internet explorer 8 beta but they didnt change any thing .

 

im using also kaspersky anti-virus software and using registry fixers too but they are not finding any thing that stops this problem .

 

im not sure what other info you might need but i hope this is just a simple problem that some one might be able to put some light on so it can be delt with as its very frustrating .

 

thank you for any help if any one can solve this ?

[Seth]

Welcome to Free PC Jay.

 

The first thing I would do is remove IE8 and then reset IE7:

 

1.Open Internet Explorer 7.

2.Click Tools, and then click Internet Options.

3.Click the Advanced tab.

4.Under Reset Internet Explorer Settings, click Reset.

 

If that doesn't work, other options would be to see if the problem occurs in Safe Mode With Networking, and/or trying a different browser such as Firefox. We may also have to give you the instructions for our malware removal procedure.

[jaycabs]

Welcome to Free PC Jay.

 

The first thing I would do is remove IE8 and then reset IE7:

 

1.Open Internet Explorer 7.

2.Click Tools, and then click Internet Options.

3.Click the Advanced tab.

4.Under Reset Internet Explorer Settings, click Reset.

 

If that doesn't work, other options would be to see if the problem occurs in Safe Mode With Networking, and/or trying a different browser such as Firefox. We may also have to give you the instructions for our malware removal procedure.

 

 

ok cheers i will try that , thanks

[Guest Wolfeymole]

Get back to us when you have done so as you may have malware infections.

[jaycabs]

i keep trying to re-install windows internet explorer 7 but it start then stops shortly after saying " setup cannot continue because a more recent version of internet explorer has been installed on this computer "

 

never had that come up before ?

[Guest Wolfeymole]

Have you read this from Microsoft?

 

How to reinstall or repair Internet Explorer in Windows XP

[jaycabs]

i managed to get internet explorer 7 back and running again but about the advanced part and reseting , didnt work :confused: .

 

ive also noticed since this problem too that some sites that keep usernames and passwords so to make quicker access evwn when u tick " remember me " , they seem to not remember too .

 

shouldnt kaspersky sort out any malware issues ?

 

about a month ago i use to use windows live one care but found out kaspersky picked up on more things so thats why i changed to them.

 

 

by the way , thank you for such quick responding too :)

Edited November 9, 2008 by jaycabs

[Guest Wolfeymole]

We try to respond as quickly as possible Jay, time is money.

 

I might be mistaken but it sounds to me like you have been saddled with some malware crap.

 

Run the tools listed belows mate and get back to us.

 

Your computer could be infected with Malware.

 

• Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
  It is a combination of the words malicious and software.
  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.
  

 

• Required Cleanup Steps
  
  1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
     
  2. Run a Temporary file and cache cleaner (ATF)
     
  3. Run 2 Anti-Malware scanners (Listed Below)
     
  4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
     
  5. Clear out old System Restore points
     
  6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.
     

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

 

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

 

 

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif

 

____________________________________________

STEP 1

• Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
  
  
  1. Run Spybot-S&D in Advanced Mode.
     
     
  2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
     
     
  3. On the left hand side, Click on Tools
     
     
  4. Then click on the Resident Icon in the List
     
     
  5. Uncheck "Resident TeaTimer" and OK any prompts.
     
     
  6. Restart your computer.
     
     

__________________________________________________

STEP 2

• Follow these instructions carefully.
  
  
• Download ATF-Cleaner from
  Snapfiles.com
  to remove un-needed temporary files from your computer that may contain malware.
  
  
• You can also download it from
  Majorgeeks.com
  
  
• When you run ATF-Cleaner, check the items as shown below for Main.
  
  
• For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  
  
• NOTE:
  If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  
  
• Then click on "Empty Selected".
  
  

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif

.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif

__________________________________________________

STEP 3

• Install and run the free version (not the Professional version) of SUPERAntiSpyware from
  SUPERAntiSpyware.com
  
  
  • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    
    
  • You do not have to send them your e-mail address, just click next.
    
    
  • You can leave the automated check for updates on.
    
    
  • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    
    
  • DO NOT
    allow SUPERAntiSpyware to protect your Home Page settings.
    
    
  • On the
    Top Left
    select the
    Scan your computer
    button.
    
    
  • Make sure there is a CHECK MARK on all
    Fixed Drives
    .
    
    
  • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.
    
    

__________________________________________________

STEP 4

• Install and run
  Malwarebytes' Anti-Malware
  from
  Malwarebytes - (direct download)
  
  
  • Accept all defaults for the installer
    
    
  • Allow the program to update the definitions
    
    
  • Click on the
    Quick Scan
    and click Next.
    
    
  • If any items are found allow it to clean them and then Reboot your computer.
    
    

__________________________________________________

STEP 5

• Run an online scan with ESET from
  Free Virus Scan: Use ESET's Online Antivirus Scanner
  
  
  • You
    must
    use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
    
    
  • If your computer is running Window's Vista, then you
    must first
    start Internet Explorer as an Administrator. To do so, right-click on the
    Internet Explorer
    icon in the Start Menu and select "
    Run as administrator
    " from the popup context menu.
    
    
   
  • Accept the terms and click "Start".
    
    
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
    
    
  • Click "Start" to begin the scan.
    
    
  • When completed restart your computer
    
    

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to Extreme Tech Support - Free PC Help and tell us how the computer seems to be operating.

At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

 

If required this is the download link for TrendMicro™ HijackThis™

Unless instructed to by the Technician helping you then do not download this tool.

 

Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.

Please follow the instructions here

How to turn off and turn on System Restore in Windows XP

How to turn off and turn on System Restore in Windows Vista

[Seth]

shouldnt kaspersky sort out any malware issues ?

 

No one antimalware program can catch all infections.

 

If our malware removal procedure doesn't help, then in order to assist you further, we need to know if the problem occurs when using Firefox. It would also be beneficial to know if the problem exists in Safe Mode With Networking.

[jaycabs]

just tried all the scans and they did clear up alot of stuff but didnt stop the problem , but with firefox it all works ok :) . does that help much in finding the problem ?

[Seth]

Since you reset IE7 to no avail, and Firefox works fine on the sites, it seems that another program might be embedding something into IE7 when you open it. Please post a Hijack This log and we can check out that possibility:

 

Download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

• Doubleclick HJTInstall.exe to install HijackThis.
  
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
  
• Click on Install.
  
• It will create a HijackThis icon on the desktop.
  
• Once installed, it will launch Hijackthis.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
  

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

[jaycabs]

Since you reset IE7 to no avail, and Firefox works fine on the sites, it seems that another program might be embedding something into IE7 when you open it. Please post a Hijack This log and we can check out that possibility:

 

Download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

• Doubleclick HJTInstall.exe to install HijackThis.
  
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
  
• Click on Install.
  
• It will create a HijackThis icon on the desktop.
  
• Once installed, it will launch Hijackthis.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
  

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

 

 

 

 

done that now , here you go . i asume you know what to read in this of whats bad ?

 

 

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:43:21, on 10/11/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

C:\Program Files\Kontiki\KService.exe

C:\WINDOWS\System32\PAStiSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\WebUpdateSvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\sm56hlpr.exe

C:\WINDOWS\system32\VTTimer.exe

C:\WINDOWS\system32\VTtrayp.exe

C:\WINDOWS\Philips\SPC500NC\Monitor.exe

C:\Program Files\SweetIM\Messenger\SweetIM.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\vghd\vghd.exe

E:\PROGRAMMES INSTALLED\Vista Inspirat 2\RocketDock\RocketDock.exe

E:\PROGRAMMES INSTALLED\Vista Inspirat 2\UberIcon\UberIcon Manager.exe

E:\PROGRAMMES INSTALLED\Vista Inspirat 2\YzShadow\YzShadow.exe

C:\Program Files\vghd\VirtuaGirl_downloader.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.my.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Mistyped URL: /?url=

O2 - BHO: WhgHelper Class - {00000000-0000-11D1-ABED-709549C10000} - C:\Program Files\WHG\Instant Help Application Update 1.2\IEHelper.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

O4 - HKLM\..\Run: [sMSERIAL] sm56hlpr.exe

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [sPC500NC_Monitor] C:\WINDOWS\Philips\SPC500NC\Monitor.exe

O4 - HKLM\..\Run: [sweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all

O4 - HKCU\..\Run: [WallpaperSpinner] E:\PROGRAMMES INSTALLED\WallpaperSpinner\WallpaperSpinner.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: DesktopVideoPlayer.LNK = C:\Program Files\vghd\vghd.exe

O4 - Startup: RocketDock.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\RocketDock\RocketDock.exe

O4 - Startup: TransBar.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\TransBar\TransBar.exe

O4 - Startup: UberIcon.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\UberIcon\UberIcon Manager.exe

O4 - Startup: Y'z Shadow.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\YzShadow\YzShadow.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll

O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/pcpitstop.cab

O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1169055446140

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1196213035578

O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://crucial.com/controls/cpcScanner.cab

O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - https://livenj04.custhelp.com/8201-b499h/rnl/java/RntX.cab

O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100

O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize2/pcpitstop2.dll

O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe

O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe

O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

O23 - Service: Web Update Service by PowerProgrammer (WebUpdate) - Data Perceptions / PowerProgrammer - C:\WINDOWS\system32\WebUpdateSvc.exe

 

--

End of file - 9358 bytes

[Seth]

I have to leave, but I'll be back in a couple of hours to check out the log.

[jaycabs]

I have to leave, but I'll be back in a couple of hours to check out the log.

 

 

cheers seth , i might b asleep in couple of hours though lol .

[Seth]

Nothing in the log accounts for the issue.

 

At this point, I would remove IE 7 from Add/Remove programs, then reinstall it. Following that if the problem persists, run the IE reset again:

 

 

1.Open Internet Explorer 7.

2.Click Tools, and then click Internet Options.

3.Click the Advanced tab.

4.Under Reset Internet Explorer Settings, click Reset.

 

...be sure you click on Reset and not "Restore Advanced Settings".

Edited November 11, 2008 by Seth

[RandyL]

jay I'm a little confused here. Help me out if you can please.

 

You say you reset IE7. If you did all of IE's add on toolbars shouldn't be running. Your log shows you still have some like the Yahoo toolbar. Granted I'm not a log expert.

 

Seth there are some other log entries I'm not sure about either but I am suspect. Can you look please.

[Seth]

I was confused by that as well Randy. So after I saw the log yesterday, I ran an IE7 reset which removed my Google toolbar, yet HijackThis still showed it. Still being skeptical, I suggested the reset again.

 

As far as the log goes, there are a couple of gray area entries (an adware program that will generate some popups), but other than that, I don't see anything of significance. What items are you concerned about?

[RandyL]

Hi Seth. Below are the ones I was talking about. Now I know that the reset would still leave the toolbars showing in the log. Thanks.

 

C:\Program Files\vghd\vghd.exe

 

C:\Program Files\vghd\VirtuaGirl_downloader.exe

 

O2 - BHO: WhgHelper Class - {00000000-0000-11D1-ABED-709549C10000} - C:\Program Files\WHG\Instant Help Application Update 1.2\IEHelper.dll

 

O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

 

O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

 

O4 - HKLM\..\Run: [sweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe

[Seth]

NP my friend.

 

The entries refer to two applications.

 

The former will generate pron popups, the latter will skew search results.

 

Neither is significant to the issue, but poster education is in order.

[jaycabs]

still waiting to get the time to reinstall ie7 lol, not much time around work and being so tired :( i will get round to it though and tell you if it fixies the problem

[jaycabs]

cant find any were in add or remove , ie7 and looking on the net every were seems to say look for it there to remove it , i tried to over install ie7 that way and it just doesnt want to know as it tells me to look for updates but when i do that there is and active x needed but obviously with this probelm i have , the active x wont come up like it use to at the top of the screen .

 

i know ie8 beta installs to replace ie7 but as you know earlier were i said that didnt help.

 

any ideas ????

[roleli]

It seems your problem is JavaScript is not running. JavaScript, a client side interpreter, allows the things you are talking about to work.

 

See this link. I have posted a possible solution at the end

 

http://extremetechsupport.com/forum/malware-removal-av-firewalls-etc/2765-javascipt-problems-ie7-and-vista-generally.html