Iexplore And Explorer

**SciManAl** · 01-02-2004, 07:29 PM

to explain what happened, most likely (i have made a few of these in my time.. l0l)
the spyware infected your registry and corrupted IE, try reisntalling IE after cleaning up after the spyware, and spyware remover (the spyware remover will have done its job and removed the infected registry entries and files that resemble spyware.. or they simply took a chunk out of IE that it has been made to rely on) clean up...(this is why sometimes reformat is used instead, it depends on how fucked yup your registry gets... and your OS etc... and whether you will spend the time to clean it up...)

Also do check what is in your startup folder take things out and see if that helps!

Also to check the hardware side of the issue do you have enough ram etc?? please list your stats, this is probably not the problem, but best to check all possiblilities when messing with computers...

**Spicker** · 01-02-2004, 07:31 PM

i seriously think u shud make partitions and REFORMAT

ull see a big speed diff in evrything!

but remember to update ur windows!

**Snee** · 01-02-2004, 07:44 PM

Nice to see you got rid of the spyware, but pest patrol? I've tried it and it reacted to stuff that wasn't spyware.

Get Hijackthis: http://mjc1.com/mirror/hjt/ It may help you clean explorer if there's any leftovers.

@jaigandhi: he can't, he already said that, it's technically impossible.

**mogadishu** · 01-02-2004, 07:59 PM

Originally posted by SnnY@2 January 2004 - 14:44
Nice to see you got rid of the spyware, but pest patrol? I've tried it and it reacted to stuff that wasn't spyware.

Get Hijackthis: http://mjc1.com/mirror/hjt/ It may help you clean explorer if there's any leftovers.

@jaigandhi: he can't, he already said that, it's technically impossible.

yea, i really wish I hadn't used pestpatrol, I should have looked for more reviews before I downloaded it.. I tried to untick stuff I didnt want deleted but it deletedit anyway. Very bad program.

And yes I downloaded the whole suite of programs from the site that has HijackThis!
HickjackThis! didnt detect anything, but they had a program that made a txt file of all the stuff that startsup when I start my computer. Here it is.. anyone see anything fishy?

START UP LIST

StartupList report, 1/2/2004, 3:06:03 PM
StartupList version: 1.52
Started from : I:\Utilities\StartupList.EXE
Detected: Windows 2000 SP4 (WinNT 5.00.2195)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\cisvc.exe
C:\WINNT\System32\svchost.exe
I:\Utilities\Norton Utilities\NPROTECT.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Google\ggviewer67-56.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\DIGStream\digstream.exe
I:\Program Files\QuickTime\qttask.exe
I:\PROGRA~1\Cacheman\Cacheman.exe
D:\OpenOffice.org1.1.0\program\soffice.exe
I:\Utilities\Norton Utilities\SYSDOC32.EXE
I:\Utilities\Norton Utilities\NDD32.EXE
C:\WINNT\System32\cidaemon.exe
I:\Utilities\NavNT\defwatch.exe
C:\WINNT\system32\MsgSys.EXE
I:\Utilities\NavNT\vptray.exe
I:\Program Files\AIM\aim.exe
I:\Utilities\NavNT\VPC32.EXE
I:\Program Files\Overnet\overnet.exe
I:\Program Files\MozillaFirebird\MozillaFirebird.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINNT\system32\notepad.exe
I:\Utilities\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\SAMUEL01\Start Menu\Programs\Startup]
OpenOffice.org 1.1.0.lnk = D:\OpenOffice.org1.1.0\program\quickstart.exe

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Norton System Doctor.lnk = I:\Utilities\Norton Utilities\SYSDOC32.EXE

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINNT\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Synchronization Manager = mobsync.exe /logon
NvCplDaemon = RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
nwiz = nwiz.exe /install
NeroCheck = C:\WINNT\system32\NeroCheck.exe
TkBellExe = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
DIGStream = C:\Program Files\DIGStream\digstream.exe
WinampAgent = I:\Program Files\Winamp\winampa.exe
DeadAIM = rundll32.exe "I:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
QuickTime Task = "I:\Program Files\QuickTime\qttask.exe" -atboottime
vptray = I:\Utilities\NavNT\vptray.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

AIM = I:\Program Files\AIM\aim.exe -cnetwait.odl
TrayDevil = I:\Program Files\TrayDevil\traydevil.exe
Cacheman = I:\PROGRA~1\Cacheman\Cacheman.exe
SpySweeper = I:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
krnil386.exe = C:\WINNT\system32\krnil386.exe

--------------------------------------------------

Shell & screensaver key from C:\WINNT\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=(NONE)
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\AproposClient\AproposPlugin.dll - {01C5BF6C-E699-4CD7-BEA1-786FA05C83AB}
(no name) - I:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - I:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
NavErrRedir Class - (no file) - {5D60FF48-95BE-4956-B4C6-6BB168A70310}
(no name) - c:\winnt\googletoolbar.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - (no file) - {AB9028FB-A775-4608-BAA2-B292D5489E58}
NAV Helper - (no file) - {BDF3E430-B101-42AD-A544-FADC6B084872}

--------------------------------------------------

Enumerating Download Program Files:

[Cpuid Control]
InProcServer32 = C:\WINNT\cpuid.ocx
CODEBASE = http://www.powerleap.com/downloads/cpuid.cab

[dmgrax2Ctrl Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\dmgrax2.dll
CODEBASE = http://www.lxsystems.com/downloads/Install.cab

[Yahoo! Audio Conferencing]
InProcServer32 = C:\WINNT\DOWNLO~1\yacscom.dll
CODEBASE = http://us.chat1.yimg.com/us.yimg.com/i/cha...v45/yacscom.cab

[Symantec AntiVirus scanner]
InProcServer32 = C:\WINNT\Downloaded Program Files\avsniff.dll
CODEBASE = http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab

[YInstStarter Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\yinsthelper.dll
CODEBASE = http://download.yahoo.com/dl/installs/yinst0309.cab

[RdxIE Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\RdxIE.dll
CODEBASE = http://207.188.7.150/071c1be5032e66943306/...ip/RdxIE601.cab

[Symantec RuFSI Utility Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\rufsi.dll
CODEBASE = http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

[HouseCall Control]
InProcServer32 = C:\WINNT\DOWNLO~1\xscan53.ocx
CODEBASE = http://a840.g.akamai.net/7/840/537/2003120...all/xscan53.cab

[Yahoo! Audio UI1]
InProcServer32 = C:\WINNT\Downloaded Program Files\yacsui.dll
CODEBASE = http://chat.yahoo.com/cab/yacsui.cab

[{8AD9C840-044E-11D1-B3E9-00805F499D93}]

[{8EDAD21C-3584-4E66-A8AB-EB0E5584767D}]
CODEBASE = http://toolbar.google.com/data/GoogleActivate.cab

[ActiveScan Installer Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\asinst.dll
CODEBASE = http://www.pandasoftware.com/activescan/as5/asinst.cab

[Update Class]
InProcServer32 = C:\WINNT\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/...37840.762037037

[{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]

[Shockwave Flash Object]
InProcServer32 = C:\WINNT\system32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINNT\Downloaded Program Files\MSNChat45.ocx
CODEBASE = http://chat.msn.com/bin/msnchat45.cab

--------------------------------------------------

Enumerating Winsock LSP files:

Protocol #1: C:\WINNT\system32\inetadpt.dll
Protocol #2: C:\WINNT\system32\inetadpt.dll
Protocol #3: C:\WINNT\system32\inetadpt.dll
Protocol #29: C:\WINNT\system32\inetadpt.dll

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk /r \??\C:

Windows NT 'Wininit.ini':
PendingFileRenameOperations: I:\UTILIT~1\Eset\setup\setup.exe||I:\UTILIT~1\Eset\setup\main.dll||C:\WINNT\system32\imon.dll||I:\UTILIT~1\Eset||I:\Utilities\Eset\Setup\main.dll||I:\Utilities\Eset\Setup\setup.exe||I:\Utilities\Eset\Setup||I:\Utilities\Eset\|||?

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

Network.ConnectionTray: C:\WINNT\system32\NETSHELL.dll
WebCheck: C:\WINNT\system32\webcheck.dll
SysTray: stobject.dll

--------------------------------------------------
End of report, 8,502 bytes
Report generated in 0.140 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

**mogadishu** · 01-03-2004, 03:39 AM

ive rebooted a couple times now and the load time seems to be getting slightly better.. but im not really sure. it might be that im not running certain things.. but its still def slow and ie still doesnt work.

h1 · 01-03-2004, 05:34 AM

Whoa! Maybe you should get rid of some of those running processes or apps that start up on start up (???

) -- like spy sweeper

**ck-uk** · 01-03-2004, 08:34 AM

Yeah mate you could try disabling them.But what i ment.

Not all programs to startup with wins are done in the same way mate.Most of your general apps will just be an entry some where which windows will startup after its been loaded &setup.Others like av/firewall that run full time intergrats in windows through a service in admin tools.& there loaded along with windows along with system stuff,drivers,uitities etc before all your other programs get loaded.You could try disabling a few things in admin tools until you get to the problem.

Thread: Iexplore And Explorer

Thread Tools

Bookmarks

Bookmarks

Posting Permissions