Internet Explorer Problem...

[PsychoTrooper]

mkay, so here goes: when i start up IE, it takes me to "C:\searchpage.html" no matter what i change my homepage too, it always takes me right back to this page. i deleted this page, started up IE, it tells me it cannot find "C:\searchpage.html" and then i cant do anything until i close it. when i close it, however, it places that file back into my C: drive, and the whole thing gets repeated... i uninstalled and reinstalled IE, i ran Spybot and Ad-Aware, got rid of whatever, but nothings helping.
also, if i type into the address bar, say "google.com", it then tells me this: "You try to go to the google.com
For visit this site follow this link: HTTP://google.com (http://HTTP://google.com)
or type in full url (including HTTP://) in the adress bar."
what the hell? any help is muchly appreciated, thanks a lot

[{I}{K}{E}]

check and scan for a Browser Hijacker

you can use spybot or ad aware

[Jg427]

Try HijackThis and CWShreder from http://209.133.47.200/~merijn/downloads.html

[muchspl2]

pwn3d by spyware :lol:
try http://www.spysweeper.com

[PsychoTrooper]

thanks guys, i guess from now on i should scan with at least 5 spyware removers... stupid things...

[PsychoTrooper]

ignore this post, sorry, got it to work, thanks again guys

[ck-uk]

Originally posted by PsychoTrooper@27 April 2004 - 00:10
, i guess from now on i should scan with at least 5 spyware removers... stupid things...
nope...be carefull what you install an where you go m8....

[gungrave]

use a nother explorer

[PsychoTrooper]

ok, im still having problems. now with IE, if i choose the Advanced tab in the Internet Options menu, there is nothing listed there... also, if i go to a IRC search site, when i click on the link, it allows me to open up that room, but it wont copy the commands for me... so i tried uninstalling and reinstalling again, and this is what i get:
http://img57.photobucket.com/albums/v174/TwiztedPh8/IE.jpg

is there any way around this or what? and i do use another broswer, Opera, but my dad prefers IE, so I have to get this working correctly again... again, any help is greatly appreciated, thanks

[muchspl2]

did you run spysweeper like I told you, even gave you the link

[PsychoTrooper]

i did run it and cleaned whatever it found, but that didnt change anything. i still cant access my advanced options, and if i try to install it again in hopes that it will complete the whole thing, it wont even download all the way... thank you though

oh, also, i cant run Norton Antivirus now, it tells me i need Microsoft Internet Explorer 4.01 or higher, this shows my current version:
http://img57.photobucket.com/albums/v174/TwiztedPh8/iep.jpg
hmm...

[Sp-Am]

How'd you get a customized version of IE?

[clocker]

Originally posted by PsychoTrooper@28 April 2004 - 15:36

http://img57.photobucket.com/albums/v174/TwiztedPh8/IE.jpg


Go to:
Start>Run> enter "services.msc" ( no quotes)> make sure that Cryptograhic Services is enabled and started.

[PsychoTrooper]

Originally posted by Sp-Am@29 April 2004 - 22:52
How'd you get a customized version of IE?
i have no idea, thats what happens when it wont install it all the way...
and clocker: i tried that, guess what it tells me? I need Internet Explorer 5.5 or greater to be installed to run this... i give up, this is too much bullshit, im probably just going to reformat over the weekend... thanks a lot for everyone who helped, i really appreciate it

[Jg427]

Originally posted by PsychoTrooper@28 April 2004 - 15:36
  now with IE, if i choose the Advanced tab in the Internet Options menu, there is nothing listed there...
http://www.mvps.org/sramesh2k/IEBlank.htm

[PsychoTrooper]

wow... thank you so very much
i can now see my advanced option menu, but i still do not have a version number, thus not allowing me to open norton nor what clocker suggested

[Jg427]

I think you still have hijacker problems. Spybot is good but it will not catch the newer hijackers that have not been added to it's lists. Hijackthis that I posted earlier will show any changes to your system. It can fix what's needed but you will need to post the log file it makes to figure out what that is. There are several security sites that analyze the log file to help you. Do a google search to find them. Sorry I don't have time to list them, got to go to work.
If you decide to try this, then post a log file here too for us to check out.

[PsychoTrooper]

i decided to post the log file here because with my google search, i only got a bunch of other forums and didnt want to sign up just for this, so here goes:

Logfile of HijackThis v1.97.7
Scan saved at 11:42:59 AM, on 5/1/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\Smtray.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
C:\Program Files\Ad Muncher\AdMunch.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQInet.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AIM\aim.exe
G:\New Folder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://phillies.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Mike\Application Data\Mozilla\Profiles\default\1d4qxn1u.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6F562038-9A9B-4BEB-BC76-48C1E537B9F4} - C:\WINDOWS\System32\asfsibpc.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} - (no file)
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [Ad Muncher] C:\Program Files\Ad Muncher\AdMunch.exe /bt
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=3c01&lc=0409
O16 - DPF: Video Poker - http://download.games.yahoo.com/games/clients/y/vpt0_x.cab
O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks12_x.cab
O16 - DPF: Yahoo! MahJong - http://download.games.yahoo.com/games/clients/y/ot0_x.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...director/sw.cab (http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab)
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha...v45/yacscom.cab (http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200312...meInstaller.exe (http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe)
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab (http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab)
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab

[Jg427]

Looks like spysweeper already cleaned stuff out, but I would fix these entries:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: (no name) - {6F562038-9A9B-4BEB-BC76-48C1E537B9F4} - C:\WINDOWS\System32\asfsibpc.dll (file missing)
O2 - BHO: (no name) - {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} - (no file)

O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200312...meInstaller.exe

Backups of all files you check mark and fix will be in the hijackthis folder.
Have you tried going to windows update to fix your version problem in IE?

[PsychoTrooper]

i downloaded SP1a, but when i go to install it, it tells me that ATAPI.sys is still in use, but no matter what i close, it doesnt effect it any. i went through task manager and closed anything it would let me, but it didnt make a difference...

one more thing, since my IE stopped working, my mIRC stopped working too... any ideas?

[Jg427]

found this with a google search,
http://www.jsiinc.com/SUBP/tip7900/rh7933.htm

http://support.microsoft.com/default.aspx?...kb;en-us;310123 (http://support.microsoft.com/default.aspx?scid=kb;en-us;310123)

[PsychoTrooper]

this is horrible, one of the things told me to open Device Manager, i cant even do that without Internet Explorer 5.5... i went to reformat today too, but the recovery disk that came with the computer is missing, so im all out of things to do... is there anyway to completely uninstall IE, i mean everything that is on this computer involving it, and start over completely? or maybe get an earlier version of IE instead? i dont know, thank you again, i cant say that enough, it means a lot

[Jg427]

I don't think you can completely uninstall IE as it's part of the OS. Try using Opera to go to the windows download site for IE 6 and install that. Then try installing SP1A again. If you still get the same error then try device manager again.

One more suggestion, call Compaq and ask for a repalcement for your recovery disk.


IE 6 service pack 1 download site. (http://www.microsoft.com/windows/ie/downloads/default.asp)

[muchspl2]

your system is pretty fucked to put it mildly
try to dl or find a copy of a OS and reformat/reinstal
Good luck.