Browser Problem...

[ljossberir]

I have quite possibly the oddest problem I've ever had with internet browsing. My IE was acting funny, I can't remember when it started. I would type in websites in the blank space like usual, for instance www.amazon.com or www.msn.com. It would say "could not open the search page" or "could not find page", occasionally it would give me the "page cannot be displayed" thing. Now, I've corrected problems like this before easily. This one is damn tricky. I tried plenty things but could not correct it. The thing that confuses me is that things would happen like this:
1) I type in www.amazon.com and get one of the previous error messages.
3 seconds later,
2) I type in www.amazon.com and it works!

1) I type in www.msn.com and get one of the previous error messages.
3 seconds later,
2) I type in www.msn.com and it works!

Does that make any sense to you? Nothing had changed at all! So, I decided to get Mozilla as my browser. Downloaded it, installed it, used it. Same damn problem. I have no clue what is going on here, let me say though that of the 3 messages this one is the most common: "could not open the search page". Also let me note: this problem seems to be random. Sometimes I will browse for 20 minutes, viewing several different sites with no problem at all, whereas sometimes it would be off an on. I have no viruses or anything. No spyware/adware, I think. I use norton anti-virus fully updated, spybot s&d fully updated, adaware updated, etc. I may have a trojan or something because for the love of me I cannot find a free trojan scanner/eliminator. Perhaps it has something to do with just configuration or something.

Any suggestions?

[Xero Grid]

Well, just in case you have one of the tougher trojans, try AVERT Stinger (http://vil.nai.com/vil/stinger/) (the only thing McAfee did right).
You may have a browser hijacker like CWS. Try CWShredder and HijackThis (http://www.spywareinfo.com/~merijn/downloads.html)

It could also just be your network. Is it stable? Do you see the internet connection icon in the system tray acting funny?

-- Xero Grid --

[ljossberir]

Yep the system is perfectly stable. My parents comp on the same network works perfectly and for 6 months the same network was fine on my comp. Thanks for the links, ill check em out!

Edit: Hijackthis came back with these results, but warned me it's dangerous to delete any of them if I don't know what I'm doing. Can someone tell me which ones should be deleted?


Logfile of HijackThis v1.97.7
Scan saved at 1:05:42 AM, on 5/7/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Documents and Settings\Steel Justice\Local Settings\Temporary Internet Files\Content.IE5\39P58U89\cleaner[2].exe
C:\Documents and Settings\Steel Justice\Desktop\stinger.exe
C:\Documents and Settings\Steel Justice\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://visualtracking.symantec.com/default...&go=65.37.0.233 (http://visualtracking.symantec.com/default.asp?productid=NIS2003&langid=en-us&venid=sym&go=65.37.0.233)
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - HKLM\..\RunOnce: [washindex] C:\Program Files\Washer\washidx.exe "Steel Justice"
O4 - HKLM\..\RunOnce: [RegisterTR] C:\WINDOWS\System32\REGSVR32.EXE /s C:\Program Files\Trojan Remover\TRSHLEX.DLL
O4 - HKCU\..\RunOnce: [washindex] C:\Program Files\Washer\washidx.exe "Steel Justice"
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct1_x.cab
O16 - DPF: {2119776A-F1AD-4FCD-9548-F1E1C615350C} - http://www.stop-sign.com/pub/download/stop-sign_scn.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab (http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120...all/xscan53.cab (http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab)
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab (http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab (http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A64441C0-7308-4FED-B214-E4605CBA9856}: NameServer = 167.206.3.136,167.206.3.202