Internet Explorer problem!

Status
Not open for further replies.
bud8fan said:
thanks for the help but unfortunately that didnt help me either?

Maybe uninstall and re-install my IE??

would you post your hijack log here and get a second opinion?
 
if i could figure out how the $#%^& to get the log to copy and paste I would do it in a jiffy!!!!!

The fist is getting closer and closer to the screen! LOL!
 
nevermind i figured it out.................................duh?
Here it is!


Logfile of HijackThis v1.97.7
Scan saved at 6:52:03 PM, on 9/17/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
H:\WINDOWS\System32\CTsvcCDA.EXE
H:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
H:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
H:\WINDOWS\System32\nvsvc32.exe
H:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
H:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
H:\WINDOWS\System32\MsPMSPSv.exe
H:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
H:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
H:\Program Files\Support.com\bin\tgcmd.exe
H:\Program Files\Common Files\Symantec Shared\ccApp.exe
H:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
H:\Program Files\Creative\ShareDLL\CtNotify.exe
H:\WINDOWS\system32\CTHELPER.EXE
H:\PROGRA~1\MyWay\bar\2.bin\mwsoemon.exe
H:\Program Files\Logitech\iTouch\iTouch.exe
H:\Program Files\Logitech\MouseWare\system\em_exec.exe
H:\Program Files\iTunes\iTunesHelper.exe
H:\Program Files\Creative\ShareDLL\MediaDet.Exe
H:\Program Files\QuickTime\qttask.exe
H:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
H:\Program Files\Common Files\Real\Update_OB\realsched.exe
H:\Program Files\Messenger\msmsgs.exe
H:\PROGRA~1\AIM\aim.exe
H:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
H:\Program Files\iPod\bin\iPodService.exe
H:\Program Files\CheckIt\86\CheckIt86.exe
H:\Program Files\CConnect.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
H:\WINDOWS\system32\wscript.exe
H:\Documents and Settings\Russell Blanchard\Local Settings\Temporary Internet Files\Content.IE5\PWWJT5KT\HijackThis[1].exe
H:\Program Files\Norton SystemWorks\Norton Antivirus\OPScan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.striped-bass.com/StriperTalk/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cox.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - H:\Program Files\MyWay\SearchAt\2.bin\MWSSRCAS.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - H:\Program Files\MyWay\bar\2.bin\MWSBAR.DLL
O2 - BHO: (no name) - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - H:\Program Files\CheckIt\86\CheckIt86.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - H:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - H:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - H:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - H:\Program Files\MyWay\bar\2.bin\MWSBAR.DLL
O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - H:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O4 - HKLM\..\Run: [instal] G:\install\install.exe
O4 - HKLM\..\Run: [BJCFD] H:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [tgcmd] "H:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ccApp] "H:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AcctMgr] H:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [Disc Detector] H:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [UpdReg] H:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [CTStartup] H:\Program Files\Creative\SBAudigy\Program\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] H:\PROGRA~1\MyWay\bar\2.bin\mwsoemon.exe
O4 - HKLM\..\Run: [zBrowser Launcher] H:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [iTunesHelper] H:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "H:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] H:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "H:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] H:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LDM] H:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] H:\PROGRA~1\MyWay\bar\2.bin\mwsoemon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] H:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: MyWebSearch Email Plugin.lnk = H:\Program Files\MyWay\bar\2.bin\MWSOEMON.EXE
O4 - Startup: restart_vs.lnk = G:\Viewsonic.exe
O4 - Global Startup: CheckIt 86.lnk = H:\Program Files\CheckIt\86\CheckIt86.exe
O4 - Global Startup: CorrectConnect.lnk = H:\Program Files\CConnect.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = H:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MyWebSearch Email Plugin.lnk = H:\Program Files\MyWay\bar\2.bin\MWSOEMON.EXE
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm015
O8 - Extra context menu item: Add To CheckIt &86 Trust List - H:\PROGRA~1\CheckIt\86\AddToTrustList.js
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra 'Tools' menuitem: CheckIt &86 (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.cox.net
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://us.creative.com/support/downloads/su/ocx/12119/CTSUEng.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/07209a20e222124b4300/netzip/RdxIE601.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelgraphics.com/bin/cortvrml.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37963.7961921296
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/ActiveX/FileXfer.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://us.creative.com/support/downloads/su/ocx/12119/CTPID.cab
 
maybe one of the moderators will help on this, but I don't see anything except broadjump that comes with cox. it's kind of an adware. it dosn't hurt to uninstall it. export your outlook express files. see if you can disable ie and oe by add/remove win componets. then reinstall using your cox disc.
 
Not so sure I am comfortable with doing what your saying?

I tried the PC Bug doctor at the top of this page and it showed almost 300 errors(thats what the program said anyway!)
The catch with the free download is when you go to fix it you have to pay to get that function to work! Dont really feel like spending $40 only to find it didnt help me!
 
Dont know if this will hep any but this is the error report that is being sent to Microsoft?

H:\DOCUME~1\RUSSEL~\LOCALS~1\TEMP\d9d_appcompat.txt
 
bud8fan said:
Dont know if this will hep any but this is the error report that is being sent to Microsoft?

H:\DOCUME~1\RUSSEL~\LOCALS~1\TEMP\d9d_appcompat.txt

I'm sure you will hear from Bill right away.
Good Luck!
 
When in doubt just dont use it!

Downloaded Firefox and transferred all my bookmarks!

Seems much faster than IE and so far so good!
 
Status
Not open for further replies.
Back
Top Bottom