my IE shuts down when I start a download

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by bambam32, Jun 4, 2005.

  1. bambam32

    bambam32 Private E-2

    I can surf the net but when I want to run a download program like Trend micro IE shuts down get the message there has been a problem with explorer. This also happens when I click on search files and folders. I hope someone can help.

    bam
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please run the steps below (do as much as the problems you are having permit):

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    Also to get you started and to reduce the size of your HJT log. Do the following:

    Also look in Add/Remove programs for Internet2 Optimizer and uninstall if found.


    After doing ALL of the above you still have a problem, boot into normal mode and make sure you follow these directions:


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. bambam32

    bambam32 Private E-2

    I got all the steps done in the link that you gave me. I wasnt able to download any of the cleaning tools. I do have adaware, spyblaster already installed in my computer.
     
  4. bambam32

    bambam32 Private E-2

    Here is my attatchment.
     

    Attached Files:

  5. Icelander

    Icelander Private First Class

    All i see wrong and you should fix is this:

    R3 - Default URLSearchHook is missing
    O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program Files\Starware\bin\Starware.dll (file missing)
    O3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dll (file missing)

    click the box next to these and select fix. Remember to have all browser windows closed when clicking fix!

    Hope that solves it.. There might be more that i dont see tho.

    Good luck.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Icelander,

    I appreciate that you are trying to help but you need some more experience before reading HijackThis logs. Stick around and keep reading and learning. A desire to help is great. Adding somemore knowledged learned by reading more of the threads will help get you more experience to recognize some of the problems that can be easily seen in HJT logs. This log is a rather simple one.

    Bambam32,

    Well first you really need to install HijacThis where requested and you must exit browsers before running HijackThis. Your log shows:

    C:\Program Files\Internet Explorer\iexplore.exe
    C:\DOCUME~1\DANNYC~1\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

    You are running HJT directly from the ZIP file which is what we specifically ask that you not do. You will not get any backups running it this way. Please install it as directed.

    If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
    For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.windowsdownloads.com/success.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program Files\Starware\bin\Starware.dll (file missing)
    O3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dll (file missing)
    O4 - HKLM\..\Run: [Aecxawnd] C:\Program Files\Opqcmvu\Mbxlvry.exe
    O16 - DPF: {47CD99DF-8BCF-4B9B-94EF-02E51B2F79DA} - http://www.alwaysupdatednews.com/install/aun_0036.exe
    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab

    After clicking Fix, exit HJT.
    Boot into safe mode and use Windows Explorer to delete:
    C:\Program Files\Opqcmvu <--- the whole folder

    If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

    Now run Ccleaner (installed while running the READ ME FIRST - you may not have this program install yet. If not, just empty your Recycle Bin and Windows Prefetch folder.). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.

    Now we need to Reset Web Settings:
    1) If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
    2) Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
    3) If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

    Now reboot in normal mode and post a new HJT log. And tell us how things are working.
     
  7. bambam32

    bambam32 Private E-2

    I fixed the ones you told me too. still when I go to house trend to run virus scan it closes. I am posting another log. any other ideas on how to scan and fix this virus? norton doesnt see it.

    Bam
     

    Attached Files:

  8. bambam32

    bambam32 Private E-2

    OK I deleted the file you asked me to. ran Ccleaner and also deleted files in prefetch folder. I am still getting explorer will close when I try and run a download ( trend micro ) I will post new log

    I am new to this so I appreciate all your help.

    Bam
     

    Attached Files:

  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    HijackThis is still install incorrectly (read what was requested in my original post again):
    C:\Documents and Settings\DANNY COSTANZO\Start Menu\hijackthisdownload\HijackThis.exe

    You log does not show any problems. How far do you get with TrendMicro? The active x files has installed on your PC. It shows as:

    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab

    You could try having HJT fix the above, line and then try to run Trend Micro again.
    Also you could try running the following version: Trend Micro's online scan with Java

    Also give this a run: RavAntivirus <-- select Auto Clean then click Scan My PC
     
  10. bambam32

    bambam32 Private E-2

    im running the Rav virus scan now. I will let you know how I make out. Hijack zip was the only thing I could download. Unless I saved it wrong who knows, thanks again I hope I can fix this thing.
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes, you downloaded HijackThis.zip and you now extracted hijackthis.exe from the ZIP file, but you extracted it to the wrong place. As I indicated, it should not be in c:\documents and settings (or any subfolder of it).

    Please provide more detail info on your problems with Trend Micro and did you try the Java Version.
     
  12. bambam32

    bambam32 Private E-2

    Rad didnt find anything. I clicked on the link and nothing happened for trend micro's online with java, is there another way to run it?
     
  13. bambam32

    bambam32 Private E-2

    sorry more detail on where I get when I try to run trend micro.

    I get to the trend micro site click on what location ( united states ) then internet explorer has to shut down message.
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you click the word that says: here That is the link!

    Works fine for me! Just tried it now too.
     
  15. bambam32

    bambam32 Private E-2

    "here" in the link you posted? I just see in blue ( TREND MICRO"S ONLINE SCAN WITH JAVA nothing else follows it. Im sorry to be a pain, this issue is just driving me crazy. I also get a dr watson debugger has encountered promblems and is shutting down when I click on start search files and folders. non related to my Browser.
     
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The following is quoted from the READ ME FIRST thread:

    See the word "HERE" that is underlined? It's the link.
     
  17. bambam32

    bambam32 Private E-2

    as soon as I click on the link it says internet explorer has encountered a problem and is closing down. I did a search on google and was able to run Trend micro Beta version and it did find 7 spyware I removed them but problem still exists. I guess we are almost at the end of our rope. Everything else works fine just cant find the problem.
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Also from IE, try clicking Tools, Internet Options, Security, Custom Level. Then select Reset. Then select Medium. Click OK and OK again.

    Any help?
     
  20. bambam32

    bambam32 Private E-2

    got me to the point where it asks if I want to run active x I hit install it goes to run and I see where it asks me to click on the box to start to scan and I get the Same old message IE closing down.. thought you had it that time getting closer
     
  21. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you ever have HJT fix the O16 line I gave you in message # 9?

    I'm not sure what you just tried. Did you just do messages 18 & 19?
     
  22. bambam32

    bambam32 Private E-2

    yes I did everything you asked so far.
     
  23. bambam32

    bambam32 Private E-2

    Thanks so much its 1 am im calling it a night.. if you can think of anything else I will check in the morning. I appreciate all the time you have spent with me so far.

    Bam
     
  24. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  25. bambam32

    bambam32 Private E-2

    As soon as I click on the link IE just closes not even an error message. This virus is a pain to get to!!!!
     
  26. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    On which link? The How to protect link or the Firefox link.

    How are you getting here to MG's and surfing around? Are you able to download anything from anywhere?
     
  27. bambam32

    bambam32 Private E-2

    I can surf the net do searches but as soon as it sees a download it closes. as soon as I hit the foxlink it closed. not even a message.
     
  28. bambam32

    bambam32 Private E-2

    have we given up yet brother. I have no idea what wrong with it..
     
  29. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Create a new user account on the PC. Can you download using the new account?

    Who is your ISP? Do they require a proxy server setting?

    How do you connect to the internet (dial-up, DSL, or cable)?
    Do you use a router?

    You should also check the below out:
    http://www.theeldergeek.com/repair_ie6.htm
     
    Last edited: Jun 7, 2005
  30. bambam32

    bambam32 Private E-2

    this is actually a friends computer. it happened at his house and at mine. We both use a cable. we both have rcn as isp.

    It shuts down also when I just try to search for files and folders. on the c drive so its not only in my explorer..
    I have tried as admin on safe mode still same results
     
  31. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you check out the IE repair link I gave you? If you have a PC that does not have problems, can you download the tools and burn them to CD for your friend to load onto his PC?
     
  32. bambam32

    bambam32 Private E-2

    I have a laptop no burner.. IE might not be the problem though. Remember search file and folder closes the same way..
     
  33. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Both IE and Windows Explorer are impacted by many of the same problems and Windows Explorer is your OS shell. Thus search can be impacted too.

    In message number 5 you said:

    What is the exact message you get?

    Have you ever tried look at your event log to see what software errors may be occurring?
     
  34. bambam32

    bambam32 Private E-2

    How do I look at that event log?
    internet explorer has experienced problems and is shutting down
     
  35. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Click Start, Run and enter eventvwr.msc then click OK!

    Now select Application and look for errors or warnings in the right window pane. Double click them to see more information.

    Obviously look for one related to iexplore.exe
     
  36. bambam32

    bambam32 Private E-2

    what are you looking for exactly I see alot of errors in application and they have different error codes
     
  37. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to look at the most recent ones and see if there are any related to Internet Explorer crashing or shutting down.
     
  38. bambam32

    bambam32 Private E-2

    I had man alot of them are as follows
    Faulting application iexplore.exe version 6.0.2900.2180 faulting module wininet.dll version 6.0.2900.2627 fault address 0x00030302
    another fault address was 0x00030260


    hope thats what you were looking for

    bam
     
  39. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay now that we have that figured out, I think it would be a good idea for you to post a message in the Software Forum. State your problem with IE and provide the event log information. Also reference this thread in the Spyware Forum so they know your have already looked for malware.

    Someone may suggest running "sfc /scannow" from a command prompt.
     
    Last edited: Jun 9, 2005
  40. bambam32

    bambam32 Private E-2

    thank you
     
  41. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  42. bambam32

    bambam32 Private E-2

    I figured out the problem, I had to blow out the inside of the computer. I guess when it started a download it overheated and shut down... You have no Idea how this was driving me crazy,,, THANK YOU VERY MUCH FOR ALL THE ATTEMPTS YOU MADE.

    Bam
     
  43. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome, but it does not sound like (I guess you mean dust) should be causing an inability to download files. If your PC runs well enough to bootup, you should be able to download. If it overheats after awhile, more problems than inability to download would occur.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds