IE won't work, Add/Remove either

Discussion in 'Malware Help (A Specialist Will Reply)' started by ThirdManPro, Jun 13, 2007.

  1. ThirdManPro

    ThirdManPro Private E-2

    First of all, let me just say how awesome this forum is. Secondally, my computer is unable/difficult to connect to the computer since this virus/trojan/whatever got to me. (I am using my friend's computer right next to mine) I read the READ me first thread and ran what programs I could, some would not work due to various reasons. CounterSpy, while I was able to download, would not run on my computer, and the other scanners what scan via a website, were of course unable to do so. Outside of Safe Mode, my computer is also not working, so there is little I can do. Attached, however, is my Hijack This report. I have honestly done more harm than good when trying to help my computer and am glad to have found experts.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Most people are under the very mistaken misconception that HijackThis is a scanning and detection tool. It is not! HijackThis is simply a tool that is used to identify browser hijackers and in some cases it will show entries for some malware that is for instance running at startup. A HijackThis log shows the following:
    • a running process list with no reference to good or bad
    • it lists the contents of a selected group of registry keys that is an an extremely small subset of the tens of thousands of keys that may exist. Again no reference to good or bad.
    • and some of the above keys that are shown may show some non-Microsoft system services that are running. Again with no reference to good or bad.
    The decision on what is good or bad is left a person with significant Windows and malware cleaning experience.

    HijackThis does not come close to showing all malware that could be hiding on a PC. Anyone who has an infected computer and is relying on HijackThis without the benefit of running other scans such as Spybot, Windows Defender, BitDefender & Panda, CCleaner, etc. are more than likely still infected. In most cases, where there is one virus/trojan there are more.

    The goal of this forum is to remove all malware, and this cannot be done properly by just seeing a HijackThis log.

    Your log is a perfect example. Based on your HJT log alone, you have no malware problems and we are finished.

    If you want more help, you will have to try a lot harder in running the READ ME and get some of the other logs. There is no reason why you should not be able to get the GetRunKey and ShowNew logs. Also you did not even uninstall Viewpoint Manager as requested in step 0 of the READ ME. How much did you really try to do?

    You should also tell us exactly what malware problems you are having? Just because Internet Explorer and Add/Remove programs will not work it does not necessarily mean you have malware. Your problems could be within your Windows OS (missing files, corrupted registry....etc). Explain why you cannot boot in normal mode. What happens?

    Did you purchase SpywareDetector? Was it installed before or after your problems started?
     
  3. ThirdManPro

    ThirdManPro Private E-2

    I apologize if I have come off as lazy, but I assure you, I followed the steps and did what I could. The READ me thread listed several things that needed to be done in normal mode, which my computer cannot log onto. I did MSconfig as well as CCleaner. I enabled hidden files to be viewed. I also ran my Spybot. Everything else could not be run due to internet being limited. I apologize once again, but I did try. Again, if my problems are not Malware related, which myself being ignorant, could be, I apologize, but I was led to believe it was Malware.

    When I attempt to load in normal mode, I enter my password twice. (This is a problem, I assume, as before I only had to enter it once.) The log in comes up, I type my password, it states signing in, then signing out, and then the log in pops back up. After the second time, it works. However, once that happens, I can see the background of my desktop, no icons, no taskbar. I have left it alone for an hour and still nothing shows up. Before I came to you for help, when I clicked on IE the browser would open up, and then two seconds later close. A message would then state:
    File Download - Security Warning
    Do you want to save this file?
    Name: navcand
    Type: Unknown file type 2.64 KB
    from: ieframe.dll

    When I attemp to click on Add/Remove, nothing happens. No matter how long I wait, it will not show up.

    I attempted to reinstall windows, but when it asked for my password, it told me my password was invalid three times and then asked me to reboot. My password is correct. So, once again, I suspect Mal play. (a joke)

    I did purchase spyware detector a while ago. It was before the real problems started, and it seemed to help fix a few things, but then of course, things got worse.

    I hope this help and I am willing to do whatever you need. But my options are limited.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you cannot run in normal mode, you should run in safe mode. This is similar to when people cannot run in safe mode....we than say run in normal mode.

    What about GetRunKey and ShowNew? They just batch files and should easily run.

    What about GetRunKey and ShowNew? If HJT can be run these simple batch files should easily be run.

    May or may not be malware. Based on the log you attached, it does not look like malware. That is why I need more logs.

    Also probably not malware. Sounds like an IE7 issue.

    Also may not be malware.

    You don't need a password to reinstall windows from scratch. You do need your Windows Registration Key. If you wish to reinstall, bootup with the CD in the drive and run the CD and do a repartition and reinstall. Just be aware that this would remove all of your data unless you have already backed it up somewhere else that is not on this harddisk.

    It is not very high on the recommended tools to use list.
     
  5. ThirdManPro

    ThirdManPro Private E-2

    Gotcha, run in safe mode, can do. I've attached the new files and runkeys logs. Again, I apologize if this isn't a malware thing. And you're right, I don't need my password to reinstall from scratch, I was just talking about repairing.
    If i have to reinstall from scratch so be it. And thanks for the update about Spyware Detector. If I do have to reinstall from scratch, is there another section where I can get advice about that? I thank you for your advice.
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    As far as I can see from your logs, it is not malware.


    You can work issues like this in the Software Forum. However take a look at this link which relates to your popup message.

    http://www.pc-onlinehelp.com/thread-10000214.aspx
     
    Last edited: Jun 14, 2007
  7. ThirdManPro

    ThirdManPro Private E-2

    Thank you for all your help, I will now redirect to the software section. Thank you also for the link, while it does describe my problem, the fix didn't appear to work, I will see what the software guys say.

    Thanks again.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Another fix I have seen suggested is uninstalling IE 7 and leaving it uninstalled.


    You're welcome!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds