Annoying internet explorer error (xp)

every once in a while (2 hours) this box pop ups

http://img237.imageshack.us/img237/8533/image13lf.png


i scanned my pc with spysweeper adaware etrust aolspyware and norton antivirus..so idk if its spyware or not

please help

 

There was a bug in IE recently that causes this, however it could be many causes.

The first thing I must ask to rule this out is do you have Service Pack 2 installed? If so, do you have all of the updates installed?

If no to the above then surf in to windows updates and get updated.

Let me know!

 

yup..every update is installed...

 

http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

alright attatchment posted..


thx

 

well i left my computer on with aim on...and during the night it would pop up...i got up and closed it about 3 times in the middle of the night...

and it just does it at random times

 

does this have anything to do with spyware "lopdotcom"...cause i ran spysweeper and the daggum stuff would come back...it cleaned it in my memory but every time i would scan it would show again...

 

Very well could be, there is a few things in your log that jumps out at me. Lets see if we cant make a small dent before we do anything manually.

Download this trial version of Ewido Security Suite

• Install ewido security suite
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will have a window come up. One of the buttons on the left is to Update. Click the Update button.and then Start the Update. The update will start and a progress bar will show the updates being installed.
• After it completes the update, click the Scanner button

Now exit Ewido. Now print the below instructions or save them locally because I want you do have no browsers opened and also have no connection to the internet (unplug your cable) while doing the below.

Okay, reboot into safe mode and follow the steps below. (If you have any problems at all trying to get into safe mode to complete these steps, just run them in normal boot mode and make sure you tell me when you come back.)

Open up Ewido and do the following:

• Click on Scanner
• Then click Settings
• Under What to Scan? Select Scan every file
• Then click OK
• Click on Complete System Scan and the scan will start.
• Let the program scan the machine

While the scan is in progress you will be prompted to clean files that are infected. Leave the defaults selections (to Remove and backup) and click OK. To save yourself some time, you can select Perform action with all infections and then click OK. With the option to scan every file, a lot of cookies will be removed.

Once the scan has completed, there will be a button located on the bottom of the screen named Save report

• Click Save report
• Save the report to your desktop or anyplace you will be able to find it to upload here.

Reboot into normal mode and reconnect to the internet.

Come back here and post the Ewido Scan Report along with a fresh HJT log.

 

um will that program mess my computer up since i have notron internet security?

 

alright man thx..

btw wat part of nc are u from?

 

As D3m3nt3d just stated this program is great for the removal of all types of pest. Will be awaiting your results!

 

ok problem..


either i dont know how to put it in safe mode or this is just not cooperating with me..

i held f-8 when the pc restarteded and nothing...

 

Do not hold the key, when you see the BIOS splash screen, start tapping the F8 key.

 

alright its scanning now..im on my other laptop

233 objects found
(of the same thing).

haha il get back to yal when its done...takin a lil while..

thanks again!!!

 

Dang! Will be awaiting your new logs.

Good Luck!

 

alright!

here we go...

 

First, uninstall Ewido as it will block parts of this fix. Also, disable Norton & Spy Sweeper so they will not block anything we try to fix.

Now scan with HijackThis and Check the Boxes for the following:

Make sure All Browser Windows are Closed when you Click FIX.

O2 - BHO: (no name) - {3B37CC8F-9D00-9E8B-5974-75CB587BE497} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Acronis Popup Blocker - {E24AD748-155E-4254-B674-4EDF86E7E1DF} - (no file)

O4 - HKLM\..\Run: [Cool 32 Amen Dale] C:\Documents and Settings\All Users\Application Data\Booboptioncool32\ANTI GRID.exe
O4 - HKCU\..\Run: [HoldPoll] C:\DOCUME~1\SPIROS~1\APPLIC~1\FLAGCD~1\Manager Wave Axis.exe

O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\System32\shdocvw.dll (HKCU)

Again, make sure All Browser Windows are Closed when you Click FIX.

NOW:
Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:

C:\Program Files\AWS ←–– Delete this whole folder if it exist!

C:\Documents and Settings\All Users\Application Data\Booboptioncool32 ←–– Delete this whole folder if it exist!

C:\Documents and Settings\SPIROS~1\Application Data\FLAGCD~1 ←–– Delete this whole folder if it exist!

NEXT:
Run CCleaner to clean up cookies and temp files.

Run full scans with Ad-Aware SE & Spybot S&D and have both programs fix what they find.
Note: Remember to get all updates before doing the scans.

Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.


Reboot to Normal Windows , Scan with HijackThis and attach the new log and let me know how things are running.

 

alright...

the only file i found to delete was the \Booboptioncool32 one.

all the others i could not find



thanks again!!!!

 

Your log is now clean, are you still having the IE problem?

 

alright thanks to the oth of u for helpin me

 

Your Welcome!

Has the problem been resolved?

 

u bet..

 

Great!

One more thing, I recommend your following all of the steps in this thread on How to Protect yourself from malware!

Surf Safely!

 

IT CAME BACK THE NEXT DAY!!

gahh...

now im gonna foloow all these steps again......

 

can someone please help me..i posted a new hijack log..

 

Hi Greeknasty,

Please unzip Pocket KillBox to its own folder.

Then, run KillBox and select the Delete on Reboot option. Enter or Copy and Paste C:\Documents and Settings\All Users\Application Data\Booboptioncool32 into the box and click the red X and then Yes or OK until Killbox reboots your machine.
See if that gets it.

PP

 

thx man.it worked...

now lets see if it stays gone...cause it came back last time

 

Sorry I didnt reply, I stay in the Spyware Forum most of the time so I dont usually drop in here.

If the problem comes back again post in the Spyware Forum and we will look deep for hidden problems.