IE and downloading problem

Discussion in 'Software' started by j_Reez, May 4, 2004.

  1. j_Reez

    j_Reez Private E-2

    Hi guys,
    I have recently been experiencing problems while trying to download files in IE. i run win xp pro and IE 6. Whenever i click a link (left click) it will open a new browser with HTTP:/// in the address bar (yes, 3 front slashes). Occasionally, IE will not open a new browser and will allow the download, but if the link is a button it will never work. The most recent example of my problem occured when i tried to download dx9 from MS' site. the download link is a button and i cant figure out how to get around my problem. i found nothing on search engines for articles or forums of people with a similar problem. any help is appreciated.
    Thank you,
    Justin

    ps: i have ran spybot, ad-aware, and cws-shredder to try and remove any spyware that could be causing this
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  3. j_Reez

    j_Reez Private E-2

    the log..

    Logfile of HijackThis v1.97.7
    Scan saved at 5:24:36 PM, on 5/4/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Mixer.exe
    C:\PROGRA~1\NORTON~1\navapw32.exe
    C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
    C:\Program Files\Logitech\ImageStudio\LogiTray.exe
    C:\Program Files\Messenger\MSMSGS.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Jreezy\Desktop\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: OsbornTech Popup Blocker - {FF1BF4C7-4E08-4A28-A43F-9D60A9F7A880} - C:\WINDOWS\System32\mshelper.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
    O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
    O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
    O4 - HKLM\..\Run: [Microsoft Tray] C:\My Shared Folder\WIN XP SP1 crack.exe
    O4 - HKLM\..\RunServices: [WinSvc32.exe] C:\WINDOWS\System32\MsSvc32\WinSvc32.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Messenger (HKLM)
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {0EC4C9E3-EC6A-11CF-8E3B-444553540000} (WaveTab Control) - http://www.riffinteractive.com/setup/RiffLick.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37649.5772800926
    O16 - DPF: {B3872502-F9FD-4E96-93FF-0D37298F0689} (SOESysInfo Control) - http://everquest2.station.sony.com/beta_reg/soesysinfo.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) - http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab


    sorry if its messed up, i pasted it straight out
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Hmmm! Could you be having a problem with a pirated Win XP? What is this:
    O4 - HKLM\..\Run: [Microsoft Tray] C:\My Shared Folder\WIN XP SP1 crack.exe
     
  5. alanc

    alanc MajorGeek

    O2 - BHO: OsbornTech Popup Blocker - {FF1BF4C7-4E08-4A28-A43F-9D60A9F7A880} - C:\WINDOWS\System32\mshelper.dll

    In HJT, put a check on that line and click 'Fix Checked', then follow the manual removal instructions here:
    http://www.kephyr.com/spywarescanner/library/searchpage.cc/index.phtml


    And I'm interested in the answer to chaslang's question ;)
     
  6. j_Reez

    j_Reez Private E-2

    ok well i bought this computer a few months back from a friend of a friend in college who got a new system and i didnt get any cds other than games....so the windows could be pirated. he knew a lot more about computers than i did :confused: . anyway, i followed your directions and they seemed to have worked. I was able to download my dx9. Thank you
     
  7. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member


    that file or name of file is sort of linked as well to a worm called W32/Nofear@MM spread via Kazaa..

    http://vil.nai.com/vil/content/v_100375.htm
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Good info Halo! Thanks!

    j-Reez, make sure you run a full virus scan (with updated definitions) on this PC. If you do not have a virus scan program, there are many available here: http://www.majorgeeks.com/downloads29.html

    Try one of these:
    http://www.majorgeeks.com/download955.html
    http://www.majorgeeks.com/download1968.html
    http://www.majorgeeks.com/download886.html
     
  9. j_Reez

    j_Reez Private E-2

    hey guys,

    I downloaded and ran Avast! and holy crap it found a lot of stuff. There was a good page of files it called viruses...many were archived files i think with a .zip file extrension...also one in my windows folder called trojan_gen or something to that affect. None of them could be repaired, but i was able to move them to the "virus chest" and manually delete them. this is quite startling. Is there anything else i should do?
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Depends! How is your PC working now? Everything OK? You may have to recheck your system after a reboot since you are running WinXP. This is necessary since some viruses could be stored in system restore. It may be necessary for you to disable system restore, reboot, and then re-run your scan. After that, if everything is clean, re-enable system restore. See this http://support.microsoft.com/default.aspx?scid=kb;en-us;310405&Product=winxp if you do not know how to enable/disable system restore.
     
  11. j_Reez

    j_Reez Private E-2

    ok, well it seems that my computer boots up faster and all my downloads are working fine. i did a rescan and nothing showed up. so i guess all thats left is to thank you all for your help :)
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Great news j_Reez! We are all pleased that we could help.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds