Weird browser problem - must use specify protocol

glenm@abcfinancial.com · Apr 13, 2006

I have an XP Pro machine on an 2003 AD that's acting a little strange. When you type an address in the IE 6 SP1 address line, if you don't specify http, ftp, file, etc. it never gets to the page or resource you're looking for. As long as you type http, etc., it acts fine. i.e. http://www.google.com works, www.google.com does not. Other than that, everything else on the machine is fine. If this wasn't the IT directors PC, I would probably just tell them to type http:...

I've run Ad-Aware, Win Defender, and SAV corporate without finding any problems. I didn't see anything in the HJT logs that looks like it shouldn't be there, so I thought I'd post it and see what the guru's thought.

Thanks in advance!

chaslang · Apr 13, 2006

Welcome to Majorgeeks!

Before accepting HijackThis logs we have standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments. You do not have HJT installed correctly. I will give these procedures below after a couple questions.

Questions:

Are the below Proxy settings require by your work location:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 63.99.198.175:8118
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 63.99

2. Why is C:\WINDOWS\system32\verclsid.exe running 24 times?

3. Did you check your Default Prefix settings to make sure they are correct?

If you do not know what this is then just try the below registry patch.

Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
@="http://"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"="http://"
Click to expand...

If you still have problems, you must complete the below.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

.

glenm@abcfinancial.com · Apr 13, 2006

Hey, thanks for your help! I noticed those 24 processes in the log right after I posted this. It turned out to be a Windows update that was installed last night. A removal and reinstallation of the patch has solved the problem for now.

Thanks again!

chaslang · Apr 14, 2006

You're welcome!

Log in or Sign up

Weird browser problem - must use specify protocol

glenm@abcfinancial.com Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

glenm@abcfinancial.com Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member