Internet Help Needed

[Bibbs]

You are more than welcome to pop over :)

I've looked at Task manager when I do it too .. the one iexplore task running (even if there are many windows open) just disapears with the windows.

It's nice to be on the other end of a computer problem for a change .. as I resolve problems for a living, granted that is with bespoke software on UNIX boxes but hey - (and hence the reason I've tried most things suggested already).

The Mozilla one is freaky though .. it's almost as if my firewall just kills the task that opens the site .. I've even shut down the firewall and tried, and it still closes.

[gus]

I've even shut down the firewall and tried, and it still closes.

bugger, that was the next suggestion.

r u running any anitvirus software apart fm the firewall i.e. norton anitvirus etc

if so have you tried disabling that to see if its that which is stopping the operation.

[vmail]

try spybot search and destroy

hijack this

housecall

[Bibbs]

Only the PC-Cillin Filewall and AV suite .. (came free with the Motherboard) and seems to work well on my internal network when testing.

Not got anything else .. Downloading another now.

Also downloaded

Spoybot - it raised issues, but not resolved the problem.

SpyWare Guard (Hijack This a-like) - no issues raised.

and I've still got the problem ..

[vmail]

what issues where they?

run this

http://213.106.121.31/HijackThis.zip

then paste the log here before you do anything

be quick cos Im due for a reboot

[Kenny]

When the windows closes, does that Microsoft message pops up asking if you want to send error or not???

[Bibbs]

Nope no error message .. nothing :(

Installing Hijack now ..

[Bibbs]

Logfile of HijackThis v1.97.7

Scan saved at 22:46:21, on 06/05/2004

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe

C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Analog Devices\SoundMAX\SMTray.exe

C:\WINDOWS\anvshell.exe

C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe

C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\QuickTime\qttask.exe

C:\PROGRA~1\COMMON~1\XCPCSync\TRANSL~1\ErPhn2\ErTray.exe

C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE

C:\Program Files\TDK Systems\Bluetooth Software\BTTray.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\Bibbs\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com/

O1 - Hosts: 127.0.0.9 doxdesk.com

O1 - Hosts: 127.0.0.90 www.safer-networking.org

O1 - Hosts: 127.0.0.91 www.secureie.com

O1 - Hosts: 127.0.0.92 www.security.kolla.de

O1 - Hosts: 127.0.0.93 www.spybot.info

O1 - Hosts: 127.0.0.94 www.spychecker.com

O1 - Hosts: 127.0.0.95 www.spychecker.com

O1 - Hosts: 127.0.0.96 www.spycop.com

O1 - Hosts: 127.0.0.97 www.spyguard.com

O1 - Hosts: 127.0.0.98 www.spykiller.com

O1 - Hosts: 127.0.0.99 www.spyware.co.uk

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Messenger\ycomp.dll

O2 - BHO: NavErrRedir Class - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Messenger\ycomp.dll

O4 - HKLM\..\Run: [iMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe

O4 - HKLM\..\Run: [Anvshell] anvshell.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [LiveNote] livenote.exe

O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe

O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"

O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"

O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [XTNDConnect PC - ErPhn2] C:\PROGRA~1\COMMON~1\XCPCSync\TRANSL~1\ErPhn2\ErTray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet

O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo

O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)

O9 - Extra button: Yahoo! Messenger (HKLM)

O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)

O9 - Extra button: Messenger (HKLM)

O9 - Extra 'Tools' menuitem: Messenger (HKLM)

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...director/sw.cab

O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (AccountTracking Profile Manager Class) - http://moneymanager.egg.com/activex/accounttracking.cab

O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200312...meInstaller.exe

O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...8005.7265277778

O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab

any pron - it's my housemates :)

[vmail]

get rid of

O2 - BHO: NavErrRedir Class - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)

dunno about

O4 - HKLM\..\Run: [Anvshell] anvshell.exe

and remove all

O16

[vmail]

and you housemate is called bibbs?

[gus]

O2 - BHO: NavErrRedir Class - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)

i concur number one

[Bibbs]

Tested and getting an error now .. and a report to MS window ..

"The instruction at "0x63607c12" referenced memory at "0x00000068". The memory could not be "read".

(Bibbs is my PC login too)

[Bibbs]

any ideas now .. I can't find anything on the net about it ..

[vmail]

you still getting that prob, Im running WinDoctor now

[Bibbs]

well XP decided that it needed to re-install itself after all that .. then couldn't read some of the files of the CD ..

So a rebuild of XP tonight then :(

[DeusMR2]

ah well an XP rebuild is always nice to watch B) i do it at least every 6 months, gets rid of cobwebs and such

[vmail]

ok, windoctor, effs up, on the 2nd mirror Raid array, so its due for a chkdsk, mail server is delyed by 4hr, I can now send emails

avast is checking emails and files, but not P2P and Chat, I will find out how to sort it soon

does anyone know anything about XP's HAL?

[ZeroBlade]

guess the security updates mite be in order bibbs. can't say i've had these on my win box. but on the linux box i'm running with an install of Red Hat v9 that i havent updated from a clean install this happens with mozilla. its annoying as hell!

thing is it's bulletproof behind my firewall, and i've not run anything on it that would do such a thing. only stuff like mozilla, emacs, gedit etc.

Don't have the time to troubleshoot it. and like u said it only seems to happen on certain sites. oh and no !Removed! sites btw, just C related :)

-Z

[Razor_Rage]

well XP decided that it needed to re-install itself after all that .. then couldn't read some of the files of the CD ..

So a rebuild of XP tonight then :(

guess that's why you didn't come back on msn yesterday then.

too bad mate :(

[Bibbs]

yeah .. sorry fella .. and my XP install said it couldn't find half the files .. after an hour or swearing I went to bed ..

[ZeroBlade]

yeah .. sorry fella .. and my XP install said it couldn't find half the files .. after an hour or swearing I went to bed ..

restart the install fresh again. sometimes mine complains of a few files on the disc aswell. drives fine tho as it the disc...

either that or partition ur drives, copy all files form the disc over onto a partition and run setup from there.

-Z

[Razor_Rage]

yeah .. sorry fella .. and my XP install said it couldn't find half the files .. after an hour or swearing I went to bed ..

no worries mate :)

[Bibbs]

Will I've had to disk out another HD as my origional one is no longer recognised ..

and my old 98 boots disks will not pick up NTFS disks .. SO ..

So last night I :

1. Installed 98 onto a 500mb HD laying about to have a windows OS.

2. Formatted a 14GB disk laying about to Fat32

3. Then installed XP HOME on this (changing the disk to NTFS)

4. Now trying to upgrade HOME to PRO (as I have alicence for PRO, but not for HOME) but I'm missing about 30 files of the CD. ARGH !!!

5. Turned the whole thing off and went to bed.

[Razor_Rage]

if you have a liscense on the PRO disc then phone Microsoft and speak to them about those missing files, are you running SATA or ATA HD's?

[Bibbs]

I've copied the files from another XP Pro disk and it boots (yay)

But I get the message "A problem preventing Windows from accurately checking the license for this computer. Error code 0X80004005" (boo)

Still not back on my PC.