PDA

View Full Version : Serious Problems



Ryan
06-01-2006, 03:44 PM
I'm having serious problems with my computer. I can't seem to fix it, and another PC help forum couldn't get it solved.

-Alot of webpages don't display properly on InternetExplorer (or any other browsers connected to IE; Maxthon for example)

However, most of the problems that are on IE, are ok on FireFox.

When I try to use Windows Media Player I get this error message 'An Internal application error has occured.'

I can't play any music at all, no matter what program I use.

And system restore won't work.

I always thought this problem was caused by Avast!, and the people at the other forum I asked for help at mentioned it might be something to do with Avast aswell. But I've removed Avast! and all other Anti-Virus programs, and the problem hasn't gone away.

I really need help on this. Any is greatly appreciated.

tweak'e
06-01-2006, 03:50 PM
first thing is INFO !

what sort of pc?

what OS?

what do you mean by " don't display properly" ? whats it not showing that the other browsers are and what web page is it?

Speedy Gonzales
06-01-2006, 03:52 PM
Get this (http://www.merijn.org/files/hijackthis.zip) from here (http://www.spywareinfo.com/~merijn/)

Unzip this file, into its own folder, and copy and paste the log here.

mark c
06-01-2006, 03:55 PM
If you're running without any AV then not only is your problem not going to go away but also get worse. I'd get AVG for start (and then worry about the 'what is the best AV?')

Tried a repair of IE?

I suggest you check out the FAQs for all the recommendations for malware. Then do at least one online scan. The online scans have found stuff on comps that I thought were clean.

Ryan
06-01-2006, 04:01 PM
first thing is INFO !

what sort of pc?

what OS?

what do you mean by " don't display properly" ? whats it not showing that the other browsers are and what web page is it?
PC- hp pavilion f1523
OS- Windows XP

Ill just use examples for what I mean by they dont display properly, because it's kinda hard to explain.

When I try to click any of the tags (the bold tag for example), they dont click.

And on any boards I goto that have to resize themselves (proboards for example), they dont resize. Take this board for example- http://tommy1334.proboards44.com/index.cgi - look at the way that board resizes itself when you first enter it, my IE wont resize it, it'll still stay wide, and wont resize. Its hard to explain, yeah.

Any thing such as shoutboxes that auto-refresh themselves wont load, or any videos that may be on the webpage wont load.

There is alot of other things that are too hard to explain.

Get this from here

Unzip this file, into its own folder, and copy and paste the log here.
Another forum already check my HiJackThis! logs, but Ill post it anyway.

And mark c, I have another AV now. But I had to remove them all to see if they were causing the problem.


Edit- Here is the log.

Logfile of HijackThis v1.99.1
Scan saved at 3:02:41 AM, on 1/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\crypserv.exe
c:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\WINDOWS\system32\wwSecure.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus1.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe
C:\Program Files\BearShare\BearShare.exe
C:\DOCUME~1\Ryan\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus1.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Use as &Display Picture - C:\Program Files\IEDP2\IEDP.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Money Viewer - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130435188687
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130710663984
O17 - HKLM\System\CCS\Services\Tcpip\..\{3DDB5EE6-FE2C-44C7-953D-007F13DE0C0C}: NameServer = 194.72.0.114 62.6.40.162
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe

tweak'e
06-01-2006, 04:11 PM
sounds like at lot of functions are disabled like javascript and activeX plugins etc. can be caused by infections. run the usuall antivirus and spyware etc first (post hijackthis log) to make sure your pc is clean before repairing. it might be just a basic IE repair but more problems can arrise if there is still infections. naturally take the pc OFF the net.

Ryan
06-01-2006, 04:20 PM
it might be just a basic IE repair
How do I repair IE?

I edited the HJT log into my other post.

pctek
06-01-2006, 04:34 PM
http://www.hijackthis.de/

Paste you hijackthis log in to the box here and click Analyze.

There are a few suspect entries.

Speedy Gonzales
06-01-2006, 04:38 PM
Boot into safe mode, and turn system restore off, and run HJT again. Tick these, and tick fix checked. Tick reboot. See if its any better then.

O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)

O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll

O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)

O4 - Global Startup: BTTray.lnk = ?

O8 - Extra context menu item: Use as &Display Picture - C:\Program Files\IEDP2\IEDP.htm

somebody
06-01-2006, 04:38 PM
How to repair IE.

http://support.microsoft.com/default.aspx?kbid=318378

Ryan
06-01-2006, 05:08 PM
None of this has fixed it. The problems are still there.

mark c
06-01-2006, 05:15 PM
Tried the online scans recommended in the FAQs?

i-gordon
06-01-2006, 06:03 PM
HT Log shows some suspect entrys as already been pointed out by Speedy G. Bear Share is well known for spyware as well as other nastys included in the install process. They are hard to find and hard to remove, and if you do remove them then Bearshare is crippled. I dont know if this is your problem but I would get rid of Bearshare anyway. If you want to use a PTP Client I have been using EMule file sharing for about 3 years without a single problem, no spyware or any other crap. Hope this helps!
Ian

eef2
08-01-2006, 02:41 PM
Ryan, I'm not sure about XP. although I use it at work. At home here, with my Win 98 SE, In IE 6 I hit Start\Run and type "msinfo32" and then go to Tolls\Internet Explorer Repair.
Hope this helps :) :)