Hanging up on url's

[cisco2004]

Running Windows 98.

I click on some url's and I hang on it. I get the hourglass waiting, but i'm hung up on it. I've deleted my files and rebooted but the problem is still there.

I also restored back a few days but the problem is still there. I did a repair on IE 6 also. Didn't help.

Any suggestions?

Thanks-

 

[Triple6]

Lets see a Hijackthis log: http://www.spywareinfo.com/~merijn/downloads.html

It could be a related to adware or spyware.

 

[cisco2004]

Sorry, I can't click on a url

 

[cisco2004]

O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: BHODemon.lnk = C:\Program Files\BHODemon\BHODemon.exe
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra 'Tools' menuitem: PopThis! Options... (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38065.3571412037

 

[cisco2004]

Operating System System Model
Windows 98 (build 4.10.1998) Asset Tag: 0123ABC
Processor a Main Circuit Board b
950 megahertz AMD Duron
128 kilobyte primary memory cache
64 kilobyte secondary memory cache Bus Clock: 66 megahertz
BIOS: American Megatrends Inc. 062710 07/15/97
Drives Memory Modules c,d
39.99 Gigabytes Usable Hard Drive Capacity
37.92 Gigabytes Hard Drive Free Space

HL-DT-ST CD-ROM GCR-8523B
Generic floppy disk drive (3.5")

Generic IDE hard disk drive (39.99 GB) -- drive 0, No SMART Driver 240 Megabytes Installed Memory

Slot '0' has 128 MB
Slot '1' has 128 MB
Slot '2' is Empty
Slot '3' is Empty
Local Drive Volumes

c: (on drive 0) 10.48 GB 8.77 GB free
d: (on drive 0) 29.51 GB 29.15 GB free

Logins Network Drives
No details available

Installed Microsoft Hotfixes Printers
Internet Explorer
Q313829 (details...)
Q330994 (details...)
Q832894 (details...)
SP1 (SP1)
Win98.SP1
UPD168115 (details...)
Win98
UPD245729 (details...)
UPD256015 (details...)
UPD259728 (details...)
UPD273991 (details...)
UPD323172 (details...)
UPD323255 (details...)
UPD329115 (details...)
UPD811630 (details...)
UPDQ823559 (details...)
Windows Media Player
WM320920.1 (details...)
WM817787 (details...)


Click here to see all available security Hotfixes.

Marks a HotFix that verifies correctly
Marks a HotFix that fails verification
(Failing hotfixes need to be reinstalled)
An unmarked HotFix lacks the data to allow verification HP D 640 on LPT1:
hp deskjet 656c series on USB/DESKJET_656C/TH2341C0GC
hp deskjet 656c series on USB/DESKJET_656C/TH2341C0GC

Controllers Display
Standard Floppy Disk Controller
Primary IDE controller (dual fifo)
Secondary IDE controller (dual fifo)
SiS 5513 Dual PCI IDE Controller SiS 630/730 [Display adapter]
Delta H-770 [Monitor] (15.7"vis, August 2002)
Bus Adapters Multimedia
SiS 7001 PCI to USB Open Host Controller
SiS 7001 PCI to USB Open Host Controller Gameport Joystick (no joystick connected)
MPU-401 Compatible
SiS Audio Legacy Emulator
SiS PCI Audio Accelerator
Wave Device for Voice Modem
Communications Other Devices
HSP56 MR [Modem]
SiS 900 PCI Fast Ethernet Adapter
Network Card MAC Address: 00:0A:E6:9D:5B:BB
Network IP Address: 169.254.221.107 / 16 Standard 101/102-Key or Microsoft Natural Keyboard
Microsoft PS/2 Port Mouse
USB Root Hub
USB Root Hub
deskjet 656c #TH2341C0GC
Software Licenses

Hewlett-Packard - HPIO VID_03F0&PID_2304
Microsoft - Internet Explorer 55736-OEM-0057144-04986
Microsoft - MediaPlayer 53199-834-7230556-04442
Microsoft - Office 2000 SR-1 Premium 50106-270-0110084-02162
Microsoft - Windows 98 79878-027-3676706-08315 (Key: WGDD3-Y6BXG-6GH6V-JDK72-3TGP6)

Software Versions
Adobe Acrobat ReaderWinZip Computing, Inc.crMicrosoft Excel for Windows) Windows(R) OperMicrosoft CorporationinZip Executable Version 5.0.5.0rosoft Excel for Windows) Windows(R) OperMicrosoft CorporationinZip Executable *
AIDA32 *
Apple Computer, Inc.f - QuickTime?Ç QuickTime 6.5 *
Apple Computer, Inc.i - QuickTimelutions, Inc.Ç QuickTime 6.5ndowscomponent *
Apple Computer, Inc.ows ExplorerI - QuickTimev¶ QuickTime 6.5plication file,… *
Atomic Clock Sync *
Belarc, Inc.P‰Ç - BelManage ClientrontPage(TM)`QÈ Version 6.0n`gÈ *
blindman.exe *
Bruce's Typing Tutor *
ConeXware, Inc.onsole Based Script Host - PowerArchiver 2003Æ Version 8.70Ô Æ *
Definitive Solutions, Inc.Ç - BHODemongÈ Version 1.0.0.3 *
Executive Software International, Inc.p - Diskeeper (TM) Disk Defragmenter1.01.1311.10.199Microsoft® Acces4.10.1998a P6.004.10.19983stem.0 Hel4.72.3110.1t3.3.2.4.9.0.27190.85 Version 7.0.418.0.3.2.4.9.0.27190.85 *
GRISOFT s.r.o.È - AVG Anti-Virus System|Ç Version 6, 0, 0, 0Ç *
GRISOFT(c) SOFTWARE - AVG Anti-Virus Systemv¶ Version 6, 0, 0, 0Ç *
GRISOFT, s.r.o.Uninstaller - AVG Anti-Virus SystemiÇ Version 6, 0, 0, 0 2.8.3 UI *
Hewlett-Packard Co.rosoft(R) Windows(R) Operating System CÇ - HP DeskJetÇ A.03.01.03Ç *
HU *
If you want to undo changes made by Spybot-S&D, use the Recovery instead! *
jiiSoft - IE New Window Maximizerme 6.5erating SystemystemDiskeeper (TM) Disk Defragmenter4.10.1998.10.199Microsoft® Acces4.10WinZip Computing, Inc.stem.0 Hel4.727.0.418.0.3.2.4.9.0.27190.85 Version 2.3.0.20.199Microsoft® Acces4.10WinZip Computing, Inc.stem.0 Hel4.727.0.418.0.3.2.4.9.0.27190.85 *
LAN Application Version 1, 0, 0, 1Æ *
Lavasoft Ad-aware PlusBar for Internet Explorer, email clients, and messenger clientsoÇ Version 6.0.0.0 Anti-Virus Syste4.10.1998jÇ *
Microsoft (r) Windows Script Host Operat1, 0, 0, 1nZip Computing, Inc.st5.00.1691.124.10.1998.3. Version 5.6.0.8515ckard Company64.1 v¶ *
Microsoft (r) Windows Script Hostpplication filestem4.10.1998utoSizer2800.1123cl% Version 5.6.0.8515191.4ft Corporation.10.1693cÇ *
Microsoft Clip GalleryÈ Version 5.2.01.0223 *
Microsoft Corporation - DirectShowSystemil clients, and messenger cl% Version 6.4.07.1121e4.10Microsoft Corporation.10.1693cÇ *
Microsoft Corporation - Windows Telephony Version 1.0.501 *
Microsoft Corporation-Ç - Windows Installer Æ Version 2.0.2600.2Ç *
Microsoft CorporationuickTime 6.5plication file,… - Internet Explorerv¶ Version 6.00.2800.1106Ç *
Microsoft imgstarte Version 1, 0, 0, 1 Messenger * Microsoft imgstartÇ Version 1, 0, 0, 1Ç *
Microsoft Office 2000ice 2000È Version 9.0.38229.0.3508Ð‘È *
Microsoft Office 2000soft Office 2000ice 2000È Version 9.0.3822p—È *
Microsoft Office 2000È Version 9.0.3508Ð‘È *
Microsoft Office 2000‡È Version 9.0.3720p—È *
Microsoft Outlook§Ç Version 9.0.2416à¸Ç *
Microsoft Outlook¼Ç Version 9.0.2416`ÍÇ *
Microsoft PowerPoint for Windows`ÕÇ Version 9.0.3821rporationâÇ *
Microsoft(R) Windows Media Playerrating System.0 Helper Applicat3.3.2.4.07.15.6.0.8515191.4ft Corporation.10.1693cÇ Version 7.10.00.3074å *
Microsoft® AccessøÇ Version 9.0.3822P È *
Microsoft® FrontPage(TM)`QÈ Version 2.0.2.1118È *
Microsoft® FrontPage® 2000È Version 4.0.2.3821È *
Microsoft® Internet Servicesree Edition) WinMicrosoft(R) Windowsu Version 6.1.33.08.3. *
Microsoft® NetMeeting®Outlook§Ç Version 2.115166à¸Ç *
Microsoft® NetMeeting®Ç Version 2.11Å *
MindVisionÈ - Installer VISE 2.8.3 UI Version 2.8.3ŠÇ *
Mozilla Version 1.6: 2004011308 *
Registry Mechanic *
SillySot Software - IconoideE Version 3.3.2.4.07.15.6.0.8515191.4ft Corporation.10.1693cÇ *
Software to remove spyware and similar threats from your computer *
South Bay Softwaret - AutoSizer2800.1123cl% Version 1.4ft Corporation.10.1693cÇ *
Sygate® Security Agent and Personal Firewallg®Ç Version 5.5.00.25166à¸Ç *
TransApp *
Typefast (Typefast) *
Webshots Desktop *
WinEx *
WinZipÇ Version 8.1 (4319) *
WinZipÇ Version 8.1 SR-1 (5266)àeÇ *
Yahoo! Messenger Version 5, 6, 0, 1358ting SystemOperatinImaging Microsoft OfficePop-Up Stopper Free Edition) WinMicrosoft(R) Windowsu *

--------------------------------------------------------------------------------

 

[Triple6]

Thats not the complete log, there should be more info at the top and thats where any toolbars or browser hijackers are listed. If you shutdown or disable your pop-up blocker, does that have effect?

 

[cisco2004]

Logfile of HijackThis v1.97.7
Scan saved at 10:37:48 AM, on 04/18/2004
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\PROGRAM FILES\EXECUTIVE SOFTWARE\DISKEEPERLITE\DKSERVICE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SISSWLED.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\IE NEW WINDOW MAXIMIZER\IEMAXIMIZER.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\PROGRAM FILES\ADVANCED SEARCHBAR\JAMMER.EXE
C:\WINDOWS\WEBSHOTS.SCR
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\ADVANCED SEARCHBAR\FREE WEATHER\WEATHER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\MOZILLA.ORG\MOZILLA\MOZILLA.EXE
C:\MY DOCUMENTS\MY PICTURES\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.f412.mail.yahoo.com/ym/login?.rand=bg0h5mkc896ad
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/yie6/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Yahoo!
O2 - BHO: (no name) - {0549E6CB-9985-42F6-8FD6-4EC017E6AAE1} - C:\PROGRAM FILES\SURFAPPS.COM\POPTHIS! FREE VERSION\POPTHIS.DLL (file missing)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (disabled by BHODemon)
O2 - BHO: (no name) - {77712A64-F30B-47C8-A363-CDA1CEC7DC1B} - C:\PROGRA~1\ADVANC~1\ADVANC~1.DLL
O2 - BHO: (no name) - {09F0F280-FB9A-481B-B69A-CB00DC44D027} - C:\PROGRA~1\ADVANC~1\POPUPJ~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SiSSWLED] C:\WINDOWS\SYSTEM\sisswled.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKLM\..\RunServices: [DkService] C:\Program Files\Executive Software\DiskeeperLite\DkService.exe
O4 - HKCU\..\Run: [IE New Window Maximizer] C:\Program Files\IE New Window Maximizer\iemaximizer.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - HKCU\..\Run: [PopupJammer] C:\PROGRAM FILES\ADVANCED SEARCHBAR\JAMMER.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: BHODemon.lnk = C:\Program Files\BHODemon\BHODemon.exe
O4 - Startup: WEATHER.lnk = C:\Program Files\Advanced Searchbar\Free Weather\weather.exe
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Add to White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\addtolist.js
O8 - Extra context menu item: Delete from White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\delfromlist.js
O9 - Extra 'Tools' menuitem: PopThis! Options... (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38065.3571412037

 

[cisco2004]

I disabled the popup blocker and screensaver but it didn't help.

I am able to navigate by creating a shortcut on the url and then pasteing it to the address bar and clicking go. It's a hassle but at least it gets me there.

 

[Triple6]

The only thing i can think of is uninstall the PopUp stopper and remove these entries:

O2 - BHO: (no name) - {0549E6CB-9985-42F6-8FD6-4EC017E6AAE1} - C:\PROGRAM FILES\SURFAPPS.COM\POPTHIS! FREE VERSION\POPTHIS.DLL (file missing)
O2 - BHO: (no name) - {77712A64-F30B-47C8-A363-CDA1CEC7DC1B} - C:\PROGRA~1\ADVANC~1\ADVANC~1.DLL
O2 - BHO: (no name) - {09F0F280-FB9A-481B-B69A-CB00DC44D027} - C:\PROGRA~1\ADVANC~1\POPUPJ~1.DLL
O4 - HKCU\..\Run: [PopupJammer] C:\PROGRAM FILES\ADVANCED SEARCHBAR\JAMMER.EXE
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: WEATHER.lnk = C:\Program Files\Advanced Searchbar\Free Weather\weather.exe
O8 - Extra context menu item: Add to White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\addtolist.js
O8 - Extra context menu item: Delete from White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\delfromlist.js
O9 - Extra 'Tools' menuitem: PopThis! Options... (HKLM)

 

[cisco2004]

Logfile of HijackThis v1.97.7
Scan saved at 9:02:42 AM, on 04/19/2004
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\PROGRAM FILES\EXECUTIVE SOFTWARE\DISKEEPERLITE\DKSERVICE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SISSWLED.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\IE NEW WINDOW MAXIMIZER\IEMAXIMIZER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\PROGRAM FILES\ADVANCED SEARCHBAR\JAMMER.EXE
C:\WINDOWS\WEBSHOTS.SCR
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\ADVANCED SEARCHBAR\FREE WEATHER\WEATHER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MOZILLA.ORG\MOZILLA\MOZILLA.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.f412.mail.yahoo.com/ym/login?.rand=bg0h5mkc896ad
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/yie6/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/keyword/%s
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (disabled by BHODemon)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SiSSWLED] C:\WINDOWS\SYSTEM\sisswled.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKLM\..\RunServices: [DkService] C:\Program Files\Executive Software\DiskeeperLite\DkService.exe
O4 - HKCU\..\Run: [IE New Window Maximizer] C:\Program Files\IE New Window Maximizer\iemaximizer.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O9 - Extra 'Tools' menuitem: PopThis! Options... (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38065.3571412037

 

[cisco2004]

Restarted computer but I still cannot click on a url. Thanks for your help Triple 6.
If you can think of anything else that might help i'd appreciate it if you would come back into this thread or e-mail me at [email protected]

 

[cisco2004]

Problem solved! Loaded Windows XP...No more problems