IE wont let me go to some pages

[shandyobe]

Need help, I am not very good with PC. I order my groceries on the web for delivery and now I cannot. Have tried to fix but cant. I have a work laptop (Dell) that I have been misusing to do this as I had a car accident and was provided the laptop to help me work from home and have using it for web stuff as well so cant ask work technicians for help!

I have windows 2000 5.00.2195 Service Pack 4

I have IE 6.0.2800.1106

I have VPN client

I have ZoneLabs Fire Wall stuff

I have Trend Office Scan client for virus's

I have tried scanning my c; drive for virus's and it said there wernt any.
I have turned off the firewall completely and it didnt help
I have rebooted and restarted and shut down.
I have cleaned out the windows temp file
I have deleted cookies
I have gone to www.microsoft.com and downloaded 15 critical updates for windows

Still no help. What happens is that some web pages are fine. Google, ebay and stuff like this one. then with some like www.sainsburys.com that page loads fine but when I click on the link to sainsburysforyou.com the page loads for a second and then its disappears. The window is open but it wont work. The bottom left of the window says 'done' but there is nothing there.


I also tried going straight to the www.sainsburysforyou.com and the same thing happened, it loaded for a second then went.

I also have this problem with other websites like www.tesco.com when I click on the groceries link.

I dont know if is related but I also get an error sometimes that says

Internet explorer cannot open the internet site
http://forums.techguy.org/showthread.php?p=1942563#post1942563.


I usually click ok and then backspace and the page then displays.

I dont know if it is related but lately when I search google I also have a problem with the links to pages. It comes up NTSEARCH all the times and highlights some words on pages.

Can someone help me? I have tried other grocery sites as I usually use Tesco but then sainsburys didnt work and even acado didnt work! I need to be able to order on the web.......

Thankyou in advance for your kindess.

 

[etaf]

you may find its java
try this

for java go here
http://www.bodo.com/javame.htm
look for two things
1) the following text displayed
YES!...IF YOU CAN READ THIS, YOU ARE JavaScript ENABLED!
2) black box with wiggling text

post results

also this may help
try and see if you can open this window goto a site called www.keats.biz - then going onto the "hazelmere" button then search for "properties in this area" button, is this opening a blank screen. IF so this may fix it
With IE closed, Start, Run, REGSVR32 URLMON.DLL, OK. Then open IE, Tools, Internet Options, Programs, Reset Web Settings button.

Have you attempted to click "enable" on the Custom Security levels?
- In IE, click TOOLS
- Click INTERNET OPTIONS
- Click SECURITY tab
- For both INTERNET and LOCAL INTRANET click CUSTOM LEVEL and look at your Java settings. Enable anything listed as Prompt or disable.


This set will show you your java status
https://www.clipstream.com/help/visitorhelp.shtml

 

[shandyobe]

Etaf

Went to Bodo.com - could see both the text and wiggling text box.

Went to keats.biz and had the actual problem occur. Page loaded for about a second and then it went blank and the bottom left said 'done'.

Customised the secuity levels as informed and rebooted - still no change.

Went to clipstream and got the following information;

Java Enabled: Enabled
Java Vendor: Microsoft Corp.
Java Version: 1.1.4

I have tried to attach a bmp file with the error message I keep getting as well in case it has something to do with it. I also am having the worst trouble with something called ntsearch.com. Could this have anything to do with it?

ntsearch on google takes away the links and instead underlines words and when you click on the links it goes to ntsearch page.

Thanks for your help.... any else worth trying?

 

[shandyobe]

Etaf

I downloaded and ran a program called sypybot search and destroy. noticed that someone else recomended it on this site. Since then I have had no more errors and I can now get the pages I couldnt before. The program destroyed 74 things that shouldnt be there. My PC is running 100 times faster on the internet and bootup and I have about half the popups!

Thanks for you help and I know its only been 2 hours - but I will see how I go over the next few days. Sorry to hassel you and maybe now I can eat!!

 

[etaf]

oh spyware - lets make sure we have got everything then.

Do you have a current upto date virus scanner - if so has it run clean for a full scan - if not runit - if you dont have a scanner go here for online versions
http://forums.techguy.org/t110854.html

Then please do the following - NOTE I'm not an expert so we need a secruity guru to look over your log.

HIJACK THIS:

Download and copy hijackthis to its own folder , it makes backups so keeping them separate and available can be useful.

Note the Spyware tools websites are very often under attack and so I have provided more than 1 location to download from:

http://www.tomcoyote.org/hjt/
http://209.133.47.200/~merijn/downloads.html
http://www.thespykiller.co.uk/
http://www.majorgeeks.com/download3155.html
http://www.sherrylynn.us/privacypolicy (this has an older version 1.97 - if you can not get to any of the above sites)

Close all open windows and open Hijack This. Click “Scan”. When the scan is finished (it only takes a second), the scan button will change to “Save Log”.
Click on “Save Log” and then save it to NotePad.
Click on “Edit” – “Select all” – “copy” and then “paste” into the thread.
DO NOT FIX ANYTHING wait advice from one of the many security experts in this forum.

I currently do not have the skill/competence to advise and poor advice can be far more damaging to your PC with this software, and so I will be unable to add any advice on the log and so will nolonger be replying to your post with regards to the HJT issue, so please have patience and wait for one of the secruity experts to provide further detailed advice

i will however, be notified when you post the log

 

[shandyobe]

Etaf

Again I thank you soooo much for you help! I have run my virus scanner three times and it says I am clean each time.

I have gone to Hijackthis and her is the log:

Logfile of HijackThis v1.98.2
Scan saved at 14:00:25, on 15/09/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\System32\S24EvMon.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINNT\system32\hidserv.exe
C:\OfficeScan NT\ntrtscan.exe
C:\WINNT\System32\RegSrvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\RoamMgr.exe
C:\WINNT\system32\MSTask.exe
C:\OfficeScan NT\tmlisten.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\OfficeScan NT\ofcdog.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\MsPMSPSv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Intel\Switching\User\RoamSvc.exe
C:\WINNT\system32\ZCfgSvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\carpserv.exe
C:\WINNT\system32\atiptaxx.exe
C:\OfficeScan NT\pccntmon.exe
C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINNT\system32\P2P Networking\P2P Networking.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
C:\WINNT\system32\MDM.EXE
C:\Documents and Settings\SFDHumRes1\Desktop\Hijak folder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R3 - URLSearchHook: (no name) - _{0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SDWin32 Class - {5FA6752A-C4A0-4222-88C2-928AE5AB4966} - C:\WINNT\system32\SWin32.dll
O3 - Toolbar: @msdxmLC.dll,[email protected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [projselector] "C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe" -r
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int113777.exe -auto
O4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [Adstartup] C:\WINNT\system32\automove.exe
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {10000000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://www.free32.com/POP.CHM::/sp.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {2048B51E-8D74-4762-82CE-B48CF545EEEA} - http://62.4.84.150/data/sc.cab
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.websearch.com/Dnl/T_50144/QDow_AS2.cab
O16 - DPF: {9b935470-ad4a-11d5-b63e-00c04faedb18} -
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.hostance.net/dialer/1025972.exe
O16 - DPF: {FFFF0003-0001-101A-A3C9-08002B23E0CC} - http://direct.data-line.us/gbn1176.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{915C9F9E-5694-4746-81E7-DACE10CC96A1}: NameServer = 213.1.119.99 213.1.119.100

 

[cybertech]

Run HJT again and put a check in the following:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R3 - URLSearchHook: (no name) - _{0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)
O2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dll
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int113777.exe -auto
O4 - HKLM\..\Run: [P2P Networking] C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [Adstartup] C:\WINNT\system32\automove.exe
O16 - DPF: {10000000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://www.free32.com/POP.CHM::/sp.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {2048B51E-8D74-4762-82CE-B48CF545EEEA} - http://62.4.84.150/data/sc.cab
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.websearch.com/Dnl/T_50144/QDow_AS2.cab
O16 - DPF: {9b935470-ad4a-11d5-b63e-00c04faedb18} -
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.hostance.net/dialer/1025972.exe
O16 - DPF: {FFFF0003-0001-101A-A3C9-08002B23E0CC} - http://direct.data-line.us/gbn1176.exe

Close all applications and browser windows before you click "fix checked".

Go here http://forums.techguy.org/t110854/s.html and run at least 2 of the on-line virus scanners.

Reboot and post another log.