1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

(Resolved) Error pages on IE6....Hijack

Discussion in 'Earlier Versions of Windows' started by tammy3me, Feb 14, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    I have been having some problems lately w/my IE6 and MSN Explorer. Couldn't access some MSN pages, couldn't add addresses in my contacts on MSN hotmail, etc. Was getting the little exclamation sign in a yellow sign at the bottom of my browser, some kind of browser error. Well, I read a few threads in here and went to my browser options and changed my security settings to low on everything and it seems to work ok now. I am, however, concerned w/the security being so low now. I had run Spybot about 2 weeks ago and was absolutely floored at all the spyware on my computer. I thought I had cleaned it all up but I just downloaded Hijack this and I already have quite a bit more that needed to be cleaned out. I am at a loss as to what to do to keep this stuff off my computer and still be able to access everything. I blame Microsoft, I think they changed a bunch of stuff on their site to make it harder for us who use the free web stuff instead of MSN 8 but I'm probably being paranoid--LOL!! Any insight would be greatly appreciated, and thank you.....I love this site....learning so much! PS.. I did do repair on IE6 SP1.:confused:
     
  2. Davey7549

    Davey7549

    Joined:
    Feb 28, 2001
    Messages:
    11,584
    tammy3me
    Welcome to TSG!

    Lowering your on-board security in IE is not all that bad if you compensate for it by insuring you have an up-to-date virus scanner active and keep it up-to-date. You can always incorporate a firewall from Zonelabs called ZoneAlarm and it is free for personal use. The firewall will alert you to any program trying too connect to the Internet and also anything trying to get in. As far as Spyware you need to do a bit of research before you download and install and Freebies or for that matter any shareware off the Internet, since some shareware proggies are coming with spyware now. If you have a program in mind for download spend a bit of time before hand reviewing the program via www.google.com web and groups both. Chances are if there is spyware associated with it or people have had problems with it there will be entries on Google.

    Lastly set yourself a good maintenance routine with includes running Spybot or AdAware 6.0.

    There is more you can do as far as setting scripting to prompt or disable completely but that may interfere with your browsing experience.

    Just my Two Cents.

    Dave
     
  3. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    Thanks Dave. I think the only sharing program I have is kazaa and I think I cleaned that up already. I have Norton AntiVirus and I also have Norton Internet Security but when I installed the firewall in Norton Internet Security, I kept getting these boxes that pop up on literally every website I went to. I'm not very computer literate but I think it was activex downloads? or just the 1st time I went to a site, I had to allow the cookies(?) to download, I don't know?!?!?! Anyway, it was to difficult to keep it running because others in my family that use my computer did not know what to allow and what not to allow so I was constantly getting called downstairs to help(I think I lost 10 lbs in a week running up and down stairs-lol). So, I uninstalled the firewall. Any suggestions on settings that would make my firewall more friendly and still protective? If not, I will just let things be. My computer seems to be running ok now and I have no problem running regular checks to make sure it's clean, I do that anyway, it's how I learn. I do have one more question, when I run Hijack this and it lists all of the things it finds, some are checked already and others are not. Is it necessary for me to investigate into the ones that aren't checked or are those usually ok. I don't know what they all are and why are there so many? Sorry to be so long, but I have so many questions-LOL!
     
  4. Davey7549

    Davey7549

    Joined:
    Feb 28, 2001
    Messages:
    11,584
    Tammy
    I think I will do the same if that will work for weight reduction!:) ;)

    As far as the firewall it is good to have but you must configure it so it does not drive you nuts. If you get an alert for download and you know the site is safe configure it as a safe site and you will not have to deal with it. I have the Norton Firewall simple:
    1) Personal Firewall Settings = Medium
    2) Internet Access Control = Sites I know are OK are Auto or Permit all
    3) Internet Zone Control = Sites I list as restricted only
    4) Intrusion Protection = Check-mark Detect port scans and Enable Auto Block

    You also have setting in IE\Tools\Internet Options\Security that will pop messages if Security is to High. ActiveX is one. Set you activeX to disable unsigned and prompt for Signed. Java Permissions = High Safety. Scripting I enable but many do not unless they use scripting.

    I have a broadband connection so a firewall is mandatory in my opinion but for dial-up it is not.

    As far as the unchecked ones in Hijack This..... Yes you should investigate what you are removing or you could mess your registry. If you have questions about items create a thread here to ask and I am sure someone will advise you. After awhile you will get the hang of what you are looking at and for.

    Dave
     
  5. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    MOST of what shows up in a Hijack This log is legitimate and should NOT be deleted.

    I hope you didn't do that. Instead, please post the log, and allow us to help you analyze it.
     
  6. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    Thanx all,
    Dave....I have my firewall installed again and I have it configured(default, same as what you posted), and everything seems fine.(Tomorrow, when hubby and kids get on my PC, is when the fun starts--lol)--appreciate the help. I feel more "secure" already!!! By the way, I have a cable connection.

    Tony, the log for Hijack This follows if you wouldn't mind analyzing it. There are none that are checked by default so I am assuming that they are legitimate. The only ones I deleted prior were the ones the popped up checked already. I really don't understand about the "registry", it is an enigma that I hope to conquer soon because it seems to come into play alot when I need to fix things on my PC. I'll learn, hopefully--lol. Thanks in advance for any help u can offer.

    Logfile of HijackThis v1.91.2
    Scan saved at 10:25:50 PM, on 2/15/2003
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.systemaxpc.com
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride=localhost
    O2 - BHO: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\NAVAPW32.EXE
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [CSINJECT.EXE] C:\Program Files\Norton SystemWorks\Norton CleanSweep\CSINJECT.EXE
    O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
    O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
    O4 - User Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Real.com (HKLM)
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Yahoo! Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 - Extra button: ICQ Lite (HKLM)
    O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Messenger (HKLM)
    O14 - IERESET.INF: START_PAGE_URL=http://www.systemaxpc.com
    O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
    O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potb_x.cab
    O16 - DPF: JT's Blocks - http://download.games.yahoo.com/games/clients/y/blt1_x.cab
    O16 - DPF: Yahoo! Dice - http://download.games.yahoo.com/games/clients/y/dct2_x.cab
    O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
    O16 - DPF: {28F00B0F-DC4E-11D3-ABEC-005004A44EEB} (Register Class) - http://content.hiwirenetworks.net/inbrowser/cabfiles/2.5.30/Hiwire.cab
    O16 - DPF: Yahoo! Blackjack (Register Class) - http://download.games.yahoo.com/games/clients/y/jt0_x.cab
    O16 - DPF: Yahoo! Exploder (Register Class) - http://download.games.yahoo.com/games/clients/y/vtk_x.cab
    O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
     
  7. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    OK.....I don't know what is causing this error message, but I believe it has something to do w/advanced options in my IE6 tools menu. Like maybe Java or Script or something. I don't understand what they mean so it's hard for me to tell what's not working properly. I am going to attach a screenshot so you can see the error message I'm getting at the bottom of the page. It's a little exclamation point inside a little yellow sign. I signed into the site ok, but when I push the PLAY NOW button, it won't go. I am at a loss. I got the same error on the hotmail website the other day, as I posted earlier, but when I changed all my security settings to low, it worked. So I did that again, but it didn't work this time. Any ideas anybody?:confused:
     
  8. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    I guess I can't attach the screenshot but the little icon I was talking about comes up on this website too and it said this beside it ..... ! Done but with errors on page ....any ideas. I also can't access some of the sites on msn again either. Same as before. I went into contacts to see if it was the same problem as before and it wouldn't let me do anything again. Little icon popped up at the bottom of browser in the status bar. HELP
     
  9. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    Your log looks fine. No spyware to be seen I'm happy to say.

    The "errors on page" message is usually nothing to worry about. It's not a problem on your side.

    I'd start by resetting the security options to theor defaults.
    You should be able to surf the net without a problem, and as it is now you're at the mercy of all manner of nasty exploits and "drive by" installs.

    I'd start by repairing Internet Explorer:

    Control Panel > Software Add/Remove > MS Internet Explorer > REmove > Repair IE.

    If you're getting any error mesages there, be sure to let us know.

    It can be also helpful to delete your cache folders in MS-DOS, thus forcing Windows to create new ones, containing brand new index.dat files, on reboot.

    Start the computer in MS-DOS mode. As you're running Windows ME, that means starting up with a Boot disk.

    Go to Start > Shutdown > Start the computer in MS-DOS mode.
    Type the following lines, pressing ENTER after each one:

    cd\
    cd windows
    smartdrv
    deltree tempor~1
    deltree history
    deltree cookies


    NOTE: Press Y if you are prompted to confirm any deletion

    Type win (or 'exit'), or hit ctrl-alt-delete followed by clicking enter in order to return to Windows

    NOTE: This is assuming the path to these folders is the default one
    Is they're located elsewhere/named differently, adapt the path accordingly.

    Also do a search for a file called Hosts. It has no extension.

    You'll find it here: c:\windows\hosts

    Rename the file to HostsOld, and see whether that makes a difference.

    Good luck,
     
  10. tammy3me

    tammy3me Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    152
    I found the culprit...or so I think. I believe it was the Ad Blocking option in my firewall that was blocking Pogo and MSN sites. I unchecked it and am able to access all sites fine and I don't get the warning icon in my status bar all the time now. Thanks to all for the advice, you're wonderful to be willing to help.
     
  11. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    You're welcome. :)

    Glad to hear you found the culprit!
     
  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - (Resolved) Error pages
  1. 3dmama
    Replies:
    14
    Views:
    838
  2. wolftechlinnk
    Replies:
    1
    Views:
    761
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/118771

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice