I.E. :(

Viruses and worms
1

Okay i’m not sure what is going on here…but i have windows 98se, intel celeron proc., avst antivirus, spybot S&d hi jack this…

Everytime I go on the internet (I mean EVERYTIME) I get an error message saying that internet explorer caused a problem and has to shut down ( there are two buttons at the bottom …“send error report” and “dont send” or if the message doesn’t pop up while im on the internet, it pops up after I close the browser…What is this? I scanned and scanned with avast and spybot…

ps. where do i submit my hi-jack this log to be anylized? i forgot :-[

Thanks!

2
  • Remove IE
  • run CCleaner
  • reboot
  • reinstall IE
    See if that solves it.

And for HijackThis, click on the link in my signature

3

:slight_smile: To “Send Error Report” means that Microsoft scans your
computer for what is wrong, then they will send back to
you their “evaluation” of what they think is wrong; they
will offer “recommendations” usually as to “correct” the
problem. When I “removed” IE on my Win 98SE, I never
did find a way to “re-install” it, probably because that
computer was given to me so I did NOT have the OS CD.

4

I have a cd to reinstall ie or netscape…I think i’ll install netcape…less problems

5

I understand that Internet explorer can be repaired through ADD/remove Programs similar to other programs where you hit delete and you get the option to repair . Windows then does an overwrite of IE.
hope this helps :slight_smile:

6

Only, maybe, in Windows 98 or Millenium.
I don’t think you would be able to do that in XP without problems… :-\

7

bblllgggaaahhhh!!!
Okay I THINK i fixed the problem…even thought it took me about 6 tries and 3 hours!!! lol

first I installed netscape with the CD…But i didn’t like it becasue I couldn’t install the dogpile toolbar and pop-up blocker…so I tried to fix IE like Cloussau said…And it said it can’t fix it???

Then I re-installed IE with the CD…An dit installed a very old version of IE (slaps head)…Dogpile woudn’t accept it…so…

I went to microsoft and downloaded V6 of IE. I found it in “My computer” Installed it…took forever BTW…And Voila!!! I’m back here 3 hours later typing this…keep ur fingers crossed that it doesn’t happen again!! if it does…

(in schwartsinagger voice) …i’ll be back!

8

Never mind…it’s still happening…:frowning:

ill post my hi-jack this log…it’s my only hope…

9

you might like to check your spybot tools in advanced mode has an LSP fix that might be of help if that is the problem.
just a possibility. good luck

10

Kute, what about overinstallation all Windows?
Can solve the problem and you won’t lose your programs, settings, data, files, etc.
Just choose ‘Repair’ installation of Windows and install ‘over’ the old installation.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;315341
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314058
http://www.webtree.ca/windowsxp/repair_xp.htm

11

That sounds like it could really hepp tech, but I don’t have windows XP. I have windows 98SE!

12

It will work the same, or easier I think… Overinstallation of Windows 98 is always a possibility…
You’ll lose only Windows Updates.

13

Eddy, your software isn’t working for me…t says to rename it to something else and then it shuts down…only hi-jack this works

14

Can you add the HJT log to your next post?
Have you cosidered trying out firefox or opera as an alternative?
as kitty no7 does that mean you only have 2 lives left? ;D

15

okay im alittle freaked out right now…my pc just turned on by itself like 10 mins ago…And i was sleeping like ten feet away from it so theres no way i turned it on…I shut it down before i went to bed too…not properly tho…But this never ever happened before ever…iv’e even turned it off inprperly before and it never did this…shutters
no that does not mean i only have two lives left…I just happen to like the numer 7 in roman numeral okay?? Wanna fight about it…eh? lol jj

16

Anything with dogpile.com is okay…im not sure why main page shows up twice…oh well.

Logfile of HijackThis v1.99.1
Scan saved at 5:34:31 AM, on 11/2/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\NETSCAPE.EXE
C:\PROGRAM FILES\HILOA\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/info.dogpl/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/info.dogpl/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.dogpile.com/info.dogpl.toolbar/dog/forms/search.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.dogpile.com/info.dogpl.toolbar/dog/forms/search.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Dogpile Toolbar - {5E92F538-B50B-46c5-9C5F-C6EECED3F6C6} - C:\PROGRAM FILES\DOGPILETOOLBAR\INSPTBAR.DLL
O4 - HKLM..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM..\Run: [SystemTray] SysTray.Exe
O4 - HKLM..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM..\Run: [LoadQM] loadqm.exe
O4 - HKLM..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
O4 - HKLM..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
O4 - HKLM..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O8 - Extra context menu item: Dogpile Cursor Search - C:\WINDOWS\All Users\Application Data\Infospace\DogpileToolbar\contextsearch.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: ChatSpace Full Java Client 4.0.0.301 - http://chat.goarmy.com:8563/Java/cfs40301.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.com/resources/MsnPUpld.cab

17

:slight_smile: Coming from an antiSPYWARE “orientation”, I had never
heard of “Dogpile Search Toolbar”, so I browsed through
several reputable antispyware sites and found the
following from www.spywareguide.com :
"Full Name: Dogpile Search Toolbar Websearch
Type: Adware
Created by: InfoSpace, Inc.
SG Index: 4 [Explain]
Official Description: A toolbar plugin for IE that allows you to perform searches.
Comment: From their own pages:

In the course of using the Downloadable Toolbar, the Downloadable Toolbar automatically records certain information about your use of the Downloadable Toolbar and the Internet: time and date of login; duration of session; URL hits during session; advertisements served during the session via the Downloadable Toolbar; software add-ons installed via the Downloadable Toolbar; when you send a message sent via the Downloadable Toolbar, the time you send the message and the recipient’s user name or email address. This information enables us to catalog traffic patterns and other usage statistics, which helps us better tailor our services to the needs of our users.

Dogpile writes to us “The toolbar is not designed to collect user information, email addresses, or other personal information. There never has been any login information. It does not monitor the user’s activity. The only information that is collected is what is collected by the webservers
serving the Dogpile site. That includes basic information collected by all webserves such as browser type, ip address, time, url requested. The
site does some basic reporting functions such as number of users visiting different areas. This information is not associated with any personally identifiable users and it used by us to know which services are popular and which are not. The toolbar does not hijack anyone’s browser. The only settings changed are homepage, search, and autosearch and only when the user chooses those options. The user is free to change those settings and we don’t try to interfere with that. The toolbar has a very simple uninstall function that does not leave hidden applications
behind.”

This is the revised privacy policy.
http://www.dogpile.com/info.dogpl/tbar/privacy.htm
Information URL: http://www.dogpile.com/info.dogpl/tbar/
Download URL: http://www.dogpile.com/info.dogpl/tbar/step2.htm?

Removal tools: List of products that detect/remove/protect against Dogpile Search Toolbar:

X-Cleaner
RegBlock "

This toolbar is spying on you !! And is generating the popups
you are getting. During my search, I came across a logfile
of the reputable SpySweeper program, which advised removing the InfoSpace “tracking cookies” and all “traces”
of it . Part of Dogpile Search engine uses “Ask Jeeves” which
is now known as a adware/spyware program. I cannot
encourage you enough to UNINSTALL the “toolbar” ASAP !
If you want a Search toolbar ( which I do not feel is
necessary ), get Google’s .

18

Okay i will, and ill use webroot window washer…with bleach also that other cleaner you gave me…I now have mozilla firefox on my computer…

Sheesh I didn’t know dogpile did that! So do you think this will solve my ie problem?

So is this all I should remove with hi-jack this? or is there other bad stuff in there?

19

Do Not remove everything that Hijackthis detected, trust me. :wink:

Here are some things that you can fix:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/info.dogpl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/info.dogpl/

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.dogpile.com/info.dogpl.toolbar/dog/forms/search.htm

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.dogpile.com/info.dogpl.toolbar/dog/forms/search.htm

O3 - Toolbar: Dogpile Toolbar - {5E92F538-B50B-46c5-9C5F-C6EECED3F6C6} - C:\PROGRAM FILES\DOGPILETOOLBAR\INSPTBAR.DLL

O8 - Extra context menu item: Dogpile Cursor Search - C:\WINDOWS\All Users\Application Data\Infospace\DogpileToolbar\contextsearch.htm

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

If you’re not using a chatroom then you should fix this:

O16 - DPF: ChatSpace Full Java Client 4.0.0.301 - http://chat.goarmy.com:8563/Java/cfs40301.cab
20

If its not too late it might be worth checking ADD/Remove programs listing for Dogpile Toolbar before hitting it with HJT. Add /remove is usually the preferred option where possible :slight_smile: